Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
File: 9SHhdPhPcWWWHUG2jqcmLigzfWk.mft (raw, json)
Hash identifier: nRLHohJd7twgG4pD53iMwcKECQl+SxkB12kkiz48DCs=
Subject key identifier: 95:D2:52:E6:95:05:C7:B1:3A:70:EB:EB:66:46:4B:B2:CA:F2:57:71
Authority key identifier: F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
Certificate issuer: /CN=f521e174f84f7165961d41b68ea7262e28337d69
Certificate serial: 019EFACC03B9EF42F564F7B4923CA0BBCDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
Manifest number: 02FA
Signing time: Wed 24 Jun 2026 18:02:14 +0000
Manifest this update: Wed 24 Jun 2026 18:02:14 +0000
Manifest next update: Thu 25 Jun 2026 18:02:14 +0000
Files and hashes: 1: 1-rxopH5LJ9Uzi5ISHJXR-dur0jc.roa (hash: aHfsmVZKRy+7AFPaygX163J+5qjXxNU2emyKoCQGtN0=)
2: 9SHhdPhPcWWWHUG2jqcmLigzfWk.crl (hash: UEFEjyHG9c8lvbg+Yrz/towP2O0Za6Dbbd1VJyxO660=)
3: F_pPHJDcrHyVOVWzvhakia7DJiQ.roa (hash: tFJBSOLCH7tZWWFthieckptanNdtDSMnw7UCYwe6+Kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cc:03:b9:ef:42:f5:64:f7:b4:92:3c:a0:bb:cd:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f521e174f84f7165961d41b68ea7262e28337d69
Validity
Not Before: Jun 24 18:02:14 2026 GMT
Not After : Jun 25 18:02:14 2026 GMT
Subject: CN=95d252e69505c7b13a70ebeb66464bb2caf25771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:00:75:89:5f:c0:15:e4:c6:66:44:6b:2a:
07:d7:2d:db:b7:de:51:33:0e:ef:f9:3d:f8:63:93:
06:f3:49:8d:47:26:52:17:d8:73:11:d5:c8:fd:a0:
1c:7d:d7:a7:60:7e:a2:d7:5d:8b:8a:19:9b:c9:fe:
5b:c3:57:bf:01:59:8e:67:ba:2c:d7:be:66:52:e3:
59:2e:4a:4f:ee:35:51:1c:8b:9e:6b:30:ff:63:4a:
05:59:53:4c:fe:48:54:f1:4c:db:99:7e:eb:53:8f:
e2:6e:6e:a2:28:bb:00:8e:41:2c:7e:ea:6b:ae:1b:
9a:5f:2c:94:f1:cb:65:30:c7:aa:cc:8b:62:6a:b1:
a1:c8:eb:db:22:cf:0d:fe:f0:4c:38:7f:9d:c4:0c:
58:0b:de:cb:87:0f:b4:d4:c2:13:b7:6f:44:df:4b:
32:db:87:bb:c1:ed:87:a3:f7:be:78:a5:6f:12:4a:
75:eb:0f:eb:bc:e1:eb:b4:4b:08:6b:05:e2:9d:3b:
7d:c7:46:b7:f1:1d:1c:75:e0:1a:e7:48:74:1a:14:
26:66:97:e1:dd:03:3c:d6:f1:1f:40:15:00:51:b9:
79:dd:83:49:22:0a:8e:91:1d:f2:10:c5:d3:8c:a0:
ef:ad:d5:e2:7b:0f:45:e3:42:41:4b:f4:61:7a:84:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D2:52:E6:95:05:C7:B1:3A:70:EB:EB:66:46:4B:B2:CA:F2:57:71
X509v3 Authority Key Identifier:
keyid:F5:21:E1:74:F8:4F:71:65:96:1D:41:B6:8E:A7:26:2E:28:33:7D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SHhdPhPcWWWHUG2jqcmLigzfWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d9a010-d5f7-4661-8d32-dd06111f3f96/1/9SHhdPhPcWWWHUG2jqcmLigzfWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6d:3d:5c:51:09:b1:51:2c:18:fc:80:f4:bb:65:be:04:f7:
fc:9d:74:59:43:22:7f:56:83:98:8a:bd:5e:8b:09:ca:96:f3:
4b:e0:87:e6:da:23:c9:f2:47:5a:3a:0d:2e:c6:ab:04:bf:28:
8c:6f:94:89:8b:43:fb:7b:59:bc:e4:1f:45:14:75:0e:6e:39:
4d:07:e7:8e:58:b2:c5:99:f8:9f:59:7d:a4:ac:49:d3:45:5a:
b4:c9:b3:97:c6:e7:ea:2a:11:f5:11:4d:fd:a3:2a:10:f3:e4:
2d:22:ae:da:90:db:3c:a8:5c:9d:0d:bd:45:b9:ad:14:29:a6:
3a:e0:c8:cb:52:a4:e8:26:1f:9b:fb:44:61:16:93:ca:6a:f3:
f4:60:22:59:11:f8:5a:9c:d2:15:14:5d:83:47:0e:a2:bd:57:
a9:85:4d:ae:dc:2c:b4:e7:83:e7:8a:08:f0:f9:da:7e:d8:ad:
7a:43:f1:c5:17:c0:f7:96:92:94:51:10:d5:bf:f2:4d:da:e2:
53:ac:d6:24:ab:c2:eb:61:3a:07:31:e7:76:94:0f:a4:10:8e:
71:55:ad:8f:89:af:3e:b7:cf:37:a4:d3:21:a0:58:21:fa:23:
99:a3:d7:36:d1:7c:17:88:7f:1b:77:d0:bf:37:7d:f5:a5:7a:
28:b3:c4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:57 2026 by rpki-client