Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
File: 9aSNNBWgK5T1T-4rZZSPJetPfdo.mft (raw, json)
Hash identifier: t/I4aL0JH+C6gM9529rWse10djnq+RuVO+dvWWhZi30=
Subject key identifier: 2B:BA:F3:30:64:70:53:03:61:7B:C7:94:56:46:52:A9:64:F2:43:56
Authority key identifier: F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
Certificate issuer: /CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Certificate serial: 019F0A06EB693B7FFDF27B41F802B4D8B0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
Manifest number: 2A
Signing time: Sat 27 Jun 2026 17:00:53 +0000
Manifest this update: Sat 27 Jun 2026 17:00:53 +0000
Manifest next update: Sun 28 Jun 2026 17:00:53 +0000
Files and hashes: 1: 9aSNNBWgK5T1T-4rZZSPJetPfdo.crl (hash: T6H0n18MC4EIHaGqAnz5xMjzrhe8BBE1loPYZl3DlrE=)
2: KB-nu_fDuo0XIMgqWugjNtPelKM.asa (hash: xVtyR3/ZytBeSN3L364bzhtV6xgki7m57Wrm3JRE2Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:06:eb:69:3b:7f:fd:f2:7b:41:f8:02:b4:d8:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a48d3415a02b94f54fee2b65948f25eb4f7dda
Validity
Not Before: Jun 27 17:00:53 2026 GMT
Not After : Jun 28 17:00:53 2026 GMT
Subject: CN=2bbaf33064705303617bc794564652a964f24356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:55:72:a2:34:22:62:68:fb:c1:81:01:5d:
29:bb:f4:0e:e4:e5:fc:05:1a:20:03:9d:64:1f:4b:
12:4c:bd:a7:4a:f8:34:26:f6:84:94:f0:46:87:2d:
a8:80:27:8f:26:ad:24:6a:32:d6:88:59:2d:65:46:
bb:29:26:d4:48:8f:08:57:55:62:30:a9:5e:b1:95:
f6:46:e0:62:25:90:30:d7:83:85:a0:e7:39:49:3d:
68:22:f3:62:0c:17:a3:a5:ea:a3:1f:5d:24:c6:9a:
d9:4b:f4:3b:2c:2a:de:19:ac:9a:26:2b:3a:ba:08:
ce:05:56:db:16:0a:88:b9:3c:94:d6:5c:16:03:b5:
74:f7:20:04:42:fb:08:25:45:5d:7d:b2:d1:5b:77:
0c:6f:6f:21:71:57:de:22:61:df:64:d4:f5:09:18:
6e:99:41:6b:7d:41:0c:5f:5f:43:37:6c:cf:69:53:
98:cc:fa:b1:86:6f:1a:aa:f0:93:2a:c4:9b:29:78:
aa:9e:53:0d:a2:34:af:c3:2c:6d:4a:83:e9:26:9a:
9f:95:d4:be:29:70:4b:a8:fd:ab:b8:44:b2:fd:6a:
53:5c:04:98:f5:e0:9c:14:4c:3f:85:7f:6e:86:32:
14:d7:19:49:7d:10:7b:2f:c8:60:b6:83:b0:81:01:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BA:F3:30:64:70:53:03:61:7B:C7:94:56:46:52:A9:64:F2:43:56
X509v3 Authority Key Identifier:
keyid:F5:A4:8D:34:15:A0:2B:94:F5:4F:EE:2B:65:94:8F:25:EB:4F:7D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aSNNBWgK5T1T-4rZZSPJetPfdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/912707-9eaf-4dd7-a559-c9b15ee9fa84/1/9aSNNBWgK5T1T-4rZZSPJetPfdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:15:3a:e5:f2:ab:f6:f7:98:54:ce:27:d5:5a:ea:ad:33:fd:
11:4f:03:09:72:57:ec:78:02:f3:2a:cb:79:f7:99:98:5d:1b:
06:64:c4:83:d5:6d:7e:2e:e5:6c:4f:b7:1d:fb:82:7a:32:5d:
43:3c:40:bb:e8:e1:1f:da:a2:1b:85:f3:4f:cb:16:a4:d8:45:
0d:19:ae:d5:49:a6:28:4b:91:25:92:d2:e9:db:ad:64:39:5b:
02:0d:d6:22:10:36:20:e9:10:7a:1d:b0:e9:30:36:a7:ad:a3:
0c:08:05:46:e6:96:a2:4a:1d:00:ac:f9:3c:55:5d:1f:b7:45:
8d:7b:e7:f6:ea:90:18:cd:f8:fa:d8:38:d3:98:9a:cc:3a:31:
34:b7:2b:dd:36:9b:8b:28:7c:6f:c1:93:da:d6:85:41:64:2a:
2a:49:e7:75:b7:1e:cd:90:8d:f2:7f:05:c4:2d:99:80:97:7f:
07:3f:39:10:05:a5:29:76:7a:0b:27:84:51:e1:3f:a5:05:ed:
bd:e9:39:5c:8c:1f:71:11:03:ed:d9:b7:25:ac:54:f2:b7:33:
b9:66:4b:84:36:97:a7:e0:93:62:a2:8d:cc:59:93:0c:62:1e:
ba:04:d2:13:07:a4:27:2e:2d:fa:55:83:54:17:c9:d9:aa:0d:
4b:66:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 23:23:08 2026 by rpki-client