Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: LNp+xMSE1GHKcCjNnTd3AzLWzMhuWxtKemLnIK9ncYI=
Subject key identifier: AF:88:EC:EE:E5:E5:8E:26:86:35:92:C0:14:0D:22:FB:E0:91:AE:1B
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019F17F9F6155F3C6A100C28E21F35F0DBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 10A6
Signing time: Tue 30 Jun 2026 10:01:24 +0000
Manifest this update: Tue 30 Jun 2026 10:01:24 +0000
Manifest next update: Wed 01 Jul 2026 10:01:24 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: pNUpjgNKjum9RaTIbD5APVxr/gyrsSjpj8SgtUrhF9c=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:f6:15:5f:3c:6a:10:0c:28:e2:1f:35:f0:db:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jun 30 10:01:24 2026 GMT
Not After : Jul 1 10:01:24 2026 GMT
Subject: CN=af88eceee5e58e26863592c0140d22fbe091ae1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:7f:71:31:5a:d1:ae:c1:b2:71:c3:5c:cd:
f2:46:e0:17:56:52:28:31:2d:5f:b8:a8:9d:60:af:
04:64:63:f1:e3:75:c3:02:b3:92:c3:13:e0:97:e4:
b0:6e:c7:e9:ce:2c:f8:49:2f:2a:8c:fb:52:79:44:
4a:84:16:c8:59:21:f6:28:a0:7f:ad:10:33:cc:ba:
2f:c8:30:14:cd:4e:59:0d:ce:43:cb:2a:7a:1e:ca:
b7:2d:c1:7f:12:89:a3:bc:89:8e:b6:fa:a7:0b:21:
c1:f9:c6:99:30:80:2b:b0:b9:05:59:6d:3c:a3:77:
fa:61:ea:76:bb:4f:bc:c8:90:ff:0f:8c:9a:c6:10:
b0:e4:4e:cc:c2:2e:c3:6f:0e:65:11:d3:31:ad:4b:
a9:71:f7:fb:bd:f5:ae:fd:5e:d1:fe:cc:7d:b3:d4:
0e:e6:88:51:a8:c0:6b:d7:fc:f1:5f:70:02:b7:de:
19:6e:6e:87:19:fa:76:a8:89:2d:e5:42:db:1c:12:
c8:dd:7c:00:82:70:ca:0e:c3:8d:5b:06:ce:e8:de:
c2:be:05:5e:00:25:4e:ca:fb:fd:6e:07:32:7b:2b:
23:8f:59:4c:4f:20:81:e4:ba:08:5f:7d:bd:ed:5a:
da:fb:3a:cb:9e:08:19:99:6e:dc:a5:e4:04:c0:0c:
bf:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:EC:EE:E5:E5:8E:26:86:35:92:C0:14:0D:22:FB:E0:91:AE:1B
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:81:52:89:17:c8:70:98:a2:a7:46:8c:6e:cb:65:a6:00:
8c:2d:d5:66:b3:aa:9f:0d:52:3f:72:d3:b2:3f:5d:db:4a:0f:
80:79:3b:cd:e7:da:00:65:8a:42:20:32:36:2b:c4:d2:da:de:
22:d1:9b:bb:b0:45:90:2c:3b:db:14:ef:69:13:82:43:fc:e4:
17:24:63:28:9f:f0:23:f3:01:7b:c9:38:9b:b7:95:af:1f:95:
da:33:45:4d:79:a6:9b:b6:fa:33:24:8a:b9:e3:2e:d4:65:c5:
63:b8:f2:85:bc:ce:c0:1a:2e:d3:6d:32:3a:34:d5:ef:8e:b8:
f0:00:d0:89:dd:3a:04:0d:02:9d:18:4f:6c:f3:88:54:e3:29:
4a:6d:91:29:17:34:25:12:92:41:af:a7:db:61:d1:46:49:21:
20:63:5f:61:24:b2:9f:ba:21:8e:59:06:f9:8a:37:e5:75:07:
fc:c5:0a:2f:83:6e:fd:e4:1b:0a:71:28:99:cb:c1:04:86:3d:
ce:62:80:16:9c:60:56:30:d9:e7:c7:d3:c5:2a:42:b0:8d:41:
f4:92:8a:b4:55:02:cf:ae:25:71:17:b5:46:6e:b2:de:0a:7c:
97:58:97:fe:bc:d7:b0:12:c4:e2:eb:8c:2a:ca:5f:c2:99:63:
01:e8:2b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:17:25 2026 by rpki-client