Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json)
Hash identifier: UtsMN71upJxEEqLaHYmIrTqF9s6bhKJ+GpCxcn6syqw=
Subject key identifier: 6A:BE:97:E6:9D:AD:89:A8:D3:4F:E2:37:84:A5:EA:AF:09:99:A9:A8
Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Certificate serial: 019F18677F5E0DCD3E86809D192B165E1FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
Manifest number: 0CC3
Signing time: Tue 30 Jun 2026 12:01:03 +0000
Manifest this update: Tue 30 Jun 2026 12:01:03 +0000
Manifest next update: Wed 01 Jul 2026 12:01:03 +0000
Files and hashes: 1: 4ALFa9Jly8V_dKKpJ0k3rphtKqI.roa (hash: FvxfrXpFTEI5fJri2eyNeGvuYRYi/o3NW0uubzMpvBU=)
2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: W+5HhskguCLvyitzY7/9sRuybWqY7hhSvU5BDpjIMRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:7f:5e:0d:cd:3e:86:80:9d:19:2b:16:5e:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9
Validity
Not Before: Jun 30 12:01:03 2026 GMT
Not After : Jul 1 12:01:03 2026 GMT
Subject: CN=6abe97e69dad89a8d34fe23784a5eaaf0999a9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bc:0c:bc:02:b3:4a:a5:29:63:8e:61:bd:02:
a4:3c:89:dd:5b:e5:6e:55:35:2a:b7:60:28:42:7b:
e0:0c:08:b1:23:31:20:06:39:c1:2d:4d:b6:aa:0d:
86:c6:95:b3:39:ad:0a:d1:20:9f:f7:c3:25:04:09:
ed:6e:e3:80:be:f8:d4:0b:fa:cc:c4:eb:3d:c4:8a:
d0:3f:06:8c:57:5b:cf:a0:db:76:2a:54:35:11:4a:
54:44:ec:36:ee:21:18:4e:bc:16:ed:91:da:83:85:
a1:ef:6d:b4:76:1a:16:6c:80:13:a2:9a:97:5e:de:
a1:39:19:77:b9:31:87:95:95:02:0b:b6:40:c1:c2:
be:ef:8e:71:2a:65:70:62:2b:78:35:18:0e:1f:48:
ab:57:df:6b:76:ed:d5:a0:cc:9a:aa:9b:28:4f:d3:
00:e4:d0:22:f9:ad:1c:64:6a:c8:e5:b8:be:94:90:
ac:ec:a3:5f:e3:3f:04:54:21:9d:4b:ef:a8:36:6f:
c5:dd:11:0c:a0:0c:5f:66:5f:54:3e:eb:d2:d3:29:
26:9f:57:82:e3:c9:e0:83:88:f6:15:90:d5:c0:bd:
23:97:00:bf:44:44:c0:69:8d:0c:11:55:4a:3d:c1:
0e:4f:7c:d9:47:32:82:e3:e1:6b:cb:17:bf:4a:b6:
72:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BE:97:E6:9D:AD:89:A8:D3:4F:E2:37:84:A5:EA:AF:09:99:A9:A8
X509v3 Authority Key Identifier:
keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e1:d0:66:81:10:4f:a2:9b:a1:1b:75:1e:ae:c3:bb:1b:51:
5e:bf:8e:79:d6:53:91:e3:43:17:ea:a1:71:54:89:e5:6a:6e:
4d:51:57:c2:fe:fe:a5:73:7a:83:92:ae:cc:b3:4a:b0:67:b2:
68:ea:2b:b3:02:ca:76:ef:41:fc:0e:51:e3:d6:8b:88:9d:b3:
8c:14:19:44:a9:e8:bd:1b:9e:5c:b4:51:e8:f2:cd:20:be:8e:
37:c4:75:f8:a0:6b:7f:25:60:02:5e:e3:e3:fa:9a:e2:90:dc:
8c:c7:bc:0e:8e:9f:f8:4e:17:ee:dc:eb:cc:26:61:f7:32:b4:
76:5c:23:a9:89:3c:2c:5f:34:b7:a6:1e:0e:4a:5e:91:49:30:
49:e5:3d:f0:3b:0e:0d:d9:1d:39:26:e8:ea:6d:84:c0:f5:f5:
b0:9f:dd:21:a5:d1:79:3e:82:ec:69:b8:49:29:e5:48:bb:b6:
46:7d:cb:e5:26:8a:94:8f:7c:bd:2f:40:ac:54:78:9c:5c:38:
c2:16:36:0a:d4:45:cb:19:1a:4b:e4:51:de:35:fa:bd:80:2d:
f0:c4:5e:78:d4:92:fd:ea:39:a5:16:81:75:0c:6a:7a:47:7e:
ea:08:37:34:24:ad:c9:e0:36:96:59:b6:94:ce:66:b1:65:fb:
92:cc:12:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 20:38:56 2026 by rpki-client