Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json)
Hash identifier: FVRK2i+mxcZe7dvEXNsNiuCtbWsASLwldc83qE+wuJU=
Subject key identifier: D2:CA:2F:48:5A:79:2B:EB:CE:8D:0E:54:78:39:11:36:C4:95:6C:CA
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 019EBEED2FD48AC8F3991D22C69975C9560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
Manifest number: 0BC6
Signing time: Sat 13 Jun 2026 03:01:15 +0000
Manifest this update: Sat 13 Jun 2026 03:01:15 +0000
Manifest next update: Sun 14 Jun 2026 03:01:15 +0000
Files and hashes: 1: 3FkzAPl5dDeXfEEMRSwLpvP5dBw.roa (hash: qThiWbhOm4MVwzcc4QS1C0KW/Cr2nD4QzMpn3VG/nII=)
2: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: ekdA2rWcGV/Gip/F7I2iqnEOL/2jPZ65jYrmh2F99Dw=)
3: GvMwO11Qb_MZ3FmpbZFa_YHcQEw.roa (hash: HHH3HBau0CenEM488oLj5N8VnZu9hoi/hHRUfx5gvaA=)
4: vAGwaiC2Bp1wYYYgaEDGo4Uiqpc.roa (hash: kDL6yMpm7SXuYLlIMpKeyi5R+9DyzeTyoxzQraFeyqU=)
5: yXsRkQTNVDsj9z8xG-aM4CEyin8.roa (hash: ts64cc9kwijL/HlxdE2LWSMe9OcM5b1Rlyuz3fR2RTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:2f:d4:8a:c8:f3:99:1d:22:c6:99:75:c9:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Jun 13 03:01:15 2026 GMT
Not After : Jun 14 03:01:15 2026 GMT
Subject: CN=d2ca2f485a792bebce8d0e5478391136c4956cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:9d:f0:ba:c0:d6:70:e7:02:ee:8d:4c:71:
71:c7:b7:81:9c:fe:d1:d5:27:75:ab:83:33:3f:fb:
a4:45:cf:3b:eb:4a:f1:98:f0:6d:5d:5d:69:33:1b:
ba:86:19:dc:e8:4b:b5:07:c2:a6:59:6c:ca:23:e4:
c8:fa:ef:23:d9:da:3c:14:68:9b:5a:f2:56:25:af:
92:ef:c3:ec:25:12:84:62:90:a2:8b:b5:63:4b:61:
97:2e:45:57:11:fb:83:49:5a:79:ab:d2:21:76:40:
38:17:76:0e:08:9d:ca:68:57:fd:fa:cb:c6:19:55:
a2:8c:86:73:f5:de:f2:eb:f3:9a:66:f2:6d:65:73:
0c:bd:6a:cb:97:ce:ef:1c:86:b1:bf:a7:0d:39:e7:
69:aa:c7:64:a4:88:ce:8d:f8:f6:a4:99:df:b6:5f:
7b:1c:21:e1:2f:ab:94:a9:61:43:c8:16:e2:63:32:
a8:41:54:a8:48:62:b2:4c:2f:4a:65:2a:f4:a5:40:
54:39:c5:8b:a9:64:c4:88:96:a6:09:97:e5:18:8c:
37:90:39:44:6d:f5:94:12:52:00:d8:de:42:f5:dd:
2a:f6:7c:2b:29:9c:67:b7:09:04:05:14:fc:3a:90:
71:db:b3:0b:77:ba:89:6f:ba:6d:e1:d1:45:98:22:
0c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CA:2F:48:5A:79:2B:EB:CE:8D:0E:54:78:39:11:36:C4:95:6C:CA
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:57:2b:80:7b:58:82:a2:5e:b1:5b:38:92:1b:16:02:7a:e5:
2d:8a:df:47:0d:e3:eb:50:b5:be:9d:08:5e:d8:e5:29:f0:f9:
c4:82:dd:0b:6c:45:26:61:c4:2a:f6:2b:f7:cc:00:96:23:14:
61:13:f1:ec:9d:59:10:70:20:65:8d:b6:0c:27:04:9e:f2:95:
b1:e1:50:b6:c3:f1:ce:39:68:53:13:46:99:1d:0e:61:4a:5b:
8f:e1:bd:f5:83:d3:72:6c:54:71:7c:8d:44:7f:53:7a:f1:ce:
39:91:be:24:9b:9c:05:fa:98:e2:2c:d9:16:0c:5d:ad:95:d1:
1a:65:8e:fc:49:09:e1:ab:e8:7c:e3:02:1c:04:a5:48:7a:32:
e0:47:65:dc:ea:4d:04:13:e5:98:ef:f2:d8:84:47:77:7a:b9:
9c:b6:58:a1:22:48:10:94:fc:93:22:c9:5e:3e:20:48:f5:8f:
8c:fa:6b:d9:e4:e9:56:c1:21:e5:07:9f:dd:91:b2:a6:2f:58:
bc:0c:10:8b:8a:2f:3d:42:87:1f:db:85:eb:cd:08:6a:71:09:
e0:41:9b:e7:a1:6b:32:78:87:27:35:ab:41:4c:4f:a2:6e:9c:
41:7b:24:aa:ee:ab:0d:ba:d4:7c:10:81:04:52:1e:b1:d3:dd:
f9:3e:34:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7S/UisjzmR0ixpl1yVYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjYwNjEzMDMwMTE1WhcNMjYwNjE0MDMwMTE1WjAzMTEwLwYDVQQD
EyhkMmNhMmY0ODVhNzkyYmViY2U4ZDBlNTQ3ODM5MTEzNmM0OTU2Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+Od8LrA1nDnAu6NTHFxx7eBnP7R
1Sd1q4MzP/ukRc8760rxmPBtXV1pMxu6hhnc6Eu1B8KmWWzKI+TI+u8j2do8FGib
WvJWJa+S78PsJRKEYpCii7VjS2GXLkVXEfuDSVp5q9IhdkA4F3YOCJ3KaFf9+svG
GVWijIZz9d7y6/OaZvJtZXMMvWrLl87vHIaxv6cNOedpqsdkpIjOjfj2pJnftl97
HCHhL6uUqWFDyBbiYzKoQVSoSGKyTC9KZSr0pUBUOcWLqWTEiJamCZflGIw3kDlE
bfWUElIA2N5C9d0q9nwrKZxntwkEBRT8OpBx27MLd7qJb7pt4dFFmCIMowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLKL0haeSvrzo0OVHg5ETbElWzKMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFcrgHtY
gqJesVs4khsWAnrlLYrfRw3j61C1vp0IXtjlKfD5xILdC2xFJmHEKvYr98wAliMU
YRPx7J1ZEHAgZY22DCcEnvKVseFQtsPxzjloUxNGmR0OYUpbj+G99YPTcmxUcXyN
RH9TevHOOZG+JJucBfqY4izZFgxdrZXRGmWO/EkJ4avofOMCHASlSHoy4Edl3OpN
BBPlmO/y2IRHd3q5nLZYoSJIEJT8kyLJXj4gSPWPjPpr2eTpVsEh5Qef3ZGypi9Y
vAwQi4ovPUKHH9uF680IanEJ4EGb56FrMniHJzWrQUxPom6cQXskqu6rDbrUfBCB
BFIesdPd+T40vQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:35:32 2026 by rpki-client