Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier: 9Y1aJZhCfmkxTcEUcvXpWTp+D7KZJRdYxx1lRA1b9A0=
Subject key identifier: 15:26:15:8F:C4:75:88:46:88:E3:1A:06:38:1A:4F:41:FC:06:45:5D
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer: /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial: 019EB8B3D6630586C3D58B5EC22EE37634A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number: 0DAF
Signing time: Thu 11 Jun 2026 22:00:53 +0000
Manifest this update: Thu 11 Jun 2026 22:00:53 +0000
Manifest next update: Fri 12 Jun 2026 22:00:53 +0000
Files and hashes: 1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: qLK/X8qbNzkIzPX9AR3JT9b9uzDeB6axyYTGdpqtjZc=)
2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b3:d6:63:05:86:c3:d5:8b:5e:c2:2e:e3:76:34:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Validity
Not Before: Jun 11 22:00:53 2026 GMT
Not After : Jun 12 22:00:53 2026 GMT
Subject: CN=1526158fc475884688e31a06381a4f41fc06455d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:1d:b9:ed:64:10:ab:8e:5e:71:60:1c:2f:
74:3d:f2:94:78:db:6c:4c:a5:62:ca:a3:a8:89:f3:
bf:8a:ec:58:5b:53:a6:6b:f1:c9:7f:0b:b7:0b:07:
16:46:99:04:34:7d:10:ff:96:9d:d0:ec:45:77:5c:
2e:91:ba:08:2f:9a:2d:f4:b5:b4:36:28:0e:18:9e:
47:d4:14:d1:52:bd:19:84:f3:79:92:e1:58:6f:7d:
8d:ad:a8:81:41:a8:eb:b1:c5:7a:1b:70:22:28:1a:
3a:17:04:32:43:79:89:db:e5:8f:a9:8c:0b:eb:76:
98:5f:2f:de:1e:f3:ba:c5:57:9f:42:be:fb:0e:d0:
1f:64:e9:a0:07:59:d3:9d:f1:26:59:46:27:a7:c4:
04:47:32:d2:2b:8f:87:93:0d:83:3e:e8:89:68:82:
ac:76:45:6c:6b:c1:aa:fd:07:28:3b:b0:0b:dc:eb:
2b:f4:81:73:12:5b:be:e6:5c:e6:49:9c:eb:7c:3f:
b5:93:7c:6d:02:74:47:ec:00:24:5c:ec:d0:b6:c0:
69:20:79:17:68:d4:98:c2:52:5c:cb:28:47:18:bf:
f8:2d:58:e7:03:fd:29:cd:8b:b0:24:c8:af:ce:ed:
25:22:b5:ca:d4:e0:c6:e4:82:13:ca:2e:12:67:6d:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:26:15:8F:C4:75:88:46:88:E3:1A:06:38:1A:4F:41:FC:06:45:5D
X509v3 Authority Key Identifier:
keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e5:15:20:63:ee:3d:00:c2:15:e3:1e:1f:b5:0b:cd:bf:35:
6f:66:ca:ac:35:77:fd:2f:8b:2d:1f:5f:a7:93:7d:ef:45:8d:
21:fe:d1:21:77:41:34:a8:c4:46:c4:d7:5a:bc:96:47:bb:fe:
36:67:e1:93:d6:f7:9e:df:d9:21:69:e1:50:1d:d1:03:22:3c:
d1:1c:f4:69:c2:5a:b5:70:b6:63:70:dd:05:f2:26:4d:36:1f:
7d:27:98:2c:0a:ce:37:ff:33:6d:20:f9:ce:92:19:7c:72:3d:
75:68:81:69:3f:70:56:37:0a:bd:68:f9:5c:c8:8e:4a:95:70:
a3:44:db:dc:34:6f:00:08:20:1d:0d:27:0c:9b:14:f3:6f:a1:
80:6f:d7:71:5b:b8:ed:e7:36:91:b8:56:d5:17:bd:74:96:33:
a1:53:a2:99:7a:96:1a:b9:24:4e:3c:4e:4d:05:3e:a9:d2:35:
30:f8:46:c2:7f:1b:16:2c:a6:22:4c:7f:c2:9e:42:08:3d:48:
38:d6:19:43:18:e1:bd:99:20:68:35:27:7c:47:00:d1:46:57:
00:c4:c1:af:8f:ca:37:68:5c:95:65:d7:59:55:64:24:8c:86:
2d:c1:0a:84:50:c3:0a:f9:c8:e1:5d:d0:84:0b:45:88:88:95:
53:c7:26:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:47:24 2026 by rpki-client