Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json)
Hash identifier: GkJTfPHxd0v86xusty6Io8VOIY4pG823Edkrf+hPEOg=
Subject key identifier: 4B:BE:1C:55:EE:7F:40:5B:99:95:04:B3:18:96:9E:85:8B:6A:5D:21
Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043
Certificate serial: 019F18305F41CD4B489843777F6D30A11447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
Manifest number: 1986
Signing time: Tue 30 Jun 2026 11:00:50 +0000
Manifest this update: Tue 30 Jun 2026 11:00:50 +0000
Manifest next update: Wed 01 Jul 2026 11:00:50 +0000
Files and hashes: 1: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: eBJCnBEv5P2dOkDgN5r+pRqi3MUYjRlwNE7zNL2ARbI=)
2: d2tSXbQmgx_5joDSWcoPnabG6ts.roa (hash: OeDG3n8yLp+p4vWMH9BV363xFOTnKrmVdLEjiUivNwQ=)
3: ni2pJYsgjdd_PvsJim4HSq8So90.roa (hash: oeFgA//XgCFg9vA4VhOc/9YfMueTyaFUxUNd6kbXTTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:5f:41:cd:4b:48:98:43:77:7f:6d:30:a1:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e9d53310243187083fdc9609735465b1089043
Validity
Not Before: Jun 30 11:00:50 2026 GMT
Not After : Jul 1 11:00:50 2026 GMT
Subject: CN=4bbe1c55ee7f405b999504b318969e858b6a5d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:03:8d:e9:f4:3c:ad:17:5d:e0:3c:4e:03:65:
a9:3a:6b:40:3d:62:99:09:63:e7:b5:0c:24:07:b9:
89:cc:8c:6f:5a:a2:0e:92:0c:5e:14:5e:e9:bc:75:
eb:e0:4a:21:d1:e4:ec:ec:28:f2:1d:8f:40:6a:32:
15:0d:6e:6c:fc:c1:9a:3f:2d:81:dc:82:9a:e6:bd:
ec:88:6b:9a:9d:15:b8:58:72:81:27:5c:1b:7d:67:
9c:50:d4:df:67:4f:09:18:c7:1c:6e:a6:bc:f5:a1:
e9:c7:37:37:87:3f:d0:e7:d6:b5:88:78:f2:57:f4:
18:24:27:e9:47:a4:87:2e:7e:a6:5b:91:09:47:24:
6b:90:0d:47:de:60:e7:46:52:16:5f:66:c4:65:ad:
e3:7a:ed:89:a6:d9:23:e4:f3:de:82:5f:a3:02:a5:
7d:13:76:3a:31:08:01:da:2b:62:bb:0b:29:45:9e:
94:50:9c:4b:d9:bf:a4:90:01:6b:ce:17:8b:25:a7:
e9:68:8f:e7:5f:a1:ac:d6:41:81:72:a4:5c:a1:f4:
ab:36:90:33:a6:e7:93:58:9a:b7:27:6a:f0:bb:34:
43:0e:3a:fd:28:e5:2d:1f:ee:65:06:1d:ef:77:89:
45:67:a4:30:be:71:ae:c9:65:83:b0:11:a9:59:d2:
d6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:1C:55:EE:7F:40:5B:99:95:04:B3:18:96:9E:85:8B:6A:5D:21
X509v3 Authority Key Identifier:
keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:bd:5d:f9:d2:1e:81:a9:8a:71:f7:86:0a:3c:7b:bc:2a:
cd:21:53:c9:c1:d0:5f:4c:c5:38:93:e4:46:5b:69:81:c0:4d:
ed:b3:ed:df:22:41:d9:ec:b6:31:6a:80:df:6b:cc:15:75:f3:
c4:04:1a:c8:00:a3:9a:28:72:aa:3c:b3:e5:9a:b8:2d:10:20:
66:6e:ec:32:c4:e4:23:b9:cb:e4:73:5a:5e:77:b6:cd:e8:97:
86:72:b3:ba:3f:fd:4e:08:bb:57:44:24:1f:dc:a7:90:ad:46:
a8:1f:d2:c9:3e:0c:b9:9b:ae:ef:db:bd:b7:c5:c8:0a:e2:d3:
d0:02:6b:11:59:2b:db:6a:02:66:17:48:92:b2:7c:1c:30:d5:
00:21:d0:80:68:30:37:81:56:33:12:c2:61:af:f3:2f:f3:57:
6f:53:89:0e:5d:ee:65:f2:3c:c7:9e:4d:31:e9:c2:22:93:16:
b3:38:c0:c7:27:47:04:4c:d0:cc:24:ab:6a:d2:7c:87:08:3b:
af:1f:9d:b9:c7:6f:9e:0e:31:87:de:ea:8c:ed:fa:08:98:50:
6c:cc:bb:8d:13:be:72:b0:f6:9a:bc:7a:e9:20:27:cd:56:e1:
d5:43:d9:82:65:3b:43:ee:bf:1c:2c:c9:a4:b5:14:3e:97:ba:
6a:0d:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:59 2026 by rpki-client