Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File: 9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier: 2FoROLiD94MyJqDV47yeQGMdLU8Yb4qrzo/MM3oGGSs=
Subject key identifier: 79:AD:3C:10:E6:37:FC:8C:25:23:6F:50:CF:F7:91:AE:40:4D:C3:B2
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer: /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial: 019F1152889E0E53410DB82C9F2CFDD382F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number: C1
Signing time: Mon 29 Jun 2026 03:00:49 +0000
Manifest this update: Mon 29 Jun 2026 03:00:49 +0000
Manifest next update: Tue 30 Jun 2026 03:00:49 +0000
Files and hashes: 1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: Uv/4W5hiZaknUZHfis5H25JjHOsvCZg8vSRB4Y+6b2Y=)
2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:88:9e:0e:53:41:0d:b8:2c:9f:2c:fd:d3:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Validity
Not Before: Jun 29 03:00:49 2026 GMT
Not After : Jun 30 03:00:49 2026 GMT
Subject: CN=79ad3c10e637fc8c25236f50cff791ae404dc3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:aa:3b:ac:3d:1d:bf:b1:2b:9f:09:89:9e:c7:
49:cf:f8:ef:e3:11:99:bc:43:e4:21:c5:a3:5e:52:
a8:34:b1:94:98:a0:2d:7a:81:3f:47:bf:ee:e0:cc:
99:d2:ef:d5:b8:db:27:8f:6c:a3:41:12:eb:32:d9:
95:a6:c1:ea:13:f5:fa:3e:ac:46:49:e9:6b:99:0f:
49:4d:1e:dd:dd:ef:cb:64:42:a6:83:1f:77:dc:c4:
48:87:f1:0f:5d:ab:58:ce:33:ff:89:d5:e1:85:56:
58:81:6b:73:6a:12:00:35:43:56:50:b6:4a:f5:e7:
84:f6:07:17:75:88:d4:41:e3:c2:64:0f:e7:8c:83:
8a:c5:8c:14:c0:90:7f:3d:a7:16:24:a1:a2:95:bd:
d9:ad:72:1e:d2:51:ec:39:a1:48:d7:6a:bd:27:71:
87:54:9a:8b:28:23:39:12:d5:b6:4b:39:21:83:43:
65:d0:63:2d:0a:1b:e5:0d:1b:65:d5:92:33:56:cc:
69:00:5e:5e:16:5e:dc:5c:95:00:81:e6:c5:f9:b2:
ab:ee:cc:ec:07:bd:2b:20:61:03:c8:49:f4:a8:c0:
68:bd:ec:7f:ea:d3:23:8b:13:00:f3:30:5a:26:98:
ed:a6:ce:c9:2c:1c:1e:02:d3:38:1a:da:ee:b3:4c:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AD:3C:10:E6:37:FC:8C:25:23:6F:50:CF:F7:91:AE:40:4D:C3:B2
X509v3 Authority Key Identifier:
keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:31:5d:3d:8c:f4:7f:01:7c:e5:5d:d8:ca:1b:98:bc:e1:a1:
57:18:89:60:53:8b:f7:d4:04:01:e0:e1:4a:a3:e9:a7:1f:cd:
d0:52:b7:48:99:d6:4a:49:02:a4:d4:38:b5:46:1c:b1:ee:12:
6d:5d:48:b7:66:69:86:42:ee:fa:54:fa:78:32:11:d1:33:04:
e5:90:c4:ff:fd:b6:c4:42:20:4f:53:e2:4a:6f:17:b9:e6:1f:
80:b0:7e:0c:7e:a0:52:44:7e:88:51:e6:0b:53:d1:23:97:f2:
46:d2:8f:13:69:24:36:d2:8c:83:5b:51:a4:eb:37:52:e8:a5:
e8:2b:50:c0:7b:73:93:c1:d0:0d:d7:7b:71:c4:16:61:c3:0c:
80:60:77:85:cc:09:35:10:ee:15:62:c5:d4:28:89:cb:ee:50:
c7:27:83:37:d3:14:8e:36:b4:8b:10:44:50:43:7e:98:3f:c5:
e8:54:1a:30:04:3f:da:5b:80:71:3e:ba:e9:c9:37:18:0c:50:
6f:81:7c:54:e4:80:47:ea:73:03:9c:e1:7b:f5:60:8a:ce:bd:
1b:67:a6:1c:24:22:b2:81:09:18:d1:cf:d1:b4:c1:61:58:d1:
85:23:f1:8d:30:bc:89:b0:32:86:53:e9:6c:e5:c4:dc:42:32:
ba:37:17:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:53 2026 by rpki-client