Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json)
Hash identifier: IIgrh0fFD4id/J+v0PICKye4RULR24rW9o4ZiDMdvMs=
Subject key identifier: 45:6A:4E:83:D1:9F:BD:17:BF:A1:5D:70:D0:85:B0:62:B4:BA:A8:20
Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Certificate serial: 019EBF23956B8220CBE06BC5A7E39F9B4579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
Manifest number: 0D83
Signing time: Sat 13 Jun 2026 04:00:40 +0000
Manifest this update: Sat 13 Jun 2026 04:00:40 +0000
Manifest next update: Sun 14 Jun 2026 04:00:40 +0000
Files and hashes: 1: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: Ks+N+dYdq/R1manaZ/3duymOsKhPKkNNRWmmA4yjS0s=)
2: nt5KsVI8vqdpSeFz_087e62oU14.roa (hash: Bg0m3PuozQ6dYQ2kO4AYYeyWSaWC8O/p5Tn7+bNzG4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:95:6b:82:20:cb:e0:6b:c5:a7:e3:9f:9b:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92
Validity
Not Before: Jun 13 04:00:40 2026 GMT
Not After : Jun 14 04:00:40 2026 GMT
Subject: CN=456a4e83d19fbd17bfa15d70d085b062b4baa820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:bb:cf:d2:b3:ef:04:5a:7f:f1:97:77:e2:
3e:f4:33:e6:24:cb:7f:8e:14:2e:48:57:2f:ee:5c:
fa:7a:3b:6f:c2:4e:a7:9f:6a:c9:67:41:3c:7d:59:
6f:da:c3:57:88:83:62:c1:10:4f:d1:c1:91:3a:0d:
61:d8:1f:82:cc:19:4b:f6:b1:42:a3:0a:bd:0c:22:
90:01:6f:de:a7:0c:0a:b6:f2:0b:c2:a4:dc:84:1a:
02:96:ff:c7:92:fb:3a:0f:07:34:71:3b:25:07:4c:
5f:1c:4b:78:26:c0:6a:49:de:54:5a:16:e4:89:d0:
cc:b0:c4:26:32:ef:3c:c4:08:b6:4c:b7:74:2f:24:
35:a4:df:f2:f1:8b:4b:83:9f:e7:6d:69:09:5b:91:
ff:65:74:40:f3:71:ed:d2:7d:db:13:fd:78:33:4c:
56:17:ee:62:0a:e6:d4:44:e1:1d:08:d9:c3:b7:b7:
4e:ea:2c:53:64:3f:8c:9c:66:01:db:d1:c7:40:e7:
b4:c4:a7:48:9d:b2:9e:66:18:4d:71:d1:10:a1:08:
5a:d0:48:0c:3b:dc:83:ac:55:de:79:9a:06:b2:7b:
dc:a0:b1:f7:3f:3e:b4:ec:02:59:c2:37:c3:83:61:
6d:e6:c8:c5:d3:a8:64:b6:38:11:24:23:70:7f:97:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6A:4E:83:D1:9F:BD:17:BF:A1:5D:70:D0:85:B0:62:B4:BA:A8:20
X509v3 Authority Key Identifier:
keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:20:36:fb:32:f6:03:3d:85:38:0f:b1:4d:29:f7:81:45:0f:
0d:41:7b:81:b2:3f:e6:20:a2:b0:b0:de:ed:4a:89:3d:aa:a5:
4c:c4:e9:06:f4:78:26:fc:e5:70:81:b3:99:a2:4e:8d:ed:ed:
ac:a7:55:b7:a0:ab:91:d6:d2:37:57:ab:5e:a3:1e:f0:ff:59:
e6:bb:f2:33:dd:24:50:de:27:e4:3c:7c:dc:09:d4:a4:53:5b:
66:2a:4a:c8:e8:e3:5a:7d:e2:7f:7d:40:76:de:3b:7f:d4:a6:
78:a8:79:93:c5:d7:fe:2e:af:28:38:b5:f3:5e:0d:f1:d4:48:
2e:f9:9d:68:f6:c2:72:72:e7:7c:e7:c1:47:3a:1e:ce:b3:8c:
0d:ea:8e:f3:46:bb:a7:d7:7a:4a:80:3d:a2:c8:6c:1a:0c:78:
ab:80:8a:56:db:fa:ac:7d:fe:e7:32:6e:a9:f5:89:43:2a:23:
aa:79:74:ba:ea:27:c7:96:bb:e8:94:b6:63:b1:a7:75:af:e5:
56:04:0b:a0:26:b2:98:4d:34:2f:bd:41:9f:95:85:61:5d:78:
d8:05:6c:8f:ef:36:4a:17:d8:e8:27:29:e7:89:52:d5:89:45:
e7:94:1f:55:a4:1a:62:4f:e0:19:e5:a2:4c:6b:cd:66:da:7a:
a9:0b:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:53:39 2026 by rpki-client