Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier: HIZAAVL7FAalxlJ7HbBknlEpKhKsbCtsqFRdYWa7I3w=
Subject key identifier: 8B:BD:40:78:FE:2C:E1:F7:2A:23:F1:0C:02:0B:D1:44:58:05:82:AD
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer: /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial: 019F17F98C34B036DFA9D397E8AD4290E2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number: 0C38
Signing time: Tue 30 Jun 2026 10:00:58 +0000
Manifest this update: Tue 30 Jun 2026 10:00:58 +0000
Manifest next update: Wed 01 Jul 2026 10:00:58 +0000
Files and hashes: 1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: su9LpjPZex5qWIjve6nF2n9cH77k1WDTp3XWYTtpOl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:8c:34:b0:36:df:a9:d3:97:e8:ad:42:90:e2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
Validity
Not Before: Jun 30 10:00:58 2026 GMT
Not After : Jul 1 10:00:58 2026 GMT
Subject: CN=8bbd4078fe2ce1f72a23f10c020bd144580582ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:59:df:fa:7b:ae:51:34:5f:39:ce:e5:58:
05:93:2d:88:b8:42:60:42:18:0b:b3:80:a3:08:d6:
89:e2:da:1a:ab:d1:71:f5:2d:e4:1b:59:a1:fb:9a:
31:e5:ad:1b:00:5e:da:9e:a1:2b:06:20:94:fd:0d:
f3:24:0b:21:d2:cb:3f:35:a2:6c:bd:f2:f6:4e:ca:
1d:87:1a:1c:8a:97:0b:d5:c4:d5:23:76:22:e0:fb:
95:e4:fd:b4:68:a4:ee:b2:ab:d7:2f:a7:e6:5d:73:
66:8e:38:13:6d:d1:ee:bb:7f:4a:4e:9d:4e:26:a2:
9a:63:ca:0a:4b:6f:36:fe:0c:80:2f:cb:d0:d1:1f:
86:4a:04:a1:40:20:38:be:e7:ca:99:85:ec:8a:2c:
1d:94:ec:f9:4b:4d:e4:30:b9:0d:a6:e8:be:4b:05:
87:78:65:cf:83:1c:a6:b5:53:a3:80:59:e1:5f:6f:
9d:79:51:cf:e4:12:41:52:fc:59:c9:69:9c:af:09:
12:48:8a:d1:8f:b7:0c:d8:f5:81:d0:9d:9f:9d:86:
51:6c:0c:05:dc:27:c6:0b:95:b8:84:c1:84:3d:f7:
05:9a:0b:4b:c2:97:b9:8d:10:39:91:73:e5:02:05:
19:42:58:6c:bd:62:7a:e9:d0:c1:32:90:13:7e:78:
0e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BD:40:78:FE:2C:E1:F7:2A:23:F1:0C:02:0B:D1:44:58:05:82:AD
X509v3 Authority Key Identifier:
keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:08:de:f5:0b:48:22:2e:c5:e6:4a:70:40:54:23:d5:0c:9e:
5f:09:ab:99:f2:c5:b1:27:e4:f0:01:b2:17:4d:49:27:65:ab:
64:d7:a6:b4:65:bc:e9:2b:d5:f5:12:68:ee:f3:b3:1a:53:45:
14:3d:25:51:59:b0:3a:7c:eb:ab:44:7a:38:b2:88:a9:7b:33:
44:c2:52:ed:82:fc:2d:62:37:11:67:16:da:20:41:f6:96:37:
11:72:42:0c:a9:49:84:5b:7e:99:93:de:ed:e0:c4:dd:ff:7d:
99:22:ee:5f:43:1b:29:be:06:65:aa:c7:e8:5c:ed:2d:bc:a4:
a3:95:16:8d:35:ad:20:92:d1:b9:62:a4:64:37:da:2d:ed:94:
b9:bf:e0:04:21:50:25:b2:da:c3:de:c5:ee:e1:14:81:18:cb:
05:92:dc:77:2a:e2:6d:73:a1:8f:75:4e:df:02:32:47:d4:fd:
34:bd:0a:82:e0:5f:55:e9:67:be:e4:e8:eb:13:e6:a1:2e:a3:
ab:b4:50:cc:86:72:14:d4:f3:f1:38:fe:9c:fa:2c:b9:17:d9:
d6:58:2b:32:ac:31:a6:5b:33:37:ec:c7:21:63:c9:83:44:c8:
5f:ee:49:f2:96:17:74:28:ca:cb:dc:06:08:85:e9:7d:32:bb:
b1:7c:ea:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:34 2026 by rpki-client