
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier: xQKg9d0MW49c+XxXlulqfUhnqFRmrcPVfCO2xog3VDw=
Subject key identifier: 56:50:79:EB:E4:32:46:DC:1F:94:55:1F:8E:2A:0E:B4:18:F4:BD:7E
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019F178C162E6E6F86D5334A0B51FF3E43B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number: 1232
Signing time: Tue 30 Jun 2026 08:01:24 +0000
Manifest this update: Tue 30 Jun 2026 08:01:24 +0000
Manifest next update: Wed 01 Jul 2026 08:01:24 +0000
Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: VNAHPCJvI+m+j7yK1ddZxZ7HZiVjvoLVZyDucM3kieQ=)
3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=)
4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=)
5: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
6: aY_8elSb_8uPtGsvwdPAoghtAvU.asa (hash: 76WdsCvAP23WdKa5dRnRSbPtIWmjIgnXov9zdJdVJm4=)
7: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=)
8: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:16:2e:6e:6f:86:d5:33:4a:0b:51:ff:3e:43:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jun 30 08:01:24 2026 GMT
Not After : Jul 1 08:01:24 2026 GMT
Subject: CN=565079ebe43246dc1f94551f8e2a0eb418f4bd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:dc:12:85:b2:51:4a:0a:64:fd:24:ad:28:34:
e6:ca:5e:4e:7e:6f:ae:d8:d3:ac:66:fe:6b:5b:f1:
bb:58:e3:c2:b4:de:5c:ca:a6:ce:f3:93:8b:44:cd:
5a:97:2d:43:dd:71:eb:35:41:47:d0:f7:cc:da:bd:
e2:72:d8:05:5a:ee:e8:d5:21:6d:ce:87:42:3f:99:
97:dd:06:ca:7f:83:c1:4e:5c:ba:6a:33:41:0d:16:
b1:08:12:2f:9d:ec:46:e4:64:a0:71:49:0f:24:9e:
f4:4c:e8:c2:5b:35:eb:ef:5a:29:3f:2c:45:a7:16:
99:14:de:2b:e5:0f:21:9c:c3:40:37:d5:a6:ef:12:
9f:a2:82:d2:4e:27:ca:b9:6c:4d:0f:90:ca:a2:42:
98:02:4b:39:f6:e0:93:0b:6a:e2:12:9f:fd:33:a1:
99:da:36:b0:a0:15:01:4f:f6:dd:b5:f9:8f:b0:72:
a7:dc:b9:9a:66:b4:be:6d:13:6e:70:9d:5d:4f:29:
19:a6:36:fc:a9:c0:9e:42:f0:0e:48:1a:2f:e1:2a:
94:32:9e:d1:a1:72:83:99:fd:0f:e2:57:2e:20:6a:
35:ac:ba:06:22:78:b2:e8:0b:30:35:93:89:a7:b9:
e2:c8:e7:b8:4f:ed:71:ed:c9:1a:e2:88:54:3f:53:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:79:EB:E4:32:46:DC:1F:94:55:1F:8E:2A:0E:B4:18:F4:BD:7E
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:63:e2:61:56:62:9c:38:9f:23:61:37:1d:39:7e:61:6e:
c8:08:61:71:14:f8:23:1c:9d:28:64:19:6a:18:b1:83:aa:f6:
d7:e0:ad:5f:36:0f:58:5f:e1:5a:39:0f:ed:11:31:e5:25:91:
9e:8d:7f:19:21:87:a0:18:b1:9c:79:b5:ae:06:fc:5d:15:e1:
9d:b2:46:83:95:d4:fd:57:1b:98:72:b3:9b:d0:97:3b:10:75:
5d:f1:44:11:49:88:c3:d6:dd:f9:39:36:f2:77:2d:e9:60:40:
a2:e0:a8:52:c9:cc:09:4d:f7:d6:e3:d9:70:0d:92:49:f3:9c:
04:8c:7a:8c:35:65:98:9b:31:d9:a1:e7:8d:65:ce:52:de:6e:
e1:40:d2:6c:03:6e:2e:c5:3a:6d:23:2d:4e:14:85:33:fb:c3:
d4:61:20:3c:40:4f:4a:c4:93:d1:37:e4:70:e8:05:9a:84:3c:
57:c7:48:a6:d4:42:27:02:ce:c0:90:6a:a4:9f:dc:86:38:17:
26:a9:ba:a3:f9:1b:22:6d:f7:e4:11:d1:d7:a3:b7:c6:6e:b5:
8b:f8:43:1c:9a:c7:4c:ba:30:9c:89:59:84:a2:a1:67:fb:7b:
07:21:9c:69:25:05:6a:bb:aa:43:d4:3c:15:3a:03:d2:7a:95:
60:c5:10:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:14 2026 by rpki-client