Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json)
Hash identifier: UQNyGh1BcPly4P6CB522UkNc7LQ+djHMt3zbvwoGaYc=
Subject key identifier: 31:93:24:74:57:A3:A2:A4:EC:12:18:28:36:28:C0:B3:9A:A0:32:50
Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Certificate serial: 019EB80EF109B9B06A5A9C094B9C9B9B629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
Manifest number: 1954
Signing time: Thu 11 Jun 2026 19:00:47 +0000
Manifest this update: Thu 11 Jun 2026 19:00:47 +0000
Manifest next update: Fri 12 Jun 2026 19:00:47 +0000
Files and hashes: 1: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (hash: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q=)
2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: sj9hju7OF1hHOT9oM1TW115itDcUBtnqKv2oeUbco+M=)
3: zr9U94ldVmEqABzp28N8U7oLDs8.roa (hash: uuO8FGDaDTUpNR5s2Koo87GcscBCUOkl1Mw1TeypQQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0e:f1:09:b9:b0:6a:5a:9c:09:4b:9c:9b:9b:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec
Validity
Not Before: Jun 11 19:00:47 2026 GMT
Not After : Jun 12 19:00:47 2026 GMT
Subject: CN=3193247457a3a2a4ec1218283628c0b39aa03250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:74:69:80:d9:de:7e:43:1e:fc:6c:e0:8a:
7f:29:2a:f0:fb:09:20:b1:e5:94:6f:f8:d3:ff:ea:
6d:25:57:62:5d:0f:3e:ff:29:ad:f8:a6:1f:4b:e9:
0c:07:6d:34:b4:63:71:dd:9d:3c:9c:12:07:5f:1e:
c9:47:a3:19:00:73:0a:3b:89:c2:1b:d6:de:b7:d4:
56:7c:77:05:d4:cd:bd:ba:f2:1e:2a:64:48:b1:63:
50:11:77:4f:55:ac:a1:16:1d:46:15:a1:5b:17:1a:
0e:2a:7a:cd:42:82:27:e5:fe:4b:55:36:45:0c:67:
a8:4b:60:7e:20:ee:b4:b5:8d:1d:c5:67:fb:c3:69:
47:55:27:e0:79:5c:b4:f9:85:8a:59:66:60:3a:02:
1f:6e:4d:f5:14:58:4e:02:5c:04:76:d1:c7:86:6c:
cc:a5:98:b3:14:9b:d5:ae:37:41:99:66:3f:62:93:
4c:fc:04:b4:f1:47:bb:14:85:85:e1:2a:fa:fe:a8:
3f:d5:5d:02:52:53:39:0f:f1:f1:0c:2c:0c:08:58:
fc:97:3a:23:ee:aa:b2:96:10:ba:e1:74:b0:4c:4b:
c1:48:d0:d2:78:92:f5:fc:5b:e7:7b:5b:3c:da:0c:
4e:ee:28:86:ad:b6:c4:f3:6e:f8:39:68:9f:08:5d:
61:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:24:74:57:A3:A2:A4:EC:12:18:28:36:28:C0:B3:9A:A0:32:50
X509v3 Authority Key Identifier:
keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:40:af:29:65:98:7f:7e:9c:74:cd:19:42:32:53:f7:fa:e6:
b5:44:9b:2d:ac:97:86:5d:c5:df:25:5e:c4:6c:13:21:37:c8:
43:88:45:3f:05:78:3b:6d:60:44:b9:ab:1f:5c:54:95:bc:6c:
62:04:25:97:15:c3:2b:5d:60:34:84:3a:f4:8e:3f:40:18:2c:
3f:a8:b6:a4:95:af:f8:b1:91:f7:b1:b2:b5:68:34:ee:9e:c6:
c1:6c:17:9e:b2:f6:6e:09:de:63:32:37:3b:3f:9f:2f:96:25:
ae:9b:49:78:93:f7:b0:aa:bf:fc:c2:32:46:b7:e0:e3:a8:b3:
7c:dc:67:16:b7:fa:bd:d2:ba:75:84:92:f8:55:bd:f5:5c:c5:
66:9e:a7:91:21:40:f3:93:47:9b:5e:4b:66:9e:aa:c5:1d:5c:
bc:e5:2f:83:e8:31:3b:27:8c:18:a2:90:67:4b:18:e5:89:6b:
a4:63:00:13:54:16:0d:96:53:22:e3:1c:b6:23:7f:4d:30:65:
b5:a1:5c:90:db:0b:01:c4:3c:11:4f:d7:bc:55:4a:dd:b7:82:
ce:c6:d4:bc:c9:e6:53:b7:75:b2:90:af:78:e5:e8:8c:66:d6:
9e:93:e9:05:ca:b9:b7:7a:90:c7:04:2f:5b:a4:12:22:39:d1:
50:59:f2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:04 2026 by rpki-client