Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json)
Hash identifier: P0N6skOHZebhoJ2ca/0ceRZeCw09h9sTqt+uWuD7kTM=
Subject key identifier: 28:9A:1F:8E:36:EB:18:F7:5E:CF:C9:70:E9:48:BF:B5:2C:38:E6:18
Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Certificate serial: 019F17C2954281C281A1F7E0E16E2B69D592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 09:00:55 +0000
Manifest this update: Tue 30 Jun 2026 09:00:55 +0000
Manifest next update: Wed 01 Jul 2026 09:00:55 +0000
Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: TC/t9j3lUMqvtDSA+ITT+JC4cd2KmQWkRMlnH2S2QpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:95:42:81:c2:81:a1:f7:e0:e1:6e:2b:69:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76
Validity
Not Before: Jun 30 09:00:55 2026 GMT
Not After : Jul 1 09:00:55 2026 GMT
Subject: CN=289a1f8e36eb18f75ecfc970e948bfb52c38e618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:25:69:8f:82:25:10:4c:31:f2:03:35:ed:
1c:54:b7:b5:2f:93:6d:0b:4e:54:b4:db:7a:5b:40:
be:e8:86:0a:fd:d7:45:c8:26:f8:da:f6:81:28:9e:
63:0e:15:11:42:61:55:9e:30:6c:b8:e8:9e:b7:da:
65:70:31:01:77:45:6c:a2:25:59:d2:dc:3c:fb:f6:
9e:a1:45:6e:2d:07:ed:70:5f:d5:77:e9:0f:55:37:
fe:2f:cc:24:35:81:cf:df:d6:09:fd:eb:17:a5:e3:
99:e9:86:3b:3e:68:85:d8:1d:eb:23:14:4c:01:39:
64:b7:69:20:96:45:31:87:c0:bf:0d:77:e2:71:b4:
d5:7f:59:5d:73:dc:00:f9:a2:9a:1c:c2:6c:64:bd:
58:ff:d3:57:db:7d:74:24:40:04:f3:73:4c:14:28:
e0:65:c8:34:9f:04:90:99:f2:a8:44:50:75:78:79:
62:de:09:64:37:25:fb:4c:de:7b:6b:b2:cf:70:b1:
6e:12:91:84:6d:70:8c:9f:d3:0b:b6:40:ae:0e:8a:
8a:fe:fc:cc:9e:30:a7:7e:d2:bc:03:2d:f5:6e:a4:
9b:a7:3e:5a:e2:33:47:b3:b1:d4:c1:d6:37:37:8c:
1d:4c:20:9c:c7:1a:31:94:a3:c5:c3:56:7f:64:8c:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:1F:8E:36:EB:18:F7:5E:CF:C9:70:E9:48:BF:B5:2C:38:E6:18
X509v3 Authority Key Identifier:
keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:a9:fe:51:e0:e8:b1:c0:00:f8:3a:02:a9:39:83:6f:3c:3d:
a7:89:05:12:be:ff:29:ec:2e:94:ad:76:15:45:b7:a1:cb:ab:
44:cf:69:88:d2:bf:81:90:32:4d:fb:67:95:e8:83:0a:9c:df:
0c:3c:27:f8:2e:4d:f3:cc:47:16:a1:47:a7:32:a1:d3:d9:eb:
8c:0c:78:22:1e:76:c2:01:bb:2f:d9:be:08:59:11:53:b5:55:
af:81:76:ce:f3:5d:18:d6:4d:3a:f1:09:2c:9c:a6:d8:51:04:
b9:56:07:98:95:38:37:c7:63:bf:9d:1f:84:fb:b0:76:65:e8:
8a:eb:bc:27:c5:d5:f4:ce:e0:bb:3e:03:56:3b:91:21:c1:db:
7d:7f:61:b0:11:69:6e:d0:83:f8:ba:7f:81:96:97:76:3e:1d:
e5:14:f2:dd:78:41:52:d5:98:49:6a:66:a2:72:ae:01:f2:eb:
18:b9:cf:18:5d:0d:5c:3d:40:d3:48:b2:6b:a2:f5:27:7c:52:
9c:dd:d3:85:67:16:ce:94:3f:a8:30:b6:07:f6:cb:da:df:e3:
df:5b:d3:0f:38:f5:6f:48:a8:2c:62:42:42:5a:19:07:87:84:
f3:1f:29:db:b2:7c:d1:8f:e8:b5:cf:d0:1f:de:97:b6:6e:19:
9f:d7:2b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwpVCgcKBoffg4W4radWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj
ODVjNzYwHhcNMjYwNjMwMDkwMDU1WhcNMjYwNzAxMDkwMDU1WjAzMTEwLwYDVQQD
EygyODlhMWY4ZTM2ZWIxOGY3NWVjZmM5NzBlOTQ4YmZiNTJjMzhlNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/YlaY+CJRBMMfIDNe0cVLe1L5Nt
C05UtNt6W0C+6IYK/ddFyCb42vaBKJ5jDhURQmFVnjBsuOiet9plcDEBd0VsoiVZ
0tw8+/aeoUVuLQftcF/Vd+kPVTf+L8wkNYHP39YJ/esXpeOZ6YY7PmiF2B3rIxRM
ATlkt2kglkUxh8C/DXficbTVf1ldc9wA+aKaHMJsZL1Y/9NX2310JEAE83NMFCjg
Zcg0nwSQmfKoRFB1eHli3glkNyX7TN57a7LPcLFuEpGEbXCMn9MLtkCuDoqK/vzM
njCnftK8Ay31bqSbpz5a4jNHs7HUwdY3N4wdTCCcxxoxlKPFw1Z/ZIyBqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiaH4426xj3Xs/JcOlIv7UsOOYYMB8GA1UdIwQY
MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt
ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5
LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6n+UeDo
scAA+DoCqTmDbzw9p4kFEr7/KewulK12FUW3ocurRM9piNK/gZAyTftnleiDCpzf
DDwn+C5N88xHFqFHpzKh09nrjAx4Ih52wgG7L9m+CFkRU7VVr4F2zvNdGNZNOvEJ
LJym2FEEuVYHmJU4N8djv50fhPuwdmXoiuu8J8XV9M7guz4DVjuRIcHbfX9hsBFp
btCD+Lp/gZaXdj4d5RTy3XhBUtWYSWpmonKuAfLrGLnPGF0NXD1A00iya6L1J3xS
nN3ThWcWzpQ/qDC2B/bL2t/j31vTDzj1b0ioLGJCQloZB4eE8x8p27J80Y/otc/Q
H96Xtm4Zn9cr6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:15:30 2026 by rpki-client