Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File: m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier: Sw4en1iM8t5QEpvgClFspIRuksXF/uodVXuNiV3DG6o=
Subject key identifier: 1C:34:A2:22:5C:AF:A4:E2:4F:4D:7C:02:42:D6:02:D7:5D:D5:67:31
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer: /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial: 019EB76A5A3C3DD1D2C8C8A03BBE0E137062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number: 0B99
Signing time: Thu 11 Jun 2026 16:01:00 +0000
Manifest this update: Thu 11 Jun 2026 16:01:00 +0000
Manifest next update: Fri 12 Jun 2026 16:01:00 +0000
Files and hashes: 1: PyWCYQsc-RXqOD6ZcPJVeLZsTb0.roa (hash: So755h/YppAq4z9zJnxXyj3ozNgia1MYJ3MvAVJ9wDU=)
2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: IJWCsr2utplayux+i9YEc+Ja8XPDRd0Qq6PrVfdVEv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:5a:3c:3d:d1:d2:c8:c8:a0:3b:be:0e:13:70:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Validity
Not Before: Jun 11 16:01:00 2026 GMT
Not After : Jun 12 16:01:00 2026 GMT
Subject: CN=1c34a2225cafa4e24f4d7c0242d602d75dd56731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f6:e7:75:c6:30:e7:89:77:5e:83:21:7b:f1:
4a:22:30:6b:91:f6:55:af:d3:62:f8:9a:88:39:71:
3d:6f:34:59:f9:88:fb:17:0d:c1:b6:4a:25:e1:e4:
06:f8:69:5f:b7:a0:90:fd:41:3e:bb:93:e9:c7:45:
19:22:41:85:a8:e6:d2:4c:18:b1:c8:14:95:6b:fe:
c9:d1:fd:09:bd:53:69:64:23:06:ff:d9:81:62:b2:
49:52:1b:76:5d:76:6a:e9:80:01:a6:cb:7c:5a:c8:
b4:49:ab:b6:4d:53:ea:d9:3b:96:ea:ce:2d:1a:1f:
6d:f4:6f:8f:9a:62:f9:f7:1d:47:8e:bc:01:d4:dc:
eb:66:b1:81:7e:47:7f:83:42:85:e2:84:18:b1:9d:
51:aa:ed:91:4e:35:6e:e1:86:47:75:94:5f:26:ad:
7c:d0:42:a4:60:d0:fe:17:de:30:4c:61:cb:ac:98:
13:7c:8d:f4:3e:16:7c:dd:cf:fb:cf:0d:8c:c7:87:
4d:29:3d:b4:1e:f8:08:db:98:a5:8f:09:a6:83:c1:
38:d2:a9:25:ff:73:08:c2:aa:eb:6e:84:83:0c:dc:
07:4c:af:93:0e:4d:dd:f8:2b:66:c9:dd:cb:69:34:
74:0e:7d:0c:c2:87:5b:9c:11:d6:41:3a:9b:e9:99:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:A2:22:5C:AF:A4:E2:4F:4D:7C:02:42:D6:02:D7:5D:D5:67:31
X509v3 Authority Key Identifier:
keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e6:cc:38:eb:98:1a:d1:b1:c9:19:5d:3e:b5:21:e1:d4:b1:
d0:59:ac:d5:28:4f:ba:91:aa:e7:d4:f1:2b:06:72:a1:e1:ce:
12:75:45:d6:4b:e6:6c:d3:bc:8d:87:94:16:6c:8b:e3:42:25:
20:2d:ca:9a:81:f1:c3:df:73:b2:d5:29:f8:67:86:f2:60:f4:
86:80:54:c7:6c:49:9c:c5:1f:47:fe:7f:fb:24:e8:a2:72:02:
52:92:e9:a3:94:8d:6b:38:ff:61:65:be:9a:d7:e5:d3:27:b9:
4f:de:a6:15:d9:09:e3:81:90:b2:ad:19:11:73:93:7f:20:d3:
fa:de:e4:62:f9:fb:ee:2d:ff:3a:cb:35:6f:e8:47:21:6a:ee:
94:54:7f:bd:b8:ed:7f:a0:88:e7:fa:10:b2:4e:54:cc:ec:0e:
22:4c:c4:00:07:d6:a8:0b:bf:39:f3:5d:04:f5:75:15:fd:93:
8e:72:d5:57:d7:1d:30:66:a4:98:1e:4b:0f:22:f5:63:b3:2f:
b5:e1:67:f0:89:d1:75:b5:ac:4d:6c:54:7b:12:a1:48:d5:61:
d1:a6:ee:f8:e1:46:e7:30:5a:a1:e7:68:b9:9c:af:02:76:9c:
4e:f7:58:49:77:3d:41:67:33:3d:96:77:27:df:0b:04:1d:3c:
dc:3e:86:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:13:59 2026 by rpki-client