Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json)
Hash identifier: m0wGdrc4HuJcraCT3E//ef4hjPAkzfqTZ6MiNIgoA3o=
Subject key identifier: 00:C3:D8:59:6E:31:2B:02:D9:4A:C2:44:17:40:8B:6E:34:11:17:14
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial: 019F189F03C6EBD52DC2838C7198DBE108B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
Manifest number: 0D69
Signing time: Tue 30 Jun 2026 13:01:42 +0000
Manifest this update: Tue 30 Jun 2026 13:01:42 +0000
Manifest next update: Wed 01 Jul 2026 13:01:42 +0000
Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: pGREeepbSeA5dyJ62NjSvdDxLaeL63vXnySqtRo+ejY=)
2: sIunFd-UhDIY2he6578HnH9KYM4.roa (hash: cM+uL/KniFpxQyhA1SMW/C3f3nO1DxP+MeewVaQ/1Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9f:03:c6:eb:d5:2d:c2:83:8c:71:98:db:e1:08:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Validity
Not Before: Jun 30 13:01:42 2026 GMT
Not After : Jul 1 13:01:42 2026 GMT
Subject: CN=00c3d8596e312b02d94ac24417408b6e34111714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f6:f0:a0:e7:7a:bc:36:b2:60:8f:00:68:39:
45:2d:e5:53:06:ee:39:5b:59:ee:67:93:0d:bf:7d:
4f:ad:b7:a6:08:3c:74:81:17:8a:3b:e8:60:20:c7:
be:11:58:05:47:e2:21:d9:7d:32:af:b2:a0:63:c2:
97:9c:a8:05:c3:aa:9c:c9:aa:9b:a2:dd:72:db:da:
57:3f:42:28:d0:02:41:28:63:a6:71:c0:a8:e6:17:
50:25:9a:12:5d:f3:54:64:17:8c:7c:84:84:16:8b:
32:14:1a:f9:58:a2:f3:aa:f6:48:a9:eb:bc:76:a4:
a4:2e:4c:c0:50:4b:2a:af:74:70:d9:a2:07:6b:75:
7f:b3:47:02:bc:09:c7:2a:10:8d:31:ed:74:7a:9f:
af:c8:0b:3f:0c:c4:17:93:34:08:36:8c:db:68:55:
ae:b9:10:68:77:dc:43:fe:4c:32:f7:9a:a4:49:50:
a5:2c:b8:9e:fc:2b:ee:88:60:bb:4a:4f:a6:cf:31:
72:45:15:1b:ad:51:8c:b3:f0:07:fb:c7:d5:c6:2a:
28:38:86:fc:69:c6:17:c8:82:0e:1a:96:be:b3:41:
97:6e:e9:b8:04:48:4e:e9:cb:b9:15:12:53:21:f3:
f5:0e:a1:a7:5a:7f:c7:9d:2b:43:d0:d6:c7:a1:09:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C3:D8:59:6E:31:2B:02:D9:4A:C2:44:17:40:8B:6E:34:11:17:14
X509v3 Authority Key Identifier:
keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:13:12:a4:e1:93:b2:00:53:20:cc:57:9b:f8:99:78:3e:76:
e5:43:11:07:27:78:1e:17:ff:61:76:4f:ee:f5:b4:4b:d3:77:
8a:46:b4:7f:7d:75:f7:40:a8:cd:85:c9:4f:df:0b:0a:95:fc:
83:7e:3a:85:62:a5:3b:df:88:77:e5:36:02:b5:2b:9e:f3:4d:
82:71:a7:78:38:6f:de:62:88:c3:c3:21:d3:f5:f9:f8:86:a8:
1f:fe:79:30:00:02:21:3d:77:75:f1:b0:74:f0:cd:37:d2:e5:
de:c0:fa:f5:c5:e6:f5:b7:3d:b3:dd:d4:cf:44:66:89:65:0a:
db:b9:62:e5:8b:ae:4f:a9:5c:4f:5a:f5:05:9c:0a:ea:9a:23:
98:f8:5e:f7:89:38:b4:3f:41:f8:f5:aa:97:37:5f:a5:66:f9:
b2:cf:a7:10:f6:bd:4c:eb:ed:1b:67:fa:b3:3b:5e:b0:e4:88:
89:7c:f9:f5:0a:9b:c9:2e:b0:12:fb:48:9e:71:24:dc:a6:1f:
f7:be:e6:56:9b:ab:85:ef:a2:30:a0:b7:45:27:61:98:e8:4e:
b2:eb:0a:f4:ac:61:b7:4c:bf:cc:f3:4a:a0:c4:81:69:e9:09:
75:df:8e:cb:29:0c:c8:6f:28:0f:b4:f1:90:49:53:63:1f:e3:
7a:98:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:01 2026 by rpki-client