Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier: kjYgROR53e9DOwcNR/ncx53QBLF+l5m4PDvZV1at6yg=
Subject key identifier: C0:DB:C4:C3:8A:B3:A6:38:43:4F:81:64:A9:67:43:A0:7C:B9:93:D2
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial: 019EBF23FA7D23C62B0C80E4464FCD713584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number: 0658
Signing time: Sat 13 Jun 2026 04:01:06 +0000
Manifest this update: Sat 13 Jun 2026 04:01:06 +0000
Manifest next update: Sun 14 Jun 2026 04:01:06 +0000
Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: i1HDNLnJEPOmP7glizqKzvxMWmX+UwOAvUX1rWJw2yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:fa:7d:23:c6:2b:0c:80:e4:46:4f:cd:71:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
Validity
Not Before: Jun 13 04:01:06 2026 GMT
Not After : Jun 14 04:01:06 2026 GMT
Subject: CN=c0dbc4c38ab3a638434f8164a96743a07cb993d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:18:12:a1:cc:93:3e:7b:0c:8d:7a:08:dc:
73:58:e8:b4:1f:60:59:ed:44:0c:8e:f8:59:be:00:
de:7e:6a:bd:ef:d4:ec:ce:1b:29:e6:ec:ab:28:f8:
63:78:62:01:e0:d7:af:ab:16:5a:ad:1f:8b:77:25:
8f:45:5e:d2:da:9f:cf:9f:09:53:56:fb:e3:cd:fa:
29:0b:7c:e5:30:de:2f:7c:58:7e:93:60:99:1c:55:
ee:c7:f6:cc:57:37:c0:f8:43:88:45:39:01:d8:e4:
e9:1d:b5:da:26:ae:62:dc:d5:21:50:e7:1f:3c:fe:
45:22:cc:d4:68:05:a6:21:b7:27:78:f5:d1:b7:98:
ea:be:2a:61:ce:bd:9a:d4:78:ff:48:84:2a:e8:3d:
02:52:12:d0:93:bb:d1:2b:6a:f9:64:30:71:fc:45:
c6:25:79:72:e1:3b:dc:08:c2:6c:af:43:b4:98:4f:
4f:61:bf:49:86:79:1b:5c:58:c3:a3:ea:7c:11:d3:
c5:70:6c:c7:d3:0d:c0:8e:b1:e5:6a:b8:60:b5:5d:
92:37:dd:72:cb:d7:7b:c5:ad:80:72:50:d5:ee:67:
4e:cc:64:43:43:77:a7:5a:40:5a:26:b8:6c:e9:1d:
45:5d:4f:c1:38:c2:c4:de:25:7b:f5:8d:6c:99:5f:
42:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DB:C4:C3:8A:B3:A6:38:43:4F:81:64:A9:67:43:A0:7C:B9:93:D2
X509v3 Authority Key Identifier:
keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:eb:51:d1:5c:ee:c8:2a:b5:51:2b:d8:bd:a3:f0:02:63:82:
69:96:27:7f:c2:b9:d6:77:61:1d:84:f6:86:ab:72:30:5d:7c:
71:03:77:38:93:5f:59:ee:0a:bd:4a:fe:e5:d5:01:b5:2f:36:
86:db:6b:8b:d9:8e:6e:9f:63:ab:5a:e8:77:21:87:fc:33:a9:
cc:ce:74:7c:4a:16:c5:02:b7:b9:d0:82:15:04:b9:51:6c:5b:
3b:82:f2:3b:21:cc:8e:a6:fd:6a:08:5d:df:a9:fa:5e:b4:f6:
f6:8b:ae:b8:61:d9:d2:07:2f:6a:cf:25:37:8f:11:ea:03:87:
c2:58:fc:67:50:ad:37:96:75:5f:af:9b:c5:db:c6:35:56:0d:
bb:2d:fc:2c:ac:69:8d:34:f8:b5:43:70:23:bc:56:e9:ce:bf:
77:78:95:58:70:8b:23:3d:47:23:6a:f3:a8:bf:6e:6a:b0:18:
42:4c:7c:70:6d:da:35:72:91:2c:95:a2:cc:67:d2:e0:73:f2:
8b:45:57:db:d2:2f:34:c5:de:a2:ee:16:ca:43:78:70:59:e0:
0a:ea:42:25:95:88:96:b8:1a:05:9c:97:77:45:7c:47:29:9c:
bb:00:3d:57:ca:ef:bd:ff:88:f4:03:8c:a6:a5:66:0a:6d:25:
98:58:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:28:43 2026 by rpki-client