Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json)
Hash identifier: lQjgp9iVd8G5o172vrDAA5yYRuLkmOvLgeJc0g304hU=
Subject key identifier: A9:7C:90:B4:2A:38:D5:94:9E:BE:BB:B3:67:6C:88:10:34:95:F1:77
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 019F18D62F348AC758E84690E214B2FA0DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
Manifest number: 0DFD
Signing time: Tue 30 Jun 2026 14:01:57 +0000
Manifest this update: Tue 30 Jun 2026 14:01:57 +0000
Manifest next update: Wed 01 Jul 2026 14:01:57 +0000
Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: /iihckVmjyNUMX7Mp64bvdeCvm28+PcR8bqFpl5DNyY=)
2: TujVxWk7elywpyXmIMnDKFw3mNo.roa (hash: Zvi/MCY8l+89SlTxrMXMYRwO5dgOTj98ivE3+1BLbBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:2f:34:8a:c7:58:e8:46:90:e2:14:b2:fa:0d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jun 30 14:01:57 2026 GMT
Not After : Jul 1 14:01:57 2026 GMT
Subject: CN=a97c90b42a38d5949ebebbb3676c88103495f177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:9b:8d:6d:d7:3f:2a:cd:b9:de:d3:25:8e:
73:3e:9f:89:0f:f3:cd:3d:ec:60:35:ab:cb:f7:a0:
d6:cd:f1:80:c8:29:90:0c:0a:2e:84:30:4a:09:47:
ef:ca:4a:11:8f:75:f5:b1:32:f1:0f:4b:a7:f1:0f:
32:22:f8:38:d1:ac:9b:b4:3b:52:c4:3f:79:27:c5:
bd:b0:d1:a7:94:a4:99:e1:fa:59:f8:42:b0:d1:cb:
96:f2:b8:50:ca:ea:c6:bb:41:56:c4:ee:08:8b:d1:
40:ed:a4:e5:f3:19:76:4d:93:22:3f:3c:fa:8d:fd:
6e:0d:4c:de:d0:c6:7b:a2:f1:b0:a5:9c:3c:01:7c:
8e:b8:7f:aa:cd:91:e8:78:fb:46:35:2c:f5:78:1f:
f1:e1:b8:59:38:f4:51:ec:8b:92:29:10:e3:ef:91:
36:52:73:12:7d:29:04:e0:03:e8:fc:5e:d4:cb:02:
82:e2:44:aa:ac:2a:fb:cc:74:58:d7:5f:7f:78:35:
7e:2b:80:2d:86:7a:30:38:69:87:a3:18:d9:22:24:
e2:f3:56:ed:b5:2a:e1:e5:12:18:14:b7:e7:c9:f8:
fd:bc:cd:69:38:19:5d:61:8d:51:4f:25:1d:db:db:
f3:98:f7:bf:54:c6:bd:de:37:30:e9:05:d0:a2:a7:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7C:90:B4:2A:38:D5:94:9E:BE:BB:B3:67:6C:88:10:34:95:F1:77
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:2a:4e:73:9e:b4:33:11:38:b2:10:e3:0e:aa:53:17:b0:13:
b2:2a:8a:c8:62:b7:e7:ed:54:8b:77:95:8a:2f:f7:3b:a7:6f:
ba:4d:7f:14:a6:5d:cf:51:f9:d9:bc:42:86:d3:67:f4:07:fa:
03:74:2f:a4:cb:ff:07:65:22:28:36:48:b9:c0:19:58:9e:83:
67:26:f7:af:d5:0d:1e:13:2b:bb:8c:97:0c:6d:ad:12:5e:c2:
f0:2d:1e:29:42:b7:b1:f1:4c:b0:8a:79:2a:36:67:43:e1:b2:
0d:b0:8b:ed:d8:da:4d:5d:6b:c0:48:e9:ed:94:08:a6:a7:db:
f5:83:4f:a8:87:ce:2d:ba:ae:04:bc:5a:25:fd:99:25:74:36:
09:d0:65:d9:e5:1b:28:4a:bf:8f:24:ff:f0:c3:33:0e:52:eb:
e3:76:04:96:a5:33:c4:6d:19:77:02:9b:05:af:b8:6f:8b:bd:
d2:6e:d4:d1:79:68:cc:02:85:f5:ca:e4:d4:c5:5d:e4:ee:2b:
b3:45:1c:57:0c:ce:93:d8:7b:48:ee:5e:fc:76:3c:ca:29:84:
2b:20:cd:56:9a:9b:2e:17:90:93:f4:ed:38:7c:fd:0d:e2:db:
ab:61:c5:8a:a9:d9:9d:28:b5:25:c1:1d:6f:ff:20:6b:f4:25:
1d:78:0e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:49 2026 by rpki-client