
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
File: f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft (raw, json)
Hash identifier: XWIaa4+U2sPdet1gymf2bth3/ZwS/ek7AXCbG8Jq/HA=
Subject key identifier: BA:AA:0E:0C:BA:6E:43:E1:AC:72:86:37:B3:57:09:A1:70:49:44:A5
Authority key identifier: 7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
Certificate issuer: /CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Certificate serial: 019EC0A3F061A7DB72D557823E2D6E11C80E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
Manifest number: 18EC
Signing time: Sat 13 Jun 2026 11:00:29 +0000
Manifest this update: Sat 13 Jun 2026 11:00:29 +0000
Manifest next update: Sun 14 Jun 2026 11:00:29 +0000
Files and hashes: 1: Ix0TT5IrmKD226rBGnrwxJKMQZE.roa (hash: kT8aM1b7+8tvbyvrC/BU4Ml9NWdK/DRuTi32q1ndZgU=)
2: f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl (hash: OT5iw9RbIYObbeHkA19lfMSnAw8Qo91MkY1ycBU96zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f0:61:a7:db:72:d5:57:82:3e:2d:6e:11:c8:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb43de237fd0b6a287389230921d25a2c2ed1a8
Validity
Not Before: Jun 13 11:00:29 2026 GMT
Not After : Jun 14 11:00:29 2026 GMT
Subject: CN=baaa0e0cba6e43e1ac728637b35709a1704944a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:01:b5:a8:90:59:4a:9f:8d:87:39:f8:92:
9b:e1:1b:43:91:b7:fa:0c:7e:e9:a7:31:50:55:59:
cb:e0:25:3d:aa:d2:7d:93:a3:24:20:28:58:7a:2a:
7d:93:9b:fc:75:98:e7:89:d7:1f:23:0e:a3:9e:64:
0a:1f:7a:67:c2:b1:fd:2b:fc:c0:b0:91:1e:9f:85:
19:ba:58:04:6e:ca:42:d9:3c:48:e9:14:4b:5f:a8:
1e:20:ae:8e:ac:cc:16:8c:0f:06:62:d8:f1:a8:96:
9d:00:c4:74:06:c1:6e:c6:06:c9:8d:6d:97:77:77:
70:75:84:4d:0f:3b:a6:ce:0a:dc:61:e4:e4:9d:cb:
74:c5:55:9a:7f:d0:b0:16:eb:ad:6d:2b:69:43:54:
d2:ac:c3:9f:99:20:b8:49:37:95:38:37:71:01:76:
63:24:86:ff:3c:bd:d3:d0:b1:67:66:9e:43:1f:d0:
3a:ec:eb:a6:a5:e7:9a:09:62:dd:25:e7:1b:2b:49:
86:f6:af:f9:a7:44:7a:1c:e6:d2:e7:f5:54:95:0b:
14:c8:74:30:4a:83:7d:df:eb:a4:8a:12:61:00:f9:
4c:3b:cd:81:e7:2f:c3:d2:b1:af:86:e1:5a:74:74:
38:b5:1c:f9:85:3c:65:bc:cd:98:17:b3:b9:7d:31:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:0E:0C:BA:6E:43:E1:AC:72:86:37:B3:57:09:A1:70:49:44:A5
X509v3 Authority Key Identifier:
keyid:7F:B4:3D:E2:37:FD:0B:6A:28:73:89:23:09:21:D2:5A:2C:2E:D1:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7Q94jf9C2ooc4kjCSHSWiwu0ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d4d12a-ab4e-4dba-95de-bc637130de6e/1/f7Q94jf9C2ooc4kjCSHSWiwu0ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:95:f4:11:57:69:af:30:69:7d:36:47:1e:9d:6d:fd:e2:38:
52:fd:5c:90:fb:74:48:82:93:74:8b:61:27:f4:38:86:a3:f5:
25:c4:e0:5c:39:84:cd:18:5d:e5:75:03:23:72:7f:82:bb:a1:
10:64:60:cb:93:28:40:f8:4c:d0:10:1c:bb:24:be:7e:12:d1:
7f:ac:16:4f:58:19:58:16:06:32:a0:28:63:43:f6:87:8b:b5:
00:d7:23:44:dc:cf:ab:75:07:11:37:8a:7b:4d:fe:d4:10:50:
de:b9:34:e2:b2:79:91:63:be:3b:e8:4b:03:19:6b:d2:e6:41:
e1:c3:92:8e:c9:a5:ae:19:f0:90:c8:00:1e:8f:e7:33:dc:3d:
1c:ec:d4:06:46:7d:e2:4a:7a:00:d0:1f:5d:55:7b:16:e9:86:
ab:c7:3a:ee:b8:5b:a7:c9:ef:6c:68:33:12:2c:69:19:fc:ed:
ec:74:c1:bb:07:b4:0b:ee:ba:b7:b7:94:ad:53:64:67:63:b6:
90:b6:01:c2:d5:b7:b4:72:42:67:d7:be:1b:01:19:95:a5:5a:
51:35:9f:51:2e:27:bf:d9:03:98:de:74:9e:6f:6e:cf:3e:a0:
43:fe:04:d1:e1:08:1e:5d:96:a2:36:1d:63:39:e1:34:87:64:
c3:8b:05:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:56:09 2026 by rpki-client