Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: 97MDS/weNZM6hTQPoS1f92kc6VzlHsJ2O0VPMuq8V90=
Subject key identifier: A9:CD:8E:17:A1:38:86:54:F4:46:AB:4C:FF:6B:BF:B2:99:D3:F0:B0
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 019F19435BB40701600D7EE489F473380A89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1616
Signing time: Tue 30 Jun 2026 16:01:12 +0000
Manifest this update: Tue 30 Jun 2026 16:01:12 +0000
Manifest next update: Wed 01 Jul 2026 16:01:12 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: IlDlA0d5E3zYmdLO5M2GHchPitLhiB+U1dkplglfZV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:5b:b4:07:01:60:0d:7e:e4:89:f4:73:38:0a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Jun 30 16:01:12 2026 GMT
Not After : Jul 1 16:01:12 2026 GMT
Subject: CN=a9cd8e17a1388654f446ab4cff6bbfb299d3f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0c:90:93:ab:e7:e4:50:34:46:94:15:30:ba:
ec:2a:44:fe:b4:6f:ef:db:18:e4:b7:d5:c7:c0:2c:
e7:41:41:8b:aa:14:89:c2:84:3c:cf:8d:5b:3c:ed:
38:02:22:64:1e:34:b4:e4:d7:9c:39:ef:08:10:c7:
57:a8:c2:d4:b8:74:f4:e6:55:a2:20:7c:93:07:04:
8e:a8:4e:bf:0a:1b:d6:72:22:ea:47:f7:e9:f8:5a:
2e:25:54:87:d1:86:85:a0:55:1a:ad:2f:7c:f0:8e:
a3:b7:aa:46:0c:f9:90:45:3f:f3:2f:14:09:ea:25:
3f:49:bc:8b:97:18:f6:61:2d:bf:18:0d:99:df:ff:
f6:c4:61:ef:9c:da:ba:5b:9f:bd:2d:18:45:77:ea:
62:22:4c:03:47:99:33:64:ba:ec:e9:38:7f:75:41:
e1:71:25:5e:29:1f:b7:cf:24:e9:dd:d6:7b:23:d9:
05:84:70:b4:92:08:59:74:98:b9:93:bc:22:34:68:
48:fe:01:dd:87:37:06:ac:9a:34:c8:b4:88:2f:1c:
e2:c9:75:3e:4c:54:b2:d8:f6:89:cf:f1:5f:d6:69:
45:2d:ee:c1:fb:ab:6c:2c:5a:6e:47:2c:6c:4d:02:
f9:95:20:52:04:af:66:09:96:51:e2:a6:9f:f6:b2:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CD:8E:17:A1:38:86:54:F4:46:AB:4C:FF:6B:BF:B2:99:D3:F0:B0
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cd:bc:b7:51:48:0e:7c:55:86:48:4e:8d:24:9a:bc:41:ca:
ea:eb:a6:e9:71:ae:6c:f0:35:eb:39:76:82:2f:e5:fe:e8:e3:
14:f9:49:1e:9b:7b:7f:9b:7c:5f:6a:7f:4e:73:57:d8:9b:2f:
80:f5:d3:b7:d7:94:01:58:49:df:05:3c:fa:9f:37:7f:b1:92:
10:d9:74:c2:4d:52:1e:c9:da:f8:df:56:d6:b0:c6:f5:98:85:
04:2d:89:f8:5b:c1:78:dd:45:17:9a:e7:62:2d:a9:ac:6f:7b:
4c:1a:d3:67:39:95:40:88:a3:f6:67:a4:3b:3e:97:ca:7d:0f:
68:a2:f0:87:5a:46:64:45:de:b7:c6:d9:7e:7e:64:33:01:a7:
5e:ce:4b:d0:54:72:ac:9f:59:4a:b9:57:65:bc:5b:91:8b:3b:
3f:4b:fd:43:9d:43:d9:6a:7d:c0:d2:47:cb:ac:05:ee:24:87:
b1:32:15:6e:b1:cc:c1:11:46:a0:ba:f6:f0:9f:46:d6:88:a3:
05:7c:a5:2d:00:e0:10:b4:e7:90:6c:de:88:a4:c0:96:be:7e:
2c:f2:73:87:87:17:89:ba:56:c4:33:21:d9:d1:cf:11:2c:be:
1c:c0:fa:22:5c:3b:85:83:87:eb:ed:21:70:26:cf:78:6a:8a:
b8:08:c6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:19 2026 by rpki-client