Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
File: 6f383DJhtXr63-1zD7Le2yhkn88.mft (raw, json)
Hash identifier: AOu0nWt2scnqnr3WLhk9g6DD2YLQW+88bGbIYRL8c9g=
Subject key identifier: 91:77:E5:D1:71:D7:54:0F:5F:E3:6A:02:2C:89:96:CD:88:45:21:0D
Authority key identifier: E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
Certificate issuer: /CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Certificate serial: 019F0D759BE4F7F53D15DF011177C6B3E5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
Manifest number: 1989
Signing time: Sun 28 Jun 2026 09:00:39 +0000
Manifest this update: Sun 28 Jun 2026 09:00:39 +0000
Manifest next update: Mon 29 Jun 2026 09:00:39 +0000
Files and hashes: 1: 6f383DJhtXr63-1zD7Le2yhkn88.crl (hash: jFn7ov7d4y2SXJeYdHliKf1W7HSddfhDT3r7h9GE5wg=)
2: z8QPDmNfQ0U5nDiOWR6fhTlT5bY.roa (hash: JpJdMydt2d4jsczclhW+ZcOFIoTDZoU5V9xzlSAiVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 09:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:75:9b:e4:f7:f5:3d:15:df:01:11:77:c6:b3:e5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fdfcdc3261b57afadfed730fb2dedb28649fcf
Validity
Not Before: Jun 28 09:00:39 2026 GMT
Not After : Jun 29 09:00:39 2026 GMT
Subject: CN=9177e5d171d7540f5fe36a022c8996cd8845210d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:4c:b6:33:66:10:64:15:f3:84:63:cd:3b:
a3:89:87:f0:9c:36:61:d8:f7:93:f4:c9:3b:a9:76:
38:3d:fc:d1:6c:79:cf:4b:a3:dd:f8:45:b6:df:c0:
c2:0f:42:3e:4d:25:a3:6c:ef:47:7e:ac:91:8e:3a:
73:27:72:46:ee:4e:ff:a9:17:aa:7a:de:aa:fc:ad:
01:0e:84:0e:d2:50:0a:86:99:96:e8:5e:c6:59:57:
89:f4:1c:35:68:d1:0f:ca:60:94:3b:a6:44:33:1b:
0c:ac:0b:93:1f:d0:5c:22:a6:52:a7:af:92:9a:dd:
f9:60:44:d7:f8:74:c8:07:dd:ac:ad:f3:36:88:a2:
f9:5d:de:38:fa:6c:7f:5b:46:84:16:ec:ba:89:85:
e6:4e:89:38:78:2e:c4:d9:26:ea:57:63:04:66:e9:
4e:d3:e1:de:1d:84:62:76:5f:87:e4:8b:d1:8e:9b:
a9:07:3f:b3:e7:60:9a:5a:0b:36:50:82:fb:a1:d0:
87:24:25:19:45:2f:0a:db:50:5e:2e:e0:77:a7:82:
ff:18:91:72:2a:bd:b5:db:40:59:b6:5d:e9:35:36:
d6:42:58:1b:92:e2:8e:22:d8:b0:dc:a2:8d:6d:2a:
7b:dd:db:50:54:70:56:3e:72:0d:e8:39:fa:61:c2:
81:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:77:E5:D1:71:D7:54:0F:5F:E3:6A:02:2C:89:96:CD:88:45:21:0D
X509v3 Authority Key Identifier:
keyid:E9:FD:FC:DC:32:61:B5:7A:FA:DF:ED:73:0F:B2:DE:DB:28:64:9F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f383DJhtXr63-1zD7Le2yhkn88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/1ba191-a42a-4509-bb28-0bc7e7ef0763/1/6f383DJhtXr63-1zD7Le2yhkn88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:c6:05:47:62:56:a3:1c:68:fc:44:89:3b:b9:cd:32:d6:ba:
b9:61:3e:06:66:bc:08:6d:04:f8:3c:bc:4e:3f:21:97:38:58:
7f:26:07:b8:3e:b3:dc:a1:84:10:c3:69:e7:29:96:93:0f:6d:
99:a0:b1:d0:94:ac:eb:7a:fc:2c:d8:8c:e7:04:0f:7d:2a:bb:
0f:a6:2e:93:fc:6b:9a:aa:59:17:1e:bc:7d:02:81:0d:3d:91:
04:8f:1b:02:36:fb:64:b7:e3:0a:2b:40:14:45:7f:a8:3f:11:
a4:43:b5:ad:71:70:5a:a0:28:33:ca:54:5f:69:10:7d:0a:47:
41:f6:4d:41:8f:42:8a:bd:54:55:82:29:00:69:bb:4d:29:60:
61:be:4e:50:f1:89:07:79:8f:60:33:3e:f4:95:57:13:18:86:
37:11:8b:63:f3:8e:49:19:f4:46:42:69:f5:15:4d:61:cd:c7:
33:f3:fc:4e:46:06:2d:eb:e4:78:65:07:e1:65:68:18:2d:e0:
6f:55:bb:c1:ec:c6:f9:d4:b2:ae:75:66:85:f4:3c:f6:a9:82:
aa:6f:0f:95:11:5e:16:b7:94:2a:20:9e:a9:8e:4d:64:53:d4:
57:b5:b0:90:8a:e2:e0:5b:99:a2:9d:fe:86:37:81:b2:d3:62:
ef:ea:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:57:16 2026 by rpki-client