Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: n9K0+ocv5EdkxsAft2VBYkrQ27LFtJQR8kyhirMKaEE=
Subject key identifier: 0E:C7:55:12:CC:2C:59:65:11:E5:84:68:4C:49:0B:7C:BC:21:3D:C8
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 019F073D6C5B5CBD90932E25A08B3E63FFDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 197F
Signing time: Sat 27 Jun 2026 04:01:33 +0000
Manifest this update: Sat 27 Jun 2026 04:01:33 +0000
Manifest next update: Sun 28 Jun 2026 04:01:33 +0000
Files and hashes: 1: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: zEpu7FfD1F9dveOW684NhfVBkQFcBnlvsqfUE34eIS4=)
2: VCFuIr9pM3EPsu68pVpUibKxyQU.roa (hash: apjsLzO5pIx4dzE8WjhYaxZke8s33ArYirHyx0Ruf9w=)
3: XlTxg3kTbgQ4ffELpk85x3UUxbA.roa (hash: hgNyQsC5iaVhcyee4oBmWD68ihN6089j1kYflggiKFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:07:3d:6c:5b:5c:bd:90:93:2e:25:a0:8b:3e:63:ff:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jun 27 04:01:33 2026 GMT
Not After : Jun 28 04:01:33 2026 GMT
Subject: CN=0ec75512cc2c596511e584684c490b7cbc213dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:f1:08:c9:51:49:40:49:2b:22:0e:a3:eb:
63:16:91:ab:40:9f:30:6f:0d:a7:b8:e1:ff:ab:14:
83:cd:2b:75:74:a6:32:fd:ab:4e:93:1f:78:b4:b5:
b9:6e:85:45:e5:4e:39:b0:28:f7:2c:4d:69:5e:a0:
e7:41:a2:ef:b0:f6:10:40:44:14:4a:37:ff:7a:c7:
6e:b5:8e:5a:29:72:e1:58:90:75:42:92:70:a4:64:
81:5c:b2:c1:2c:d3:f1:8f:89:00:07:e4:8b:f6:db:
ee:ce:6a:3e:dc:25:3f:a9:65:4c:32:68:3b:6a:1e:
52:4d:ea:5b:a6:5a:07:21:41:57:c5:a4:3d:f1:cf:
56:24:ed:e1:9b:1c:ba:6a:75:14:25:e4:da:fd:a2:
f0:f0:ae:d6:8f:bc:5c:47:de:f0:75:d3:d1:f8:b7:
87:77:82:b5:13:21:83:1b:fc:f2:f5:73:5d:99:5b:
7d:07:14:87:9f:5b:d0:4e:47:4d:af:e8:35:da:38:
88:68:89:a7:e4:9a:6f:70:9c:29:9a:cd:2a:24:ff:
68:96:38:ff:c8:4d:85:ea:8a:36:de:1a:f3:ee:73:
6f:f9:b4:71:f2:16:de:34:ec:86:db:0c:14:58:29:
ad:bd:e3:e7:fa:76:d4:6d:21:23:db:f0:15:b5:b3:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C7:55:12:CC:2C:59:65:11:E5:84:68:4C:49:0B:7C:BC:21:3D:C8
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:19:70:7c:ee:8a:62:bb:5d:a0:d0:24:15:a7:f5:81:91:63:
6a:11:06:89:0a:39:6a:36:88:62:c3:55:b3:b1:6d:70:51:e6:
a4:6b:59:b1:52:63:6f:e3:06:a6:4a:3e:ff:47:5c:a2:ba:a3:
d1:5a:03:03:8c:14:4c:19:2c:fb:08:75:37:84:ac:a8:b2:66:
20:3b:55:cf:94:5b:70:8a:f5:91:d3:31:35:e9:c2:fc:a8:83:
e2:22:95:db:da:94:72:c1:70:46:ce:c4:91:2b:8b:fa:af:bd:
ce:ed:78:1c:38:07:b9:ee:3f:01:c7:9f:15:23:ea:b1:f9:b7:
a1:69:2c:b8:08:04:63:bc:20:81:a2:b8:cb:29:23:fd:53:23:
75:cf:28:16:f8:39:43:a3:a7:8b:aa:96:4e:00:5b:e9:1f:84:
e7:a1:2c:c2:d9:38:47:4f:a8:06:ea:f0:fd:07:13:db:b9:70:
24:7c:18:60:ec:7f:f4:75:ec:2d:ec:3e:f5:60:11:3e:a2:aa:
b4:34:42:dc:66:24:8e:f1:38:c1:66:2e:f9:69:93:e9:eb:31:
5c:4d:d3:a1:d2:7e:65:0e:08:57:ab:eb:a3:8a:a2:7e:67:a9:
e7:7c:5c:b8:b9:13:0b:88:6a:8e:4e:61:6f:16:3c:1f:4e:a5:
4d:28:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 14:22:27 2026 by rpki-client