Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json)
Hash identifier: tko8RPUi0pZesgE1LGIY84p0Bvacre5HUti7IzhEDkE=
Subject key identifier: FA:AE:84:1C:C1:D7:3A:75:22:F7:E5:96:77:57:DD:8A:E2:74:E4:C8
Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Certificate serial: 019F197A41F174D0FC641264E572B1721A68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
Manifest number: 1069
Signing time: Tue 30 Jun 2026 17:01:10 +0000
Manifest this update: Tue 30 Jun 2026 17:01:10 +0000
Manifest next update: Wed 01 Jul 2026 17:01:10 +0000
Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: czCSyzyhATVvs5sI+GrSGShq+RjiDMcOjVrVBm/vx7w=)
2: h5DIp02VidThuOHraMPFCodvygs.roa (hash: xwNLtlpo98S4VMl0NrrQV2mRppmcREH8EvSc90IeL2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:7a:41:f1:74:d0:fc:64:12:64:e5:72:b1:72:1a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2
Validity
Not Before: Jun 30 17:01:10 2026 GMT
Not After : Jul 1 17:01:10 2026 GMT
Subject: CN=faae841cc1d73a7522f7e5967757dd8ae274e4c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:64:01:7d:df:57:45:33:69:76:9a:29:d6:
f4:38:50:d2:d6:39:8e:06:45:04:67:2f:3c:e9:51:
aa:de:11:46:4d:f1:f3:5a:86:9e:73:85:1e:58:0e:
18:18:2b:b7:c6:1f:28:d6:42:79:ea:f6:a5:8f:76:
3c:ce:ce:49:06:a1:7e:49:56:88:b2:ea:00:80:a1:
1d:a1:e5:a4:63:73:c9:22:52:d7:d4:69:3f:72:e5:
b3:05:de:7f:f6:68:d8:bc:0b:65:0f:d5:9f:85:ef:
07:ec:30:1c:0a:38:b7:0b:37:83:64:df:20:f7:9c:
8d:66:64:99:f8:d7:d1:38:61:79:3a:aa:8b:56:01:
8e:b7:86:d1:d7:e5:f8:90:5a:0d:0a:87:9f:e2:fe:
9f:63:4d:1d:4b:51:7b:b6:17:8d:68:5f:7e:96:61:
6e:8e:d8:9e:0e:36:ad:65:86:1f:7e:17:86:0c:81:
90:52:71:21:66:e7:66:85:56:c6:67:6e:d8:bf:e6:
d7:8b:2e:da:e2:e2:d1:0e:c3:f2:72:6c:da:c3:d4:
56:36:c7:3d:0c:d0:de:68:b2:40:66:98:48:ba:aa:
d5:c3:e9:9c:1e:a3:85:fd:6a:e8:d5:a3:af:12:0e:
44:a5:42:fb:17:b0:fa:3c:bf:fc:67:84:e8:32:30:
1b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:84:1C:C1:D7:3A:75:22:F7:E5:96:77:57:DD:8A:E2:74:E4:C8
X509v3 Authority Key Identifier:
keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:b0:c4:f6:b2:3e:0a:d9:82:34:90:df:55:2e:fa:c8:77:
51:4c:e0:05:a1:d1:10:32:e3:04:e0:31:a2:ac:5a:c2:08:fd:
61:ee:9f:d5:b4:89:a0:9e:39:c4:82:79:05:b6:a1:ff:5d:0a:
c0:30:d2:92:89:73:5b:1b:d6:76:17:65:9b:ed:c4:3f:45:17:
1d:d8:08:20:d7:7b:66:e9:3c:6d:89:8d:a2:3d:58:c9:4c:89:
88:04:b7:81:9e:d6:b7:68:e5:84:bc:eb:cc:8a:36:36:eb:f3:
f7:29:71:fc:bf:41:0f:e0:f0:0a:be:6d:a5:55:76:4f:25:41:
f1:94:d7:22:28:07:43:b0:c2:c2:d0:d4:4e:75:60:3b:ad:fe:
9a:7d:bd:fe:5f:d6:ef:f0:02:75:be:3f:e1:d5:4f:e0:ee:97:
8d:5b:8c:01:08:36:0b:26:ea:5e:59:20:ee:e0:ae:0d:74:8a:
94:2e:b7:5d:ae:97:68:6b:ec:b7:13:ed:5a:bf:2d:2e:e3:02:
d0:ee:8b:da:8a:cc:29:bb:b2:ca:14:9b:08:b3:26:c0:2d:7c:
c2:05:47:9c:d0:84:11:8b:7b:f8:82:60:f3:d9:49:8f:e3:15:
58:7d:67:5d:ae:18:98:e1:ba:21:be:87:b9:df:78:b2:ee:06:
94:77:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client