Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: QCCw6TgO4DvMSDdt7JmmdAdxAXOjUez+043lsha+mCw=
Subject key identifier: 6B:74:0C:7C:74:F4:B3:0E:C1:F0:71:CE:4E:C9:0C:F5:0F:A1:08:CA
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019F11526BB7E912230BA5AA3AB34DBE66ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 048F
Signing time: Mon 29 Jun 2026 03:00:41 +0000
Manifest this update: Mon 29 Jun 2026 03:00:41 +0000
Manifest next update: Tue 30 Jun 2026 03:00:41 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: MyVTu6cMEYBSuzMN/5HFv5cs2QPqqgU34rA77VFMjqE=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:6b:b7:e9:12:23:0b:a5:aa:3a:b3:4d:be:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Jun 29 03:00:41 2026 GMT
Not After : Jun 30 03:00:41 2026 GMT
Subject: CN=6b740c7c74f4b30ec1f071ce4ec90cf50fa108ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:8d:3a:fe:66:c5:93:ad:d0:95:f1:68:44:
72:c9:c8:5a:4d:f1:c8:33:27:36:11:1b:6d:a0:8e:
56:d1:f0:a1:8e:98:1d:37:6a:7d:82:d1:d4:b5:64:
03:f3:4a:93:bf:f0:5d:a9:d1:ec:75:0a:6c:0b:ed:
19:cf:05:73:77:d8:77:18:a6:b4:bd:6e:33:16:2f:
3a:f3:ab:e4:e8:93:e1:48:60:a2:21:91:c2:6d:81:
37:15:e4:68:d7:72:05:23:79:8c:5f:39:2d:b2:2f:
b9:c7:b1:16:21:ab:7c:35:e8:a0:57:90:b4:b0:41:
c9:24:9c:63:08:f1:c7:6a:10:bd:6b:e9:4d:b4:f8:
bc:54:3b:77:5a:02:4a:35:b0:92:bc:3d:d7:33:d8:
fa:69:bc:12:56:e5:1e:25:a8:21:59:18:3e:ec:8c:
ff:9a:a3:34:37:b3:4f:a7:06:fe:fd:8e:80:4c:02:
24:3c:07:aa:87:8e:70:42:76:3b:67:72:f2:2a:0e:
41:d6:ec:17:2a:f3:44:90:98:07:2f:d4:a8:93:50:
a3:bc:1e:bb:2f:a9:2c:eb:04:49:e1:ef:02:50:7f:
d6:05:21:30:e9:0a:70:f0:58:77:43:a4:7b:b0:f8:
1d:23:2c:18:ef:a5:b2:0c:6c:20:1f:fa:12:01:71:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:74:0C:7C:74:F4:B3:0E:C1:F0:71:CE:4E:C9:0C:F5:0F:A1:08:CA
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:86:43:13:8e:4b:2e:c5:f0:cc:4d:74:22:9c:58:cc:c5:aa:
a7:d9:67:c2:ad:5c:36:41:4a:82:65:83:d7:3b:94:da:74:88:
42:64:7a:e3:d7:ec:a7:7a:e4:d6:1c:98:39:9e:db:6f:9f:a3:
7c:2c:88:3d:8e:c4:ba:b6:b3:f3:bf:08:36:13:26:c6:db:5d:
d8:54:55:dd:ab:65:a3:ee:9e:c2:1f:35:72:b3:78:16:e7:14:
97:94:36:b0:c9:7c:4c:c5:3a:b5:09:13:f3:db:54:ac:f1:08:
48:1c:43:6f:d7:54:da:99:68:62:03:f9:93:dc:86:a8:ab:b6:
6f:43:e0:c1:57:b1:a0:7b:a4:e1:b8:3c:60:c0:99:3c:0d:28:
2c:6c:22:a4:e6:4f:11:5d:ac:e5:b0:56:95:7b:37:ef:1c:46:
04:c7:57:84:86:cd:44:3d:ae:f9:4f:e6:44:a7:2c:0a:bd:6b:
7e:b0:6a:08:27:9d:b0:fd:fb:51:8d:63:bb:62:66:cb:cc:64:
c8:6e:9c:c9:39:f0:48:54:4f:4b:9b:f2:3a:ec:e0:82:a8:a9:
7e:7c:4b:b4:d5:6e:da:0f:3f:b0:39:ab:b9:77:13:60:f4:8e:
6f:a4:86:81:df:7e:12:8f:d5:e1:11:f3:f6:4b:60:bb:ae:b5:
f7:b9:43:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:48:12 2026 by rpki-client