Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json)
Hash identifier: w3nTMaYZ4onzY/Xn0GmXJqcpGbkAbHK3paaSIZUp9AM=
Subject key identifier: 24:27:22:09:0A:34:90:16:75:F6:CB:7B:CC:65:85:D1:2C:CF:84:FE
Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661
Certificate serial: 019F19441ED8807A3E24722F0FED0EE80C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 16:02:02 +0000
Manifest this update: Tue 30 Jun 2026 16:02:02 +0000
Manifest next update: Wed 01 Jul 2026 16:02:02 +0000
Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: hYmTXNyjncKoVz5/UdEnkUFl0YDtVkweYUnTh5ZxiJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:44:1e:d8:80:7a:3e:24:72:2f:0f:ed:0e:e8:0c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661
Validity
Not Before: Jun 30 16:02:02 2026 GMT
Not After : Jul 1 16:02:02 2026 GMT
Subject: CN=242722090a34901675f6cb7bcc6585d12ccf84fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:4b:e8:65:46:0e:70:22:4f:7b:fb:c4:30:
27:01:1d:35:cc:27:49:04:d3:eb:99:a1:26:61:a5:
8e:cc:23:04:15:7b:f0:bc:3e:22:b2:94:a1:14:91:
bd:b4:80:05:9f:47:4d:03:c2:7a:28:3e:60:5d:1e:
06:f7:59:5e:df:1e:2e:00:13:e6:a7:f5:28:26:39:
db:bd:5d:e8:4b:71:95:be:73:48:c8:2f:03:1e:b6:
fa:68:f7:c7:38:57:3d:4c:28:fc:a3:40:c1:2e:9d:
a7:16:5f:61:e3:b7:6e:56:6e:5b:93:e6:76:25:ff:
15:12:2f:ad:47:b1:40:7a:ba:bd:1d:ce:57:a7:06:
1a:d2:66:5b:99:e2:79:ec:e9:e8:74:71:8a:e0:2b:
3e:d0:48:15:82:dd:e2:8b:d5:85:76:9a:5a:3f:31:
05:96:04:5d:a9:72:99:04:5a:b3:c7:57:18:5d:41:
f0:70:46:f2:30:a0:1c:09:46:16:ed:a1:f3:ec:50:
8b:2b:0b:75:86:d0:2d:ff:68:da:a0:7b:de:1e:ec:
92:f6:9e:89:84:e4:64:29:4b:bc:d1:d2:78:e2:97:
08:12:de:ab:7b:23:8a:ca:fe:89:1c:58:88:98:f4:
6a:0a:bb:5e:e1:91:74:15:f9:b7:47:02:81:1e:bc:
27:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:22:09:0A:34:90:16:75:F6:CB:7B:CC:65:85:D1:2C:CF:84:FE
X509v3 Authority Key Identifier:
keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:64:20:0d:09:39:7d:1c:0f:04:e8:f2:07:e1:e8:22:ef:
d1:a7:1d:6a:13:3c:c0:16:31:36:04:16:82:7e:46:28:73:67:
a2:b2:16:0d:89:8b:98:b1:2c:51:15:10:0a:a4:c2:4a:f4:25:
78:e2:4c:7b:21:34:67:8d:59:df:31:1f:9e:72:de:3b:04:21:
f4:bc:d7:8a:c5:49:dd:7d:76:ea:d0:1d:4c:d5:df:96:a5:77:
1d:e4:f0:4b:2c:47:31:83:cf:e4:78:ae:d4:d9:df:20:11:cc:
17:1e:fa:d9:17:29:43:e9:bc:9e:0e:35:83:93:7e:c7:8d:c5:
03:fd:8f:52:b7:63:e6:f5:76:6c:33:64:86:1b:ba:69:11:03:
37:8b:9a:61:16:26:74:f4:3d:75:33:6b:cf:7c:6f:e3:a2:cf:
fd:ed:7e:a2:2f:08:fd:3b:da:9c:a8:59:eb:4f:d7:45:ab:74:
1b:45:96:d5:ac:d4:a5:48:b5:9b:69:51:8e:cf:25:f7:81:90:
53:33:25:4b:42:b5:12:c9:a1:d4:58:a6:d2:72:e8:2f:30:c1:
bb:8f:44:47:00:bb:26:df:38:af:3d:10:40:96:0d:be:cc:68:
c5:5f:77:b4:86:af:aa:71:35:75:28:1a:ca:c5:41:1b:44:cb:
58:af:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:26 2026 by rpki-client