Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json)
Hash identifier: Pi40E0FVOWVUoZJiOnytJc9oBfaPYFixqg1qItPLcmk=
Subject key identifier: 27:AD:83:20:A2:93:AC:75:87:17:BC:CE:33:97:74:88:18:33:F9:F3
Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Certificate serial: 019EB8EA5C30FCD526C0EA39F01AD3E1092D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
Manifest number: 0DD1
Signing time: Thu 11 Jun 2026 23:00:27 +0000
Manifest this update: Thu 11 Jun 2026 23:00:27 +0000
Manifest next update: Fri 12 Jun 2026 23:00:27 +0000
Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: IMOlIkq+XBl7QFiiR2aIZsr28KmhhnZ1EOH5UTh+p+E=)
2: B2xnjVLlq6B_PpOEtmPjM7HfJcE.roa (hash: Nq8Xgw/1x5u+OoYFPhSCZA8CfwNsYk4XNh9rnTNcOs4=)
3: jm5djjCBI4GuTu1q__jIGCgAw8M.roa (hash: aQBVu8CEknSd70NfkOxHQ8mA1JwVa6QyrHMRXeQPFvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:ea:5c:30:fc:d5:26:c0:ea:39:f0:1a:d3:e1:09:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28
Validity
Not Before: Jun 11 23:00:27 2026 GMT
Not After : Jun 12 23:00:27 2026 GMT
Subject: CN=27ad8320a293ac758717bcce339774881833f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:2e:d1:1f:8a:62:8b:98:7e:fa:f9:b3:2d:
46:df:ae:36:52:79:d9:60:e4:53:f9:5a:87:ca:9a:
fe:8c:83:5b:1d:32:00:04:70:9a:22:b5:d2:07:2f:
ad:10:1d:54:a7:d6:79:06:8d:60:fa:ed:38:aa:0b:
40:fd:0f:31:c7:f0:62:1b:9b:17:1c:dd:ea:b0:80:
ff:15:05:99:3b:ea:58:99:bf:67:cb:92:3a:71:1a:
03:fa:64:40:91:d2:5f:3f:4c:eb:da:38:2f:4d:17:
da:53:3b:86:04:8c:4b:c9:13:41:2a:26:f4:96:36:
81:f5:b8:cc:98:04:34:34:00:3c:3f:4d:3f:27:be:
ac:13:51:87:b6:97:91:a8:28:fb:56:56:49:f7:81:
9e:56:b7:b5:ba:66:17:46:a6:7a:78:79:dd:fd:ca:
38:d3:44:31:cb:fe:68:f1:5a:a2:f4:5c:ec:36:df:
6a:bd:00:ee:9b:a2:ac:e9:81:26:7c:86:60:6a:ee:
a0:6f:3d:09:7e:3f:9a:e9:67:ea:b2:4f:2e:75:5e:
61:6c:80:7c:89:1c:b7:45:a0:44:4e:3d:78:f7:99:
df:a5:56:0a:ab:89:49:92:90:be:37:93:01:e9:2a:
f3:2e:6a:a1:bf:29:c8:16:20:50:bc:eb:42:fe:11:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AD:83:20:A2:93:AC:75:87:17:BC:CE:33:97:74:88:18:33:F9:F3
X509v3 Authority Key Identifier:
keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4d:18:52:5a:04:4e:de:7f:77:f2:07:e4:db:52:95:5c:c4:
0b:0c:58:11:30:f2:42:73:0b:25:13:ae:ac:e0:e0:3b:e7:c3:
66:e9:15:76:4f:fa:8c:82:91:fd:03:28:7c:ae:fc:e1:1b:ca:
78:57:c7:7e:fb:79:28:23:7e:7a:ff:cf:1d:15:b1:04:f2:dd:
a2:88:7d:30:bf:5e:d7:c8:f2:de:26:30:16:bf:e0:5c:45:fa:
c9:2a:6c:97:07:56:cc:14:d4:77:b5:2d:b4:22:eb:04:ae:98:
18:a6:32:53:26:ec:cc:c5:3f:f8:ef:82:61:fa:eb:74:1f:46:
f7:e2:66:93:34:bd:f9:81:40:c6:bf:fb:22:f3:d4:08:91:cc:
14:30:bd:74:e2:ac:f2:6c:97:59:03:9a:de:92:52:29:30:da:
ba:dd:78:f4:3f:f8:9c:21:9f:38:19:dc:44:78:4c:aa:27:ed:
5a:db:5f:7f:7c:50:a6:4b:bd:b8:c2:21:60:a9:a3:c0:fc:cd:
74:17:01:89:3b:fc:30:27:52:aa:28:1e:a6:8d:20:05:81:50:
41:20:0a:2e:2f:52:f7:96:2d:23:be:e0:15:5f:15:2f:c3:99:
82:f5:7f:ae:7d:16:44:58:fe:eb:6d:20:ae:48:87:b5:90:0b:
12:d2:16:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:46:38 2026 by rpki-client