Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: w5pccjRoF+IW5cXKNqVqrktgsxTXNKQs0FSkArzQUUU=
Subject key identifier: 9C:9D:E0:CB:89:A8:4F:23:99:15:F2:03:C0:B1:BA:9E:8F:12:AE:CF
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 019EBF5AD2ACFF94497223026AEF2AC9B87A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0C70
Signing time: Sat 13 Jun 2026 05:01:00 +0000
Manifest this update: Sat 13 Jun 2026 05:01:00 +0000
Manifest next update: Sun 14 Jun 2026 05:01:00 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: nuJni8mi2uKudRu9y66SyHQHKSI1l5CbYkr6KDyY6N8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:d2:ac:ff:94:49:72:23:02:6a:ef:2a:c9:b8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Jun 13 05:01:00 2026 GMT
Not After : Jun 14 05:01:00 2026 GMT
Subject: CN=9c9de0cb89a84f239915f203c0b1ba9e8f12aecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:0c:ce:72:f9:69:e0:da:9b:41:71:e9:04:
db:c7:ca:99:92:5f:a8:bf:69:09:b3:ea:34:59:1b:
89:fa:a5:75:66:52:4e:8e:29:f1:fd:47:9f:32:71:
37:43:d0:32:15:f9:ab:cc:2e:ba:b1:df:1c:11:bd:
66:f5:90:81:c0:04:f7:04:cc:23:e3:b9:c6:80:ad:
5f:32:92:f3:c6:ee:c6:f4:c4:8f:06:16:04:79:65:
fd:1a:07:3d:7f:56:a2:50:89:ea:8e:53:b1:0c:34:
fe:d4:47:39:3a:b0:9d:38:16:8b:ba:b6:9a:1d:ec:
41:25:91:1a:7d:17:d5:f1:af:e2:f2:94:8d:79:be:
b3:99:69:e9:6a:c5:d8:c1:d7:09:d0:c8:f7:bd:26:
5f:c9:65:7c:33:15:9f:95:7c:ba:f9:b0:e7:0c:bb:
fc:87:e4:05:fc:34:eb:35:dc:b8:dc:87:14:89:b4:
e2:0d:bd:86:6a:f9:4a:f5:b7:dc:91:b2:01:c1:92:
c2:ce:1b:14:70:ec:52:a1:3b:ca:4b:60:5b:24:c1:
98:da:34:56:56:02:08:c3:19:91:24:ca:65:aa:0b:
d1:16:5b:fc:06:78:22:73:76:3b:32:da:77:82:00:
f2:91:d4:c0:2b:51:1e:8b:e5:43:65:7e:e3:ce:a4:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9D:E0:CB:89:A8:4F:23:99:15:F2:03:C0:B1:BA:9E:8F:12:AE:CF
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c9:f2:53:67:85:c5:a5:a8:6f:e8:96:f8:07:20:0e:33:69:
2a:4b:5b:a1:61:00:1d:61:54:9d:08:cf:a6:e8:b0:5f:fa:66:
6f:84:45:9b:2b:5f:78:62:31:86:86:73:5d:31:69:cd:4a:21:
ef:ec:23:36:7a:58:c3:e0:bb:a5:34:88:72:54:7e:98:29:59:
42:63:6b:84:57:76:51:4e:ad:e3:7d:fe:bb:67:23:b3:53:61:
40:94:0b:9e:54:bf:f6:c8:b9:74:e9:4e:09:17:6e:ef:09:30:
9b:ac:5f:1a:f0:01:be:90:59:d7:1f:25:5c:d2:93:ea:c2:40:
d6:5a:d1:a8:b4:56:f3:f9:ed:cd:00:09:1a:bd:03:83:e8:1a:
ae:8f:eb:45:16:22:8b:6f:15:eb:a4:ba:02:76:4c:83:cf:80:
79:d3:37:23:19:45:ea:39:8d:59:6c:12:8e:f8:af:1a:98:fc:
b8:8c:64:55:47:cb:6f:cf:5d:05:0a:6e:c4:1d:fa:61:8b:2b:
77:ea:65:61:4e:10:e6:ec:d8:34:39:a7:b0:87:0d:e3:5d:38:
fb:39:09:d8:16:31:a3:65:33:d0:eb:a3:37:cf:26:47:6d:3d:
54:2b:0e:d5:ef:bd:17:44:d1:c1:ef:5a:22:d0:6e:52:ce:41:
17:ac:99:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:50:27 2026 by rpki-client