Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json)
Hash identifier: RPob0BpdUrvl+O2Q5FZEJOjJizTc4t8Zngn4Rbf+mmM=
Subject key identifier: 2B:81:AE:90:66:03:64:71:72:19:A9:40:16:71:D7:0B:57:66:7E:30
Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Certificate serial: 019F17C31E02C383DB9EEF08E462210505C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
Manifest number: 0DC4
Signing time: Tue 30 Jun 2026 09:01:30 +0000
Manifest this update: Tue 30 Jun 2026 09:01:30 +0000
Manifest next update: Wed 01 Jul 2026 09:01:30 +0000
Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: pPzneBL4iEM+FwZsRhcorzp0Ey/3qc6QBoWO+1xc3rQ=)
2: tFVRD_-pjyGAXBK1B4RnTlbS06Y.roa (hash: rxdXUltbYBZphQ4R9SWeek1/7cVm9u/f4Eo1gHxec1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:1e:02:c3:83:db:9e:ef:08:e4:62:21:05:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5
Validity
Not Before: Jun 30 09:01:30 2026 GMT
Not After : Jul 1 09:01:30 2026 GMT
Subject: CN=2b81ae90660364717219a9401671d70b57667e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:41:6e:5e:af:17:67:5d:2d:68:34:43:6f:
46:15:c5:5b:d2:6b:32:c6:ae:97:d3:c8:7a:a8:5c:
d0:33:2d:c0:53:73:81:77:9e:d9:0e:c4:28:98:0f:
e5:b7:f1:bc:6f:9e:26:73:b8:c1:0a:db:4f:4c:b3:
56:12:b3:3e:12:6a:c9:84:3a:90:28:5c:c3:7a:ca:
3b:30:3f:f6:77:82:c0:a1:07:34:33:eb:cc:57:09:
b7:79:0b:72:88:41:4b:e9:8f:e7:fe:06:5a:1e:0d:
35:48:68:72:b6:38:64:a6:ef:d3:e7:ff:70:3c:e2:
02:cc:19:82:c1:e8:1c:6e:f7:d5:3c:6d:ee:cd:d9:
9a:7f:c6:b9:11:eb:ab:d6:0c:5e:09:16:b8:c5:3d:
10:7f:0d:56:90:da:54:bc:63:9a:8c:68:b0:8e:0c:
fb:ba:7d:3a:75:41:ac:a4:bc:f1:b7:af:0f:bc:a9:
ed:62:80:cb:6d:58:1e:6b:e3:ef:63:ea:18:94:5c:
71:b7:b3:0c:65:99:49:74:c3:35:2c:63:18:a4:ed:
70:ee:f5:97:25:ad:14:81:3a:ba:63:4b:92:4c:b6:
9f:58:4b:e5:f4:4c:fc:74:95:3d:2f:74:40:af:d8:
0c:7a:8c:a8:e0:fc:e3:1c:11:f1:6d:48:cb:2e:b6:
02:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:AE:90:66:03:64:71:72:19:A9:40:16:71:D7:0B:57:66:7E:30
X509v3 Authority Key Identifier:
keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:25:81:81:01:91:0d:c4:d7:17:d2:80:05:da:5c:db:9b:f8:
cb:6c:14:f2:0d:59:74:60:35:83:cc:bc:2e:17:88:e6:17:6b:
27:b7:75:af:cf:dc:1a:06:5e:45:4b:e6:09:84:a9:64:ec:40:
60:0f:f5:7e:4b:0c:1c:15:7a:54:64:ad:60:d0:5d:e5:2d:eb:
65:5f:77:b0:bb:fc:60:e3:9b:1e:9b:21:74:46:c3:6a:97:03:
bc:ef:3e:47:24:4f:37:4a:ac:34:b7:e7:e2:20:bb:a7:5f:a7:
80:d8:3c:32:c6:df:a1:98:30:86:f5:ff:4d:34:7d:58:19:26:
cb:42:b2:f4:64:c8:ce:eb:42:e5:a0:32:2f:a3:d2:66:5f:a6:
2c:50:f0:b8:23:f6:68:25:58:5a:e6:6b:84:ad:cf:65:5e:9b:
3e:ef:54:42:7b:9d:cf:37:e8:bc:0d:5c:9a:cb:88:28:c5:76:
cb:a9:2e:21:cf:33:45:29:4b:57:73:74:0e:8b:d6:67:7d:f5:
d1:13:63:40:77:49:07:f1:95:8d:b4:53:18:e9:1a:55:da:18:
34:a5:78:2a:63:ca:92:48:d3:8f:e5:32:07:fa:41:f8:94:6f:
57:c8:34:84:1b:ea:9b:16:44:31:25:92:0c:df:db:db:1f:27:
fe:7f:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:30 2026 by rpki-client