Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json)
Hash identifier: mLuJQqopoH2VRHhV2ACUd46FPUmRbvm4ZJKs/I7Y/aM=
Subject key identifier: 68:84:60:51:44:67:E8:3E:77:9B:0D:C5:4C:CB:01:3E:B4:80:95:38
Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Certificate serial: 019F11F7C35156651B637CD50CDB4575E7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
Manifest number: 1092
Signing time: Mon 29 Jun 2026 06:01:17 +0000
Manifest this update: Mon 29 Jun 2026 06:01:17 +0000
Manifest next update: Tue 30 Jun 2026 06:01:17 +0000
Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: 7+P+/IbyFKa0rluCsOGtSsnXvHy+W8HrskK5bV4eK5Y=)
2: GdXLtakb-VVZb4sIMxasJO3C9e0.roa (hash: lYew3AcxBQCaUjqVtA2l1sMtRC1UlXtpZ4kuSqJbBQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:c3:51:56:65:1b:63:7c:d5:0c:db:45:75:e7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9
Validity
Not Before: Jun 29 06:01:17 2026 GMT
Not After : Jun 30 06:01:17 2026 GMT
Subject: CN=688460514467e83e779b0dc54ccb013eb4809538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:d0:df:45:be:c5:cf:3d:7c:6e:17:ec:f9:
57:10:18:02:23:8b:0e:32:57:ea:02:1a:d8:3c:1a:
8f:cf:c4:a1:13:39:77:45:e8:fb:13:b0:55:bd:e2:
6a:32:82:5c:01:27:01:26:89:6e:f1:b6:7a:45:73:
38:10:48:89:5b:be:16:a7:33:25:a3:bf:c9:88:0d:
2f:83:39:d5:de:0a:64:86:59:7d:ae:65:de:9d:55:
a4:8f:04:87:f2:92:fd:44:82:fa:74:13:b9:df:89:
37:63:56:c8:14:5b:e6:05:f4:fe:be:62:f4:c5:51:
3f:fb:0f:80:98:93:4d:6e:d6:ea:1d:50:98:08:e4:
bd:63:6f:7f:3c:d5:af:38:12:05:94:05:78:03:8e:
0a:c1:26:17:dc:91:16:80:f4:83:13:25:fc:ee:27:
42:d5:a4:4a:7c:19:ef:8b:34:d5:76:c1:8e:b8:fc:
cc:b7:90:d3:11:5c:55:0e:1a:d3:96:b4:76:b7:6f:
01:53:69:70:6e:25:7e:b2:26:f6:8f:62:f5:72:fc:
fa:dd:1b:48:5a:1c:ce:fd:c8:21:eb:38:a2:a0:19:
f2:86:02:8d:8b:4d:35:56:d9:64:08:de:94:96:05:
10:8f:84:f8:15:66:47:af:15:13:63:dd:5a:01:be:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:84:60:51:44:67:E8:3E:77:9B:0D:C5:4C:CB:01:3E:B4:80:95:38
X509v3 Authority Key Identifier:
keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:e5:8b:2d:95:9d:ca:aa:a5:19:e0:bc:9e:b1:a5:3e:78:
4a:e2:0b:10:81:4e:31:1b:2a:7f:5b:6c:94:f8:b1:ed:61:bc:
91:98:8c:77:ff:9e:44:a3:97:b2:b0:66:05:5f:d5:af:4c:6d:
9b:39:47:0a:9f:ca:d0:92:47:0f:38:16:3f:7f:bf:34:a1:40:
ee:d2:2f:ba:a2:d8:1d:cc:e9:0b:cd:70:33:77:b8:3d:71:c0:
ee:d7:7c:47:64:70:c3:30:46:df:69:0c:a4:ba:59:37:a3:20:
40:6d:30:2c:78:9e:b9:a5:12:0e:e9:1c:f7:0a:f7:56:b9:07:
d9:29:a7:97:e7:df:6a:7d:80:8a:da:09:dc:03:97:0b:14:9a:
d1:0b:6e:8a:7a:c6:b7:2f:81:ec:8e:50:52:eb:4b:dd:1e:4b:
61:0a:10:db:12:7b:1f:2b:f1:27:8a:56:c1:7a:23:38:27:73:
27:67:5a:28:dd:01:66:e3:5b:05:25:42:ad:12:55:15:cf:0f:
e5:17:b8:a8:49:83:73:cf:2c:2b:67:a9:d4:15:83:23:df:df:
81:ec:cb:10:e9:e6:e5:f6:00:72:c3:11:5b:a2:a3:ed:37:52:
dc:98:77:7b:d7:74:2f:21:2f:12:1e:18:74:67:3f:48:42:d1:
87:a8:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:04 2026 by rpki-client