Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
File: 9KDSG307lbK6Sck6IUiaeaOp9N8.mft (raw, json)
Hash identifier: EPmy2yhA3VA2QxrZ+3+idIuwgdhN8OUDnzZp1iqjVYU=
Subject key identifier: 2F:56:67:7A:3B:13:6B:D8:D5:10:4E:47:FE:B7:16:CB:F1:B8:7D:38
Authority key identifier: F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF
Certificate issuer: /CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
Certificate serial: 019F11F867A9019821563EE3AF3418CE356C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
Manifest number: 0A
Signing time: Mon 29 Jun 2026 06:01:59 +0000
Manifest this update: Mon 29 Jun 2026 06:01:59 +0000
Manifest next update: Tue 30 Jun 2026 06:01:59 +0000
Files and hashes: 1: 9KDSG307lbK6Sck6IUiaeaOp9N8.crl (hash: x1d8lG5XnuitTveGNSELh2pKf9DAUEaX3R8QE7SvPqI=)
2: Qaj8XrJL39gVPfuQvYiEccIv1TM.roa (hash: +YjoJNpJqyBfYGjUmNlUMkla8O1lDSOMg7Z6bqlGmyU=)
3: TDYx4RU_5msTXBzzqtleEDHuezI.asa (hash: fgxQ1mMTeL9sK07O8eSPI1phJJQrNDTUGz0YKGk3ZQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:67:a9:01:98:21:56:3e:e3:af:34:18:ce:35:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
Validity
Not Before: Jun 29 06:01:59 2026 GMT
Not After : Jun 30 06:01:59 2026 GMT
Subject: CN=2f56677a3b136bd8d5104e47feb716cbf1b87d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:7c:ac:a1:0d:f5:2b:78:16:ea:83:fb:3b:
84:a9:64:93:67:04:af:d7:fc:48:3d:f8:b1:14:cd:
00:9d:e0:31:ec:b4:a9:cb:05:05:21:96:68:13:d0:
a0:c0:c8:4a:33:a6:06:92:74:c5:40:4e:90:fe:32:
d6:d7:0c:74:7d:cb:71:d2:8c:1a:61:81:89:35:70:
c2:ef:59:5b:b5:4a:91:a7:8d:60:bb:85:7a:61:fc:
f2:97:59:32:4b:07:11:7b:d3:0b:32:5e:c8:ed:c5:
dd:c8:ff:90:80:0f:19:e2:e2:32:7c:43:7b:f7:a0:
1a:18:3e:d6:a2:18:34:0a:43:57:94:ee:1d:86:0e:
5c:1d:09:e5:4b:e1:59:3b:48:ab:8c:ae:12:27:51:
70:45:5c:4e:04:cd:53:04:ed:e6:ee:45:f1:f0:8c:
96:1e:44:c5:c5:e5:4b:f6:c9:0e:3a:23:9b:f0:8c:
87:50:ac:02:56:51:27:51:21:d2:dc:ca:89:c3:9b:
cf:a2:ea:73:9e:d0:56:8a:24:2d:3b:a4:46:03:a8:
35:65:ae:d0:94:ba:c6:44:b9:92:05:d7:8d:f1:fa:
32:ee:f5:e6:a3:37:15:28:08:9f:e7:96:2e:c5:0d:
62:69:e7:fc:86:45:b8:06:c7:fa:de:2d:5a:2a:22:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:67:7A:3B:13:6B:D8:D5:10:4E:47:FE:B7:16:CB:F1:B8:7D:38
X509v3 Authority Key Identifier:
keyid:F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a9:6d:49:e7:eb:36:35:67:60:50:71:5d:f5:64:4d:dd:58:
d3:4a:d7:21:3e:4e:b9:1b:79:0f:2c:24:ec:56:93:9e:75:6c:
8e:8e:2d:60:8f:d2:83:57:40:bb:92:c4:bf:81:f2:7a:cb:1b:
a3:75:72:93:55:bb:d3:cf:3f:f9:f7:ba:6f:41:1d:be:84:21:
87:ad:da:eb:0a:72:07:83:de:40:8a:c6:28:12:b6:b1:de:99:
8a:60:4c:e5:63:44:1e:5f:27:69:6b:2d:dc:48:9c:ae:8e:8b:
0d:5e:f2:60:1f:c6:1a:c3:37:d3:a2:75:65:c0:e8:5f:7e:30:
33:e1:29:c1:16:28:7c:8a:6c:ca:9b:fc:9e:2f:6a:ad:8f:a5:
57:90:80:1f:bb:2a:54:6d:ff:64:4a:63:e5:83:7b:98:a5:45:
86:f9:c4:a6:37:f2:12:b6:94:c0:ed:99:06:2c:4f:1f:d4:97:
fe:dd:9e:21:ea:cd:fe:bb:27:a5:aa:6f:1e:b9:a9:50:1d:b0:
e8:97:39:f0:8c:00:80:fd:e0:9f:1a:d1:bc:20:f9:fb:57:69:
dc:9e:03:e7:1c:db:c1:8f:39:ae:16:e1:51:bf:ef:1b:d2:c1:
e5:26:1f:3b:3c:44:bf:35:6f:8a:70:e6:56:48:3a:db:66:c6:
0a:c2:05:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:31:28 2026 by rpki-client