Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json)
Hash identifier: gHl5LT3EIDMotSZUngJkIRSnNvgPphhUrcbvOHyBBaY=
Subject key identifier: 70:69:8B:A6:10:3C:28:F4:2D:49:2D:92:C6:A3:ED:71:C5:3D:CD:EB
Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Certificate serial: 019F19431F52A789FA5F0D74CD8ADD9E7B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
Manifest number: 0D94
Signing time: Tue 30 Jun 2026 16:00:56 +0000
Manifest this update: Tue 30 Jun 2026 16:00:56 +0000
Manifest next update: Wed 01 Jul 2026 16:00:56 +0000
Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: l2JF+BWpUT/YeflY5BMqSwUwVY4WIZPkOagMWxsjGQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:1f:52:a7:89:fa:5f:0d:74:cd:8a:dd:9e:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f
Validity
Not Before: Jun 30 16:00:56 2026 GMT
Not After : Jul 1 16:00:56 2026 GMT
Subject: CN=70698ba6103c28f42d492d92c6a3ed71c53dcdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:06:72:8b:2e:9c:32:ca:8b:cc:7c:2e:f5:
70:10:d8:51:eb:1d:40:7d:fc:f8:aa:9b:15:1d:53:
d1:df:85:3a:51:40:ea:e6:7d:bb:c3:82:0a:6a:f6:
14:c4:9d:83:6a:d4:4f:50:f5:d9:6d:74:e8:ec:35:
35:35:94:6f:5a:e6:f7:90:dc:04:fc:c3:85:4d:67:
a7:30:ff:b8:fa:c5:55:63:a6:fc:c1:81:da:9f:c7:
a4:d0:eb:6f:df:ab:66:1a:c4:fe:90:32:e5:08:ce:
6b:92:6a:98:e6:57:b2:24:43:f9:d3:eb:36:36:50:
70:ad:e3:7c:cd:d2:3b:2b:0c:10:ad:f6:2e:06:57:
ae:85:2f:c5:a3:d4:aa:2a:4b:e1:38:7e:65:8b:33:
d5:8a:ba:56:1a:41:32:db:6b:b9:79:31:da:d5:c8:
bf:cf:78:f8:1b:19:d3:91:ee:57:84:b5:89:f2:75:
62:e6:bf:5a:3e:c7:72:14:c5:d7:6f:70:f7:b5:0e:
fd:34:c1:04:77:5a:d5:74:d0:88:5c:d1:ff:b5:e5:
85:36:26:cc:37:ca:61:fa:db:3f:7a:27:f7:ad:1e:
dd:d0:a8:a9:9e:ce:82:ff:91:7a:8b:0b:4b:ba:8f:
d0:d6:e5:3b:4c:96:9f:47:26:59:d1:74:64:ac:12:
57:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:8B:A6:10:3C:28:F4:2D:49:2D:92:C6:A3:ED:71:C5:3D:CD:EB
X509v3 Authority Key Identifier:
keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:09:72:ff:71:57:8c:bb:5b:50:db:c7:74:2d:83:02:bc:e7:
e5:ba:cf:32:da:7f:d3:bd:b3:b4:bf:9c:3f:f4:66:e7:1b:d1:
97:51:48:10:17:d4:88:9e:0a:ca:fe:6d:3a:f3:33:5e:f4:da:
9a:7b:d7:30:b9:38:47:d3:7f:2c:30:bc:40:40:1e:db:fa:4a:
e2:30:3a:c4:7e:24:1c:cc:04:d9:a3:09:9d:b4:88:0d:02:b3:
4f:ee:53:27:fd:b0:7b:ee:d9:7d:bb:44:a2:3c:52:1d:d5:07:
84:c6:93:48:e7:36:93:be:7c:2b:62:20:e5:80:0b:41:41:b0:
c4:b5:37:30:c9:15:70:5f:7d:73:d5:b9:82:86:f1:29:7c:33:
8d:b8:7a:22:8e:eb:ee:20:0a:19:bb:8c:e0:bd:b0:16:7b:db:
c2:30:ad:19:09:78:65:7b:18:fb:d2:c4:ae:d8:fc:9c:cf:d2:
51:70:b9:9b:dc:a6:1f:9e:38:4c:20:50:95:fd:42:a7:80:f1:
f7:c0:33:7c:b2:31:70:ab:c2:d6:29:de:b3:cd:ec:6e:9b:24:
12:16:30:4a:e8:f9:55:32:32:51:a1:5d:05:dd:1a:46:08:20:
27:a3:bf:23:e1:8b:13:dd:15:f2:41:fc:8c:e0:02:74:f4:e9:
b4:d7:3b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:40 2026 by rpki-client