Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier: eEq3VDh7XDHd5kxC007PsvoNDVRhyzajREiAFijXaT4=
Subject key identifier: D9:4E:D5:50:E2:18:01:2E:72:FB:38:86:EB:8A:20:1D:00:88:A6:72
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial: 019EB8461BA08A82D70E90F77E0087324180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 20:01:02 +0000
Manifest this update: Thu 11 Jun 2026 20:01:02 +0000
Manifest next update: Fri 12 Jun 2026 20:01:02 +0000
Files and hashes: 1: Qli-_KAiZO--cwXE6BiLVvkXnvE.roa (hash: XDHHjBldy51jEL7NRWc+r09QR8fWSiNl63GYDTe9i8c=)
2: dEbHBpx-Qlw4LJgcmplwQSKp84s.roa (hash: abREOFRAe+blSD0PVxwpI2VH/k4U+4z7iiH4ff/516k=)
3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: YysfBH/0s0a/6zMD6nnIH0ibcr1WH2qHnz6QrhNMeg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:46:1b:a0:8a:82:d7:0e:90:f7:7e:00:87:32:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Validity
Not Before: Jun 11 20:01:02 2026 GMT
Not After : Jun 12 20:01:02 2026 GMT
Subject: CN=d94ed550e218012e72fb3886eb8a201d0088a672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:3a:7a:58:39:94:e9:62:60:80:73:a2:91:
d2:18:be:29:d6:9d:fb:1e:fe:06:e8:9e:6a:a9:c0:
a3:c6:db:ba:37:e9:06:91:8e:56:33:44:45:5e:8b:
59:2b:2a:89:28:51:cd:f7:63:78:bd:d1:00:6d:41:
a1:9c:a1:a9:79:30:05:46:14:b5:b5:b2:02:18:06:
c6:7b:d1:19:8e:b7:83:1c:d4:df:c9:cb:21:a9:44:
19:c8:cf:1e:55:c3:10:09:d9:2f:4f:75:dc:e8:13:
3b:97:51:e8:f0:65:51:38:70:a9:4f:a5:61:6e:5b:
d7:f2:56:6f:22:4b:8e:7e:12:26:8b:f7:e1:3d:48:
bc:a5:ab:f4:58:fd:f4:9d:38:96:0e:06:eb:b0:41:
28:81:0b:70:9a:e9:be:b0:57:e8:2e:6a:50:66:c3:
7f:c1:6b:38:71:de:d8:68:bf:5d:1c:7f:d4:d2:b1:
05:77:70:61:3a:b9:c0:5f:44:f2:68:5e:77:94:13:
c2:8f:86:2a:9c:9a:07:2e:e5:04:a5:9d:82:a7:97:
48:74:f1:51:12:e8:64:6d:7f:2e:8e:51:97:94:1f:
2d:c7:8a:c4:ef:bb:06:2e:9d:11:7e:1e:02:b8:dd:
5e:ab:52:99:4d:e3:e0:7c:37:04:98:8c:4e:d7:10:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4E:D5:50:E2:18:01:2E:72:FB:38:86:EB:8A:20:1D:00:88:A6:72
X509v3 Authority Key Identifier:
keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d4:cc:c9:f6:96:00:b2:35:15:9a:92:ca:64:7d:2e:2a:39:
f0:24:2f:db:7d:d0:ba:4d:2d:05:df:4b:51:a9:11:67:a4:89:
53:f2:9f:5c:ff:3e:ca:0e:d1:af:73:8f:83:42:6e:a3:7b:da:
4d:7b:76:72:22:4f:ce:9b:94:81:85:49:d5:a7:2a:70:eb:57:
78:83:d3:5f:cc:54:45:8f:36:b9:6f:2a:ce:15:68:da:f6:43:
2c:20:37:51:45:8e:00:8f:07:4f:0c:80:d3:10:5f:32:a0:95:
e9:22:a2:60:71:9d:ea:98:d7:8e:dd:3e:9b:18:91:7f:33:6f:
6d:eb:76:00:87:aa:01:2d:6a:ac:d1:b6:3d:a2:e3:f2:d0:23:
c8:c8:ab:46:35:e8:90:0c:22:81:fe:fc:4d:c3:9a:d5:c2:3b:
33:17:3d:62:2b:43:6d:a0:3c:58:00:56:ed:e6:a6:dc:93:4e:
59:d0:79:89:48:77:28:34:d4:29:ff:59:8a:4b:97:a8:ec:e4:
1f:d8:91:58:c6:32:62:c3:18:27:e8:44:87:64:f4:87:37:0f:
16:49:78:37:2f:cc:f2:33:35:1d:1a:9c:bc:5e:34:17:9e:86:
f8:1f:30:94:95:65:c1:85:d2:f7:0a:65:7e:1e:11:ab:c1:06:
27:63:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:18:39 2026 by rpki-client