Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: Sap3MWkrxA1P3JYUeON4jdVkQzcWOVe70F7D22XO6qo=
Subject key identifier: 9A:FA:B0:3B:A1:E3:8E:B2:A8:32:49:CA:62:50:27:F7:99:F4:6B:95
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019F1A1F3D2038960C5744B9DAF1A2ABDCA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 20:01:22 +0000
Manifest this update: Tue 30 Jun 2026 20:01:22 +0000
Manifest next update: Wed 01 Jul 2026 20:01:22 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: kHKRgj8MmNa+cHrvTJTk45NNOH2RxCa5pCqQzwsQ/S0=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:3d:20:38:96:0c:57:44:b9:da:f1:a2:ab:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Jun 30 20:01:22 2026 GMT
Not After : Jul 1 20:01:22 2026 GMT
Subject: CN=9afab03ba1e38eb2a83249ca625027f799f46b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:11:9c:21:43:79:4c:f0:ba:77:ab:28:28:73:
90:b2:d0:13:14:73:d4:02:d1:7d:6e:fa:a2:03:bf:
31:fd:d6:2d:3f:37:a5:79:70:3c:cc:0b:5a:e6:4f:
74:7e:8d:88:c1:39:4d:cf:4c:14:51:c1:19:4b:7c:
1a:3b:07:d4:75:af:92:7c:c3:a4:9c:f2:40:a6:6d:
e4:fc:dc:86:26:8f:48:d1:0f:77:7a:1a:95:e4:bf:
d6:2e:04:89:b2:ed:c1:e7:3c:cd:51:b2:ea:03:f6:
dd:bc:bc:16:26:45:fc:f5:5a:d9:42:37:0f:66:d5:
aa:27:bb:67:07:a4:d1:d2:f8:77:15:6c:10:c3:f4:
47:64:20:b4:66:e9:45:df:29:a8:86:8c:3a:e5:0b:
55:c6:bd:a1:c6:2a:92:31:2a:73:62:d7:3b:6e:18:
75:1f:b9:28:78:16:a6:b9:00:93:7a:4f:a1:0c:83:
be:51:a7:32:ef:62:cd:e9:70:47:dd:cf:5e:c6:f2:
aa:4c:2c:ae:a8:da:51:1c:9b:0c:ba:07:a8:5c:24:
12:c5:f4:67:b9:0d:95:9d:df:af:2a:e5:bb:59:46:
ee:89:89:30:b4:ad:b2:c0:45:d1:03:b8:65:24:95:
6c:8d:a7:15:0c:69:24:ca:a2:48:a3:1c:ca:2c:1d:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:B0:3B:A1:E3:8E:B2:A8:32:49:CA:62:50:27:F7:99:F4:6B:95
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:68:14:02:21:24:cb:0d:1a:c5:23:d4:5f:5f:24:6f:97:26:
80:6c:a9:0e:89:e8:ab:7e:54:b0:d1:8a:cd:9d:fe:ba:8b:dc:
9a:eb:2b:65:e6:eb:c3:ca:43:af:18:30:76:df:b5:dd:6a:dd:
eb:17:ef:83:14:b4:3a:94:80:5a:29:fc:90:0c:a6:ab:1f:46:
c1:1b:06:33:82:db:a8:c6:a1:60:dd:bf:30:3c:49:eb:2e:ae:
83:71:48:ed:16:81:d3:6d:4d:1d:3f:9c:69:59:37:07:23:de:
3a:52:24:06:cb:09:35:50:84:d9:8f:66:64:b0:32:b4:28:a8:
4e:04:8b:dd:c7:ea:4e:a5:d1:72:7f:ce:b2:9b:66:f7:6f:c4:
60:fb:04:99:d2:20:f2:90:ca:e3:24:5f:68:b5:85:f3:fd:aa:
00:8c:51:fd:7e:cc:86:a7:61:ce:73:ab:a5:55:22:ab:1e:7f:
1d:81:7d:88:2a:5f:c3:a2:ee:3e:f1:16:64:89:e8:da:0f:9e:
84:9d:28:76:61:79:b2:aa:2e:a7:e3:40:01:0e:6b:23:c8:fa:
e9:f5:6f:0b:6a:a8:34:3e:f8:00:a2:d4:1c:68:40:fd:67:f4:
e0:ab:b1:22:bc:15:e1:1e:7c:5a:42:99:7a:97:e9:80:58:b0:
1e:b7:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:45:09 2026 by rpki-client