Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: GR/6Eg4QhkbBFb5hEdS2dl8WQuwrn9Q0gh0lxiLHha8=
Subject key identifier: B1:7C:13:2A:D1:A4:7B:40:D8:29:D1:15:9A:EA:11:55:AE:AE:38:96
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019F18677DE1FA9228B6A0CC9443BF4AACCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 0A71
Signing time: Tue 30 Jun 2026 12:01:03 +0000
Manifest this update: Tue 30 Jun 2026 12:01:03 +0000
Manifest next update: Wed 01 Jul 2026 12:01:03 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: eaKVIgE3zGmyn6PYOVHx4bac2feVN1MoK/WBJsX26Vc=)
2: umIyQ32hARkovH7pXTjPbQsyUAw.roa (hash: Vykeq8JG9Smu2I4EYLNs8vno3gc9BXMxlVVP02kGN2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:7d:e1:fa:92:28:b6:a0:cc:94:43:bf:4a:ac:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Jun 30 12:01:03 2026 GMT
Not After : Jul 1 12:01:03 2026 GMT
Subject: CN=b17c132ad1a47b40d829d1159aea1155aeae3896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:e1:85:ac:0a:f4:bc:9f:ab:f9:27:0f:d6:
d6:f6:6f:d5:9a:46:b9:ae:16:8b:37:25:e7:f9:30:
8c:f2:72:c4:2e:07:88:10:f6:e4:92:b9:f4:e9:17:
0d:ab:46:46:0a:c4:bd:cb:f1:77:26:04:98:8c:7e:
d3:09:38:52:c2:49:eb:3f:ec:ab:7d:fe:d7:43:84:
2a:3f:ef:ab:a1:40:99:14:1d:dd:25:ce:ce:56:9d:
30:b3:7a:1b:3b:6c:6a:05:84:35:4b:38:26:50:90:
90:6b:e7:62:3c:bb:43:14:f5:4e:c5:90:70:57:73:
41:8f:91:1f:17:18:cf:c5:e6:df:38:8b:40:94:24:
0a:22:1d:c7:c6:1d:f7:93:d4:0c:3b:2a:32:42:72:
af:0a:9b:88:5a:9c:57:5f:84:94:fc:13:cc:93:1c:
dd:ff:41:46:9b:61:07:89:80:0c:58:6a:1b:23:13:
52:ee:c2:f4:a1:b9:1c:36:84:15:dd:a1:56:dc:a2:
a6:18:1b:36:a8:c5:d3:83:93:75:62:e7:54:7a:59:
d9:e8:9b:27:04:eb:18:b8:b2:10:00:61:b7:64:18:
7c:87:a0:90:95:27:23:9d:5f:9b:08:38:12:de:d8:
b9:f0:d6:ad:7a:be:df:c7:02:bf:c6:0c:66:80:79:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:13:2A:D1:A4:7B:40:D8:29:D1:15:9A:EA:11:55:AE:AE:38:96
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:fd:ac:72:7c:05:8c:1b:a1:a0:e5:22:dc:05:3a:be:69:
b1:42:e0:79:29:32:79:c0:04:be:91:8f:9e:93:e8:51:76:c6:
7a:2c:fc:9a:4e:13:75:50:9b:e9:e5:92:e8:d1:90:53:b3:8f:
f2:6c:06:11:16:d1:ec:a4:66:0b:e3:ea:20:a4:4b:46:c2:19:
3c:c2:66:f2:5c:50:6f:c1:f0:42:8a:4b:4c:83:96:31:93:61:
60:fb:a9:fe:5f:11:99:01:95:64:ff:8d:19:f4:fe:fc:d3:9a:
8f:c3:23:a2:7b:81:84:16:58:e0:1a:7a:4e:1f:61:5b:25:54:
e2:a6:24:62:ab:86:df:cf:73:35:1f:4d:e9:77:c1:f6:f3:0c:
22:ee:3c:e2:2f:07:50:92:d6:52:9a:cc:cc:5f:2d:49:fa:a9:
41:f2:90:64:66:55:50:ec:f0:43:dd:d4:21:3c:e6:f7:5f:48:
10:c6:90:84:22:c6:1f:0b:92:21:21:5a:2b:65:a8:5b:7d:68:
9b:46:42:1b:cf:16:42:aa:35:b1:4c:c7:3e:c8:5d:74:ae:7d:
26:55:d4:4a:87:8a:ac:83:82:bd:0c:b2:c8:c1:fc:60:eb:15:
29:d3:c6:cb:9d:fa:5a:16:18:2d:06:68:6f:71:80:3e:bd:5b:
27:19:64:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8YZ33h+pIotqDMlEO/SqzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Y1ZTFlOTI4ODg2MDc4MGQxMmUzNGE0YWQzYjQwZDk4
NDgzZmMwHhcNMjYwNjMwMTIwMTAzWhcNMjYwNzAxMTIwMTAzWjAzMTEwLwYDVQQD
EyhiMTdjMTMyYWQxYTQ3YjQwZDgyOWQxMTU5YWVhMTE1NWFlYWUzODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rhhawK9Lyfq/knD9bW9m/Vmka5
rhaLNyXn+TCM8nLELgeIEPbkkrn06RcNq0ZGCsS9y/F3JgSYjH7TCThSwknrP+yr
ff7XQ4QqP++roUCZFB3dJc7OVp0ws3obO2xqBYQ1SzgmUJCQa+diPLtDFPVOxZBw
V3NBj5EfFxjPxebfOItAlCQKIh3Hxh33k9QMOyoyQnKvCpuIWpxXX4SU/BPMkxzd
/0FGm2EHiYAMWGobIxNS7sL0obkcNoQV3aFW3KKmGBs2qMXTg5N1YudUelnZ6Jsn
BOsYuLIQAGG3ZBh8h6CQlScjnV+bCDgS3ti58Nater7fxwK/xgxmgHmbPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLF8EyrRpHtA2CnRFZrqEVWurjiWMB8GA1UdIwQY
MBaAFPrPXh6SiIYHgNEuNKStO0DZhIP8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zOWVIcEtJaGdlQTBTNDBwSzA3UU5tRWdfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjcvMzljNjIyLTQ4NjctNGZiMy04ZWY3
LTVkMjdmOWRiZWQ2Ni8xLzEtczllSHBLSWhnZUEwUzQwcEswN1FObUVnX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY3LzM5YzYyMi00ODY3LTRmYjMtOGVmNy01ZDI3ZjlkYmVk
NjYvMS8xLXM5ZUhwS0loZ2VBMFM0MHBLMDdRTm1FZ193LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOn9
rHJ8BYwboaDlItwFOr5psULgeSkyecAEvpGPnpPoUXbGeiz8mk4TdVCb6eWS6NGQ
U7OP8mwGERbR7KRmC+PqIKRLRsIZPMJm8lxQb8HwQopLTIOWMZNhYPup/l8RmQGV
ZP+NGfT+/NOaj8MjonuBhBZY4Bp6Th9hWyVU4qYkYquG389zNR9N6XfB9vMMIu48
4i8HUJLWUprMzF8tSfqpQfKQZGZVUOzwQ93UITzm919IEMaQhCLGHwuSISFaK2Wo
W31om0ZCG88WQqo1sUzHPshddK59JlXUSoeKrIOCvQyyyMH8YOsVKdPGy536WhYY
LQZob3GAPr1bJxlkyA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:45 2026 by rpki-client