Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File: i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier: OYJajKsUd6Jy3US6yrlgN8BZs7SHkIkbuoGsjV2PxqQ=
Subject key identifier: 4C:33:BC:8F:9C:A7:ED:23:51:13:29:54:A7:AF:C1:BE:87:2F:BC:5A
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019F115332E830CD05E5F859D94C048BB47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number: 16D0
Signing time: Mon 29 Jun 2026 03:01:32 +0000
Manifest this update: Mon 29 Jun 2026 03:01:32 +0000
Manifest next update: Tue 30 Jun 2026 03:01:32 +0000
Files and hashes: 1: 1-e3X3nnOITuhFUTt48TdT2Qw-5U.roa (hash: u9UX0jZDejI6w83BZaY3pHdg72rNaFEVz4TXqidtNXA=)
2: 7hXt0G-jAewVo9SLLBLF8mSNTRw.roa (hash: RGVhqfDwwLv2X0LaWx7Lzm4mlYckos+0jolSCL9fUm4=)
3: FO34XpplAW7QlRa_nhaWh0bzK1M.roa (hash: OY8jMW/Q0/vSfJsf4E0K4jOzUbbQOka6dbLisQTbUTM=)
4: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (hash: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=)
5: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: 4Nr4BGqua5tscnPg260pOb+QSzuc6wagsxFWmzB77wQ=)
6: llJY_tMKH9qEG2EGVgJMVtNu4P4.roa (hash: Q4aZamr0Kbs+h6gmlTqUcfEDvUgGQgiHgd9HSFEOpoY=)
7: nIcvudeqlMIht11QekdVthrczgo.roa (hash: svSV1NBTRVorlHVW7eGPa2t3Z9YIKYtLoAxuuHh5a0M=)
8: q1z9wEUZ-3q2dVe1kVMgwooEueU.roa (hash: 0i6Usfk5Np9doym2lgfbGxDGei4jmouvH6UyKjL5l/k=)
9: z7PU2MzlVVAvlrQw6iVcszWYAXo.roa (hash: 9X6Zea/pUy8vlr4IvEYXZRJ/+mqoqTxPdepT8vjAq6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:32:e8:30:cd:05:e5:f8:59:d9:4c:04:8b:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jun 29 03:01:32 2026 GMT
Not After : Jun 30 03:01:32 2026 GMT
Subject: CN=4c33bc8f9ca7ed2351132954a7afc1be872fbc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:38:2e:eb:b3:25:3e:d8:fd:48:a0:ee:6a:
7e:1e:5f:21:c0:b1:06:f1:48:3f:cb:41:c4:c1:b6:
77:ce:e7:63:f9:46:7e:89:0a:06:54:52:54:83:ae:
9e:e1:66:3e:3d:3b:ea:99:cb:a3:de:90:3e:24:97:
65:fe:62:3e:81:01:cd:82:5f:9c:f2:a1:93:52:02:
02:ae:bd:3e:81:62:ef:43:65:c9:1e:86:37:28:32:
a3:fe:a9:81:f8:33:3e:73:2f:1b:2f:18:89:14:3e:
96:2e:20:01:ff:45:1e:73:b5:1e:3b:25:3c:6e:4e:
86:b5:4d:08:ad:ad:20:01:59:67:21:19:c2:ef:f6:
0b:8b:50:0b:1f:35:c9:f7:af:01:5a:5f:42:34:e6:
8a:09:ef:14:7a:1f:cf:4b:4e:cf:44:f2:5e:76:cb:
0c:15:35:1f:93:45:6f:d7:21:a1:b2:74:56:ad:69:
0d:27:5f:fb:49:fc:a8:14:4a:89:7c:0f:18:6f:5f:
a3:dc:0e:3c:4b:e4:e9:c1:42:e7:23:f0:c2:f1:7e:
30:ef:ef:85:21:b7:03:ea:0b:9a:74:ce:fd:d8:2b:
11:64:15:09:02:4b:d0:76:90:6e:ed:9b:11:02:97:
3e:6b:63:dd:cc:8b:bc:95:7e:7f:1b:60:a2:92:f1:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:33:BC:8F:9C:A7:ED:23:51:13:29:54:A7:AF:C1:BE:87:2F:BC:5A
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bc:f9:55:22:3c:75:9c:99:8c:83:0e:14:91:fa:63:f7:c7:
30:a4:8b:ba:90:9b:bb:22:e0:63:1b:b8:38:9b:dd:46:80:98:
11:cb:5b:c9:45:1f:8c:7d:45:a3:e8:b4:37:3f:0e:13:26:37:
0c:b0:26:8f:ad:40:37:5e:4c:fe:93:ee:a4:0d:e7:d3:24:b1:
99:03:23:b2:a5:28:5b:11:b3:23:e6:1f:fd:ff:f6:8b:db:0b:
83:a9:23:8f:95:b7:57:e4:5d:b3:54:5f:88:7d:8c:f1:2b:40:
2f:36:67:da:fd:6a:c1:d9:1d:a6:57:d0:2c:80:d9:0f:96:09:
56:54:66:f8:38:b5:85:e6:9a:b1:2d:59:b7:6d:89:66:02:44:
d2:8c:14:30:18:35:43:64:99:76:94:d1:ba:5f:4b:26:2e:41:
28:5c:e3:17:53:0e:f3:69:65:c9:96:a5:d1:b5:e4:df:c7:b8:
10:49:fa:eb:75:0d:d6:4a:f7:14:a7:ec:b3:7b:05:0c:f8:e4:
a7:01:97:a7:50:4f:c0:c1:ca:d8:53:ff:d0:9c:6e:87:39:af:
48:89:61:dd:12:f2:a6:c1:fa:c1:e3:68:53:e8:70:9d:03:90:
b7:b2:d3:77:d7:7f:94:37:2e:b0:3c:66:f7:27:16:fc:07:be:
8d:78:50:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:54 2026 by rpki-client