Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
File: 9jXHTatSTz72yWtovplcMCXPD-A.mft (raw, json)
Hash identifier: GC22FLOvVX/q7fCgDeuN9PPwXt78CmV3WXBPZXcOFdU=
Subject key identifier: 42:E5:81:5A:1B:2D:60:D3:5F:60:59:E6:81:0B:D3:43:54:15:C8:28
Authority key identifier: F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
Certificate issuer: /CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Certificate serial: 019F122E66B90AB1C4DDBFB2F37A092F5782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
Manifest number: 014C
Signing time: Mon 29 Jun 2026 07:00:58 +0000
Manifest this update: Mon 29 Jun 2026 07:00:58 +0000
Manifest next update: Tue 30 Jun 2026 07:00:58 +0000
Files and hashes: 1: 9jXHTatSTz72yWtovplcMCXPD-A.crl (hash: a3xIzxcDSRVfs+MRBcucQpTZvAQZ0e0c6/YUGYog2Eo=)
2: JYgzUyiaZYs05bVlx3hglGkBd1Q.roa (hash: BMikKwWOpzTQc4z6QjV3HCSDgmz4fqzntIpupmntBpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:66:b9:0a:b1:c4:dd:bf:b2:f3:7a:09:2f:57:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f635c74dab524f3ef6c96b68be995c3025cf0fe0
Validity
Not Before: Jun 29 07:00:58 2026 GMT
Not After : Jun 30 07:00:58 2026 GMT
Subject: CN=42e5815a1b2d60d35f6059e6810bd3435415c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:23:3e:64:7c:53:f8:9b:aa:8a:4d:08:53:64:
98:c0:9d:4a:a8:1f:ed:c8:96:ce:0a:b8:a6:60:28:
12:22:3e:af:1b:e7:5e:17:86:6d:b5:b7:0b:61:7f:
f5:01:46:5f:5c:9b:bb:41:b5:d6:0d:ee:40:aa:ac:
68:18:b1:7a:25:2f:b4:91:7f:7c:69:39:e5:57:c9:
0b:38:47:10:d3:41:62:db:a1:94:aa:f9:b2:42:bd:
0e:33:2b:5b:21:73:7f:54:d5:a4:66:78:14:57:25:
fe:c9:49:83:84:b5:3b:63:ed:82:2c:be:97:c6:3d:
d5:8c:b9:1c:80:ad:d8:d8:dc:ba:24:97:54:bd:5d:
e2:96:bc:4a:89:e0:d5:5c:bc:73:15:b1:d4:79:0a:
8e:60:20:fe:8f:ca:98:da:12:63:6d:80:e6:5d:49:
f7:bf:6d:8f:02:10:bb:7b:98:98:a2:94:8e:af:c5:
54:26:79:ee:36:5e:e3:ca:42:99:49:1f:4f:c3:f3:
64:20:2e:62:e8:55:47:41:75:ea:49:59:ba:15:7a:
08:ca:ae:07:37:79:d0:ba:ce:8b:87:88:4b:cd:f8:
53:c1:41:b0:2c:b8:7d:58:df:5b:cb:f7:93:4c:0b:
27:eb:3d:f8:fd:56:2b:f9:99:d8:d7:0f:cf:b9:e5:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:81:5A:1B:2D:60:D3:5F:60:59:E6:81:0B:D3:43:54:15:C8:28
X509v3 Authority Key Identifier:
keyid:F6:35:C7:4D:AB:52:4F:3E:F6:C9:6B:68:BE:99:5C:30:25:CF:0F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jXHTatSTz72yWtovplcMCXPD-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/90e80b-402c-4a6d-9737-a8f918435543/1/9jXHTatSTz72yWtovplcMCXPD-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:99:ee:74:91:d4:33:14:3f:93:f1:19:4b:70:6a:4c:aa:49:
7d:be:ce:02:7e:ac:3d:57:fc:9b:96:69:fd:ae:ac:6a:64:6e:
83:a3:1e:86:d4:b5:fb:00:e8:4d:57:4b:01:f3:4c:b5:c8:35:
1b:7b:c5:a7:f6:00:0b:93:6c:d2:b8:e6:bf:26:52:e4:ec:11:
a0:25:03:64:4c:73:d1:77:99:f0:ed:33:6e:76:98:99:5a:86:
78:4c:32:08:b5:ea:39:23:f1:1c:71:f2:09:92:8b:42:eb:2a:
45:22:79:72:06:63:32:74:84:70:b1:28:f2:81:59:12:16:d7:
b7:cf:03:1d:ec:97:66:f0:be:9c:67:e9:cb:45:d8:2f:6c:f2:
91:20:26:75:f5:b9:b8:83:26:02:8a:37:f5:85:1d:51:46:40:
7c:23:c1:7a:c0:43:99:70:fd:75:c5:03:e3:bf:2d:eb:df:b7:
84:b2:cb:f0:1a:31:3c:98:06:5c:52:b3:7a:9f:e8:ea:17:39:
a5:81:e6:9b:ce:59:95:0d:d1:06:f3:2d:05:f5:03:05:fd:48:
a4:b5:b7:b7:01:cb:84:f4:eb:1e:88:82:82:ac:e8:2b:4f:47:
01:55:5a:26:7c:08:c2:16:c4:de:5d:e1:94:5d:b0:e4:d0:7e:
89:ee:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:35 2026 by rpki-client