Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
File: 9OcXTG90-poisK3uJRqNZDEjE_I.mft (raw, json)
Hash identifier: M/3erOaNEAdhDuvFvTgA6BjfNOZ71fsZ82L01CeGRjM=
Subject key identifier: 91:15:19:06:BF:0C:E9:9E:52:A0:BE:13:30:2D:9C:6B:68:30:30:34
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 019F189E8A99E9F42968572E37A8AF5FF40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
Manifest number: 1919
Signing time: Tue 30 Jun 2026 13:01:11 +0000
Manifest this update: Tue 30 Jun 2026 13:01:11 +0000
Manifest next update: Wed 01 Jul 2026 13:01:11 +0000
Files and hashes: 1: 9OcXTG90-poisK3uJRqNZDEjE_I.crl (hash: HL0fx8uw552xiMVFWbACEG4GuY7iZfJ9QYuMPxPbscg=)
2: n5-SbGgTWlbW_C1J7zQnQwhdk_I.roa (hash: 20MmpTiNHIRI615LwLOcDmRN7JohlEVDp5KlQ4ApT5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:8a:99:e9:f4:29:68:57:2e:37:a8:af:5f:f4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jun 30 13:01:11 2026 GMT
Not After : Jul 1 13:01:11 2026 GMT
Subject: CN=91151906bf0ce99e52a0be13302d9c6b68303034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:99:7c:71:da:0f:16:3e:3d:df:c5:98:7b:ad:
4e:93:a8:48:31:27:14:7e:8c:90:50:59:e9:41:ee:
64:9c:3b:7b:02:f3:13:56:24:25:7c:b3:b5:4c:41:
46:91:b2:c8:76:81:cb:cd:70:99:45:e0:0a:51:31:
e5:1b:e1:3c:61:00:d6:65:e3:7a:c4:41:a2:32:9e:
03:e3:2f:53:53:e4:63:bd:3b:06:a6:f9:9f:dc:4d:
ba:9b:98:15:70:a1:2f:7a:ba:99:24:68:46:30:16:
1a:2e:b7:a7:a5:ba:d6:0b:4a:12:41:a1:dd:3d:71:
a4:19:36:55:f6:4b:33:12:99:5d:73:3d:0f:2b:40:
54:39:24:63:22:70:ba:d9:8a:28:00:2c:ba:56:9b:
9a:41:b2:db:c9:b6:82:71:9b:7d:8a:9c:46:c1:10:
43:d3:be:2a:60:1d:ee:7b:af:01:6c:cb:55:cb:6c:
5f:c0:8e:bd:58:f9:b2:d4:41:51:e8:3f:bc:4f:76:
2d:35:22:0f:a4:00:87:58:76:42:61:52:2d:30:c9:
34:b3:d6:80:40:ed:39:03:ba:7d:75:7c:54:29:35:
e4:71:e3:2e:50:66:3d:de:36:63:96:3b:cf:61:8a:
c4:e2:2a:2c:27:7c:79:9a:3b:a5:ce:5b:d6:40:08:
9c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:19:06:BF:0C:E9:9E:52:A0:BE:13:30:2D:9C:6B:68:30:30:34
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3a:d3:f8:7a:2e:d2:02:06:72:51:42:cc:5d:87:a2:fe:87:
0c:dd:7e:d1:c4:24:09:f6:f7:5d:29:c5:ea:40:21:df:65:8e:
b0:7c:34:69:a0:10:de:c7:30:6b:2b:6c:b2:9d:b7:fb:14:50:
a3:37:48:43:b0:7d:96:11:dd:27:a9:3b:c9:c3:07:cc:24:18:
1b:fe:e2:a0:86:80:fd:2a:91:f8:c6:34:39:1e:51:46:a1:7f:
12:ea:01:27:3e:92:ba:85:5e:5c:e6:7e:18:53:3a:17:d8:ce:
70:86:c2:64:9b:4d:39:aa:64:5a:55:cd:a9:1f:43:63:18:51:
bf:55:94:08:31:5b:d9:4c:c6:ed:51:7f:79:d1:53:0f:86:88:
1d:3d:82:ab:db:75:b7:2a:d6:0e:3b:e6:0a:df:c2:7e:1d:76:
2b:94:cb:4f:9f:b7:65:27:34:12:44:07:c0:cc:2f:22:68:eb:
0c:82:2a:4c:59:db:a0:8c:c0:0d:bc:66:b5:db:e9:32:2d:36:
5b:68:6d:3e:02:74:be:8e:fb:12:3b:89:7d:e8:0f:9c:23:35:
7f:a9:c3:c7:f2:f1:3b:0c:f4:79:80:9a:b8:c4:4e:02:74:4e:
d2:29:b8:43:45:c2:1c:bb:f6:6a:43:c6:00:93:a7:45:5e:43:
03:89:f4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnoqZ6fQpaFcuN6ivX/QKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy
MzEzZjIwHhcNMjYwNjMwMTMwMTExWhcNMjYwNzAxMTMwMTExWjAzMTEwLwYDVQQD
Eyg5MTE1MTkwNmJmMGNlOTllNTJhMGJlMTMzMDJkOWM2YjY4MzAzMDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zl8cdoPFj4938WYe61Ok6hIMScU
foyQUFnpQe5knDt7AvMTViQlfLO1TEFGkbLIdoHLzXCZReAKUTHlG+E8YQDWZeN6
xEGiMp4D4y9TU+RjvTsGpvmf3E26m5gVcKEverqZJGhGMBYaLrenpbrWC0oSQaHd
PXGkGTZV9kszEpldcz0PK0BUOSRjInC62YooACy6VpuaQbLbybaCcZt9ipxGwRBD
074qYB3ue68BbMtVy2xfwI69WPmy1EFR6D+8T3YtNSIPpACHWHZCYVItMMk0s9aA
QO05A7p9dXxUKTXkceMuUGY93jZjljvPYYrE4iosJ3x5mjulzlvWQAic3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEVGQa/DOmeUqC+EzAtnGtoMDA0MB8GA1UdIwQY
MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt
Mjg5NzhjM2M3ZWM1LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1
LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjrT+Hou
0gIGclFCzF2Hov6HDN1+0cQkCfb3XSnF6kAh32WOsHw0aaAQ3scwaytssp23+xRQ
ozdIQ7B9lhHdJ6k7ycMHzCQYG/7ioIaA/SqR+MY0OR5RRqF/EuoBJz6SuoVeXOZ+
GFM6F9jOcIbCZJtNOapkWlXNqR9DYxhRv1WUCDFb2UzG7VF/edFTD4aIHT2Cq9t1
tyrWDjvmCt/Cfh12K5TLT5+3ZSc0EkQHwMwvImjrDIIqTFnboIzADbxmtdvpMi02
W2htPgJ0vo77EjuJfegPnCM1f6nDx/LxOwz0eYCauMROAnRO0im4Q0XCHLv2akPG
AJOnRV5DA4n0WQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:07 2026 by rpki-client