Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.mft
File: 9cA_dxycZIaGDf8AEzCErfQXntU.mft (raw, json)
Hash identifier: 6JOoOAAYeel/kkIdgbREgTwLguTG8jIl3f5n730yF78=
Subject key identifier: 98:67:0D:96:EE:14:1A:3E:DE:5B:79:67:BF:B7:CB:AF:ED:EF:B6:44
Authority key identifier: F5:C0:3F:77:1C:9C:64:86:86:0D:FF:00:13:30:84:AD:F4:17:9E:D5
Certificate issuer: /CN=f5c03f771c9c6486860dff00133084adf4179ed5
Certificate serial: 019F10E50FE8882F7116AB1774D9CB9C7352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.mft
Manifest number: 21
Signing time: Mon 29 Jun 2026 01:01:14 +0000
Manifest this update: Mon 29 Jun 2026 01:01:14 +0000
Manifest next update: Tue 30 Jun 2026 01:01:14 +0000
Files and hashes: 1: 6eVPRcuq7X6jCVaERkIsCdThGe0.roa (hash: uhoIKP3pEqa7ZD5MTx3PJZqCfkbKO9Q0t6bNoj/nKfc=)
2: 9cA_dxycZIaGDf8AEzCErfQXntU.crl (hash: KudjK+XoJYp1xQyf+7XfhVprtd3wSeoDCS4BVQDpuME=)
3: limQF4fSfZwSE7UU-Mgge_UeCbM.asa (hash: aKunn3kPONNJQfDmzXBphEzLepmudbuVwfUrHNMBnWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:0f:e8:88:2f:71:16:ab:17:74:d9:cb:9c:73:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5c03f771c9c6486860dff00133084adf4179ed5
Validity
Not Before: Jun 29 01:01:14 2026 GMT
Not After : Jun 30 01:01:14 2026 GMT
Subject: CN=98670d96ee141a3ede5b7967bfb7cbafedefb644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:2f:62:51:6b:ec:ca:1c:10:dc:96:a1:58:
4a:32:48:d6:93:e0:f8:63:1d:02:84:8c:c8:60:2d:
9e:56:7d:90:86:e6:26:f6:73:46:2d:66:2c:87:24:
c7:9f:4e:10:ac:a1:5e:89:1d:77:e0:6b:97:e4:3b:
10:e5:cc:fc:ab:d2:e1:8c:5c:2c:fd:b3:fe:e4:79:
9f:9e:01:cc:e7:e1:72:65:73:47:c3:ea:b4:e3:b6:
f1:d9:6a:25:51:f8:0d:6d:a6:3a:be:98:f5:41:52:
8c:c7:b1:3f:73:6d:02:16:89:2e:25:9d:4d:79:ad:
9a:10:a8:c3:e5:3e:01:cc:3b:f3:94:a3:08:6e:67:
ad:8e:a7:e2:8d:73:89:6c:b2:af:53:8a:85:16:15:
8b:cd:cf:aa:8d:e5:78:40:bd:79:29:74:15:89:51:
b9:96:aa:69:13:5f:96:3a:80:6a:60:bb:fb:0c:3c:
af:75:cc:54:0f:f6:2d:43:e3:32:e8:93:3d:9b:78:
16:12:0d:3a:f6:56:df:03:00:37:a5:7b:f2:8c:14:
16:7d:ef:89:df:e4:7a:3a:1f:f3:6e:53:d9:f7:15:
df:8c:0d:69:68:74:a7:19:8d:64:46:3e:3b:a3:d3:
22:9f:68:79:cf:df:3f:06:61:72:44:01:31:1e:f4:
02:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:67:0D:96:EE:14:1A:3E:DE:5B:79:67:BF:B7:CB:AF:ED:EF:B6:44
X509v3 Authority Key Identifier:
keyid:F5:C0:3F:77:1C:9C:64:86:86:0D:FF:00:13:30:84:AD:F4:17:9E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cA_dxycZIaGDf8AEzCErfQXntU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cbef6d-db73-4d8b-b0cc-f06e89c4770a/1/9cA_dxycZIaGDf8AEzCErfQXntU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7e:1c:54:8b:b2:3f:d6:e3:ef:a0:a2:27:d1:9b:cd:37:7e:
fd:82:3d:ab:4d:df:bd:0e:e2:4b:c5:b2:71:24:fc:eb:ce:5d:
45:cc:13:0c:4e:20:2f:a6:eb:46:51:11:fe:ac:54:b4:ab:6d:
a4:bc:96:3d:b6:46:63:67:fa:ef:a3:0d:52:d8:d8:fc:4a:f1:
24:26:05:0a:96:b5:7f:8a:71:15:59:12:11:3e:05:62:19:8a:
ce:15:24:ec:e7:77:97:34:a3:bb:4f:c0:95:11:63:95:f1:7b:
b2:b5:f5:19:e3:f8:e1:e1:04:53:a4:01:02:3e:eb:32:45:bd:
bb:87:c4:65:51:ae:13:09:bc:33:e9:32:a7:02:74:0b:8c:ab:
9e:18:25:de:47:2b:37:ce:ba:68:50:1b:01:2c:13:bd:c8:fb:
84:fe:79:c8:07:f8:ef:be:0c:ec:c5:05:0d:01:82:bd:e0:d7:
0b:86:d1:e2:a4:15:46:b9:11:ed:be:cf:3b:00:9a:86:32:de:
4c:13:b8:79:17:3a:6c:13:6d:56:d7:8d:fe:83:54:b7:18:62:
62:45:d4:f0:1b:64:98:d3:f6:3e:d3:e3:40:57:4a:ef:4d:07:
09:ef:ff:a7:9f:3f:19:c5:e7:41:d8:be:e2:02:a8:14:77:86:
21:6a:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:48 2026 by rpki-client