Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json)
Hash identifier: U+xrcZM/aowecKwBXFmERl6X/Ck/i4rt50CiILW+8SE=
Subject key identifier: 78:43:8F:8F:C6:82:A0:2D:97:D9:BE:E2:5D:A5:9E:D4:4F:53:5D:CF
Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9
Certificate serial: 019EBFFF484E829E5359B2F0BDB9C18E603F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
Manifest number: 0CC3
Signing time: Sat 13 Jun 2026 08:00:38 +0000
Manifest this update: Sat 13 Jun 2026 08:00:38 +0000
Manifest next update: Sun 14 Jun 2026 08:00:38 +0000
Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: BzRq098/qwWG2rikRQMF4sKolbQ8WnwWYeK1SqhtY00=)
2: GKyDs47a7BqJFaT8Ozcx1DPKrA4.roa (hash: IeQFtuvzwY+Djd9V29XWo6xDkNMsoIv44LxRAtukIHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:48:4e:82:9e:53:59:b2:f0:bd:b9:c1:8e:60:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9
Validity
Not Before: Jun 13 08:00:38 2026 GMT
Not After : Jun 14 08:00:38 2026 GMT
Subject: CN=78438f8fc682a02d97d9bee25da59ed44f535dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8d:3c:ac:4f:26:58:b6:6c:1e:29:94:25:e0:
63:63:f9:25:f5:57:cf:8a:ee:1b:40:04:14:b8:d6:
be:42:3f:25:b5:4d:00:e7:f3:05:db:13:1f:63:13:
1b:e3:dd:d0:5a:64:28:5c:6b:ad:81:ba:02:f5:47:
ff:55:42:c4:38:17:62:ee:02:64:07:f7:53:ab:39:
b0:3d:58:70:af:6c:cd:2d:ab:41:7d:ba:31:87:1c:
79:a1:e1:f7:9f:3c:37:99:2e:13:ec:a6:10:c2:77:
36:d0:a1:dc:69:e4:74:8a:81:77:0f:e3:3f:46:79:
80:2c:77:16:8d:40:80:ac:6c:ae:87:9d:d6:92:05:
74:19:14:a4:6f:58:2d:79:f9:8e:99:0f:90:df:25:
8a:09:97:ba:f0:24:00:ff:e7:4c:2b:4f:d9:e2:3c:
02:1d:04:fc:a4:cc:22:13:47:5d:94:ce:c4:bc:af:
dc:a2:e1:7d:08:8e:e8:9e:64:a5:a4:29:8e:5e:93:
86:06:c1:d9:95:a6:c5:46:fd:17:59:49:78:5a:96:
99:e9:3f:c5:5a:39:8a:a7:19:73:76:36:95:6f:cd:
b9:fe:eb:88:04:70:1a:f5:f5:b5:f6:24:ab:a0:ad:
5c:dd:8c:c4:fd:36:13:24:dd:32:1e:4f:9e:f3:01:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:8F:8F:C6:82:A0:2D:97:D9:BE:E2:5D:A5:9E:D4:4F:53:5D:CF
X509v3 Authority Key Identifier:
keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:51:b0:9c:e8:ba:6b:ab:ea:be:5f:04:ff:cd:1b:1a:8d:41:
63:43:39:43:71:a8:5a:b2:64:a2:db:e3:b1:1a:65:77:17:5b:
62:34:0f:b8:50:ea:61:a2:ab:1f:ef:54:8b:46:5c:fd:99:c1:
1c:31:19:f5:3c:e7:df:5d:a7:31:37:07:e6:ed:18:9f:da:37:
01:52:b6:56:10:85:25:37:88:2b:dd:25:3f:b1:83:7a:33:6c:
c6:09:4a:14:c0:d4:eb:ea:25:01:82:49:05:89:2a:44:8f:af:
63:04:14:3c:f5:14:d9:14:f4:bb:91:de:56:03:c7:91:e5:0e:
56:cf:dc:74:b5:9c:bf:63:d4:05:50:44:05:f8:9b:54:d3:a0:
c2:01:6c:ac:01:7a:0c:fc:2d:e6:38:7b:ca:89:1f:f4:60:40:
b9:bf:14:05:2f:bb:1e:e7:3e:2e:a3:6c:26:19:6b:47:c2:0b:
7c:d1:14:d6:94:b1:f9:76:b7:49:25:27:33:7d:97:58:e7:f8:
a9:38:4a:07:6e:d2:2f:14:82:5c:c6:a4:71:0e:70:d8:be:56:
b0:39:00:fd:1d:95:f9:65:b2:30:4b:4a:65:d4:8f:73:0e:7d:
0b:dc:be:38:dc:a3:ee:9b:2f:8c:59:ab:94:0e:17:99:9c:73:
8d:01:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:28:59 2026 by rpki-client