Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json)
Hash identifier: 4uEngXjsJsxw7jth9gSQnfVdZbytf81JZiaN/Jo9CkQ=
Subject key identifier: BB:83:F0:A5:E0:96:13:5B:BD:13:1B:6B:73:3F:3D:0C:CC:C6:A4:61
Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Certificate serial: 019F11F78F22B5B6C1B75DB5DDC2F1DC4350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
Manifest number: 0323
Signing time: Mon 29 Jun 2026 06:01:04 +0000
Manifest this update: Mon 29 Jun 2026 06:01:04 +0000
Manifest next update: Tue 30 Jun 2026 06:01:04 +0000
Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: tyfZ2E6cibROYm7OLcd/XKU1u+MhAwByGc3FCkyFd8M=)
2: W3uokoIan0bL_6hGsLT2Lc4cFQY.roa (hash: lnmDhnBJ1en6JgsP5wQ9r3eh318nNpbuOqRdtOpx05A=)
3: c7-vm7ayWM43onBxMirp6xh4ses.asa (hash: Yn9xC9hv7PLljqa8pOnthNeGkVr/8TT8ccV2WmSMABI=)
4: mqyazNOfM1ZVPm3cOVRYyNHDwpA.roa (hash: C7VZbHKV6HPYsBlX1X4bgcS+0xR52AiRYn6dtHpeMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:8f:22:b5:b6:c1:b7:5d:b5:dd:c2:f1:dc:43:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac
Validity
Not Before: Jun 29 06:01:04 2026 GMT
Not After : Jun 30 06:01:04 2026 GMT
Subject: CN=bb83f0a5e096135bbd131b6b733f3d0cccc6a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:26:6b:be:ee:20:f0:e4:6d:02:10:72:ea:de:
f3:b6:bf:87:ba:2f:fc:94:27:c7:3e:92:f6:50:e0:
d7:08:d7:20:8a:2a:9e:4b:94:2c:52:6c:65:b1:62:
89:47:e9:6c:a1:55:a7:53:4f:85:6a:7f:b1:5d:07:
46:8c:0a:9f:ae:64:86:07:be:f8:b5:58:9b:00:c7:
bb:75:ae:ba:da:63:4f:0e:88:3d:dc:a1:c3:74:d0:
71:de:30:4f:22:ed:58:b2:96:55:3d:d8:40:c8:2f:
8e:e0:80:59:9e:32:2c:c9:32:73:61:5f:77:c6:35:
ac:f7:5d:5c:d0:08:af:62:25:98:64:44:cb:02:9e:
34:85:6d:9b:4c:17:98:16:f4:a0:af:4a:0d:03:d3:
b1:8d:3c:7e:df:23:f2:44:44:39:2b:03:af:ee:1d:
49:a8:4f:22:e0:b6:90:a8:54:22:4b:bf:d5:e0:58:
33:c4:2c:ea:77:9f:ce:99:d8:12:a2:d3:2c:47:3d:
5b:a2:49:03:fe:9e:3f:58:ec:56:4f:bc:d4:9d:2b:
72:a5:a3:f1:2b:bf:62:aa:83:68:17:8c:2f:10:a6:
dc:aa:f1:4e:ea:6c:44:61:a3:de:9d:db:f1:e2:0b:
3c:9b:f0:b0:ea:1e:59:95:6d:df:01:ea:95:a3:19:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:F0:A5:E0:96:13:5B:BD:13:1B:6B:73:3F:3D:0C:CC:C6:A4:61
X509v3 Authority Key Identifier:
keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a7:a0:7a:12:72:fa:4e:2a:0a:b9:ed:ea:e6:30:5e:88:82:
7b:8e:ab:74:df:7b:d0:e8:7a:7c:f9:89:51:4e:f9:c7:1b:74:
a8:f1:d4:c6:32:a2:4b:1f:01:82:c2:f6:6d:90:2f:a1:dc:1b:
8e:16:c2:35:41:f3:32:17:bd:5e:0a:82:2d:83:9e:43:a5:46:
04:57:ad:28:cf:06:a9:22:cf:60:91:b1:40:42:84:6f:05:a1:
f1:3d:9f:d1:f8:29:38:db:93:7d:1d:f3:88:f1:45:63:81:1c:
d8:13:df:b3:22:64:c9:6a:f7:be:77:c7:54:a1:72:22:6e:29:
9d:ab:a5:70:1e:89:22:43:98:24:58:e7:f8:72:f4:04:6c:ff:
b7:73:4b:8f:86:d4:73:07:67:78:f7:70:5d:f0:4a:5e:17:20:
ef:1e:a6:81:5a:fc:e3:85:02:1f:b2:59:b7:21:b1:68:82:5c:
8b:bb:ff:d6:0f:ab:8b:7b:5e:e1:a5:9a:18:4a:75:ab:55:d1:
ed:70:0f:28:86:f8:17:64:42:a8:25:65:84:87:1b:21:ca:b9:
d4:d8:ed:1e:a4:c4:e3:92:52:b8:41:de:50:4d:f5:60:0c:3d:
ac:68:d4:89:15:60:63:5c:7f:fc:07:e8:05:1b:30:36:b3:98:
2e:0a:0f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:06 2026 by rpki-client