Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json)
Hash identifier: GIRLgK5SvDZq4nthiKGppcOuziocHEvSlCYJW6z0ky4=
Subject key identifier: 17:E4:3B:E5:58:D8:DA:5E:5D:78:A4:0F:4F:03:99:86:4A:BB:EA:D4
Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Certificate serial: 019F17F9540B0428BC7A383BE4D9CE4CB1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
Manifest number: 11F3
Signing time: Tue 30 Jun 2026 10:00:43 +0000
Manifest this update: Tue 30 Jun 2026 10:00:43 +0000
Manifest next update: Wed 01 Jul 2026 10:00:43 +0000
Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: ZZaxrWdzI8y/VYQ5ndF1VCDbb2LhAvxthdO+gMf4iDY=)
2: H6y7FRGe2OSBbFIjaqZT3Ye0FjM.roa (hash: U6dbvSJYipDEAI96TSbJISnUyXjBkTAwoHhgv4g0uO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:54:0b:04:28:bc:7a:38:3b:e4:d9:ce:4c:b1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f
Validity
Not Before: Jun 30 10:00:43 2026 GMT
Not After : Jul 1 10:00:43 2026 GMT
Subject: CN=17e43be558d8da5e5d78a40f4f0399864abbead4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0b:fe:08:64:48:f6:f4:1a:b3:c6:33:42:e2:
ee:72:97:35:bb:8d:af:d2:e0:bc:9f:43:7f:a1:7c:
8a:02:eb:53:57:e4:7b:11:bf:b7:bf:6f:5d:7f:fb:
f2:41:4d:47:d2:5f:19:5a:b9:d1:fb:f5:62:5b:d7:
c6:5d:eb:af:99:72:2a:d7:85:f7:41:21:d3:ac:5d:
1f:23:a6:a9:89:38:4c:5e:98:e1:a9:ac:60:44:fa:
29:e1:98:f6:a9:48:28:25:f1:ea:b2:99:54:1b:52:
95:19:08:4b:4e:ee:d8:46:57:06:a0:56:1d:83:c4:
ae:cc:21:dd:28:32:5c:ef:48:82:d7:56:40:bd:72:
83:8f:9f:93:a3:e9:13:06:a1:3b:d4:8e:81:6f:0a:
e4:e5:0f:10:a7:52:dc:ee:55:da:00:0a:b9:4c:cc:
49:2f:ed:97:4a:a6:27:ef:10:45:75:f2:0d:74:1b:
a2:0b:99:92:a3:f5:70:33:9a:d8:3e:a2:57:54:35:
38:9a:70:36:80:c5:f7:14:21:29:8c:24:d8:83:0c:
8e:be:ee:f9:8a:20:31:5b:67:74:2c:f8:6f:e8:ed:
5b:7a:c1:96:38:00:16:d9:1c:71:18:9f:66:5a:77:
17:44:2a:14:36:49:a4:7f:84:81:cb:76:13:e3:22:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:3B:E5:58:D8:DA:5E:5D:78:A4:0F:4F:03:99:86:4A:BB:EA:D4
X509v3 Authority Key Identifier:
keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:22:e7:96:b5:bb:20:88:ce:2a:a6:6f:ab:22:6d:67:ca:45:
4b:8c:6b:3c:b4:a2:69:bb:8f:85:b1:21:c4:b7:e1:86:2b:69:
9c:09:c6:70:15:18:ee:e1:1d:13:e8:1d:ab:3c:d7:78:ad:2e:
db:c2:8d:75:48:f4:49:fe:49:6f:cf:62:5a:02:59:67:c1:98:
bc:22:2e:49:f0:e8:95:de:47:75:2e:1e:63:6b:1c:0f:b5:99:
92:05:3a:94:3a:27:23:3d:a3:78:0f:34:c5:ef:e5:70:eb:b6:
74:b3:f8:42:d2:4e:76:8f:99:66:d9:c7:cc:55:33:f5:1f:ea:
03:fb:d5:ab:8d:98:4c:3c:ea:5e:75:13:6a:95:19:0c:f0:c4:
8e:6a:64:6e:f0:fe:05:ab:e7:44:bb:60:ab:39:97:ba:19:28:
1f:60:6c:76:72:6e:1e:12:3a:e6:02:3e:40:5f:f5:6b:e3:e2:
5a:8a:7a:c9:1b:8d:2e:2a:12:e6:7f:5c:53:a6:61:a9:60:b9:
ac:a3:77:a5:21:0d:97:55:6b:89:05:0b:28:92:c9:0e:8e:15:
c7:f3:4e:8b:31:b2:7a:78:35:f9:16:21:01:0d:38:ca:af:1f:
44:0d:4b:ef:14:66:51:14:b0:61:ba:bc:d0:c7:92:24:fe:ea:
ec:bc:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:49 2026 by rpki-client