Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier: zx89RLRqetyWcAZemfF0Qfi3Wp0i8nvXcxkKo/QiQ+Q=
Subject key identifier: 85:F6:CF:78:E2:30:EB:A3:84:C2:30:26:C2:16:F5:6D:04:90:0A:9E
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial: 019EBDD992C98BA41C9154FAD939F98250DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number: 067B
Signing time: Fri 12 Jun 2026 22:00:13 +0000
Manifest this update: Fri 12 Jun 2026 22:00:13 +0000
Manifest next update: Sat 13 Jun 2026 22:00:13 +0000
Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: xhUXJlAq/JgsB5r+qP+RHJ68f4opcxHRJZeM21/lOeg=)
2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:92:c9:8b:a4:1c:91:54:fa:d9:39:f9:82:50:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
Validity
Not Before: Jun 12 22:00:13 2026 GMT
Not After : Jun 13 22:00:13 2026 GMT
Subject: CN=85f6cf78e230eba384c23026c216f56d04900a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:c5:d0:c4:ae:f6:5a:5b:10:76:be:57:9e:
c2:be:77:17:56:d8:9a:0d:c7:88:46:59:4c:8b:af:
f5:39:62:bd:52:55:4c:96:b3:ca:3d:9e:77:d7:ae:
5d:71:42:d5:16:b5:40:02:47:69:1b:65:1c:b3:b8:
e0:a4:ed:2d:5a:14:94:c0:ff:0b:62:65:5a:a7:81:
c7:5f:a8:27:88:a2:e3:74:3a:4b:7a:e3:76:a2:71:
ed:3a:b1:d4:56:cd:5a:4d:24:49:e5:7c:fa:b6:50:
cf:43:48:76:3e:ee:83:9f:fd:6d:0b:42:fe:4e:d5:
1f:40:a9:0c:80:1a:57:b8:92:51:12:eb:19:63:f7:
85:b4:1b:46:75:20:90:da:c6:19:20:d1:1a:fd:5c:
6a:db:db:dd:49:e9:5e:3d:c0:07:0b:04:8e:5f:a1:
a0:4f:71:61:31:ff:1d:c1:50:b7:c1:61:21:11:1c:
c3:9c:b6:90:c9:4e:ea:a8:94:ba:cc:b0:0e:c7:92:
67:be:e6:70:3f:62:8c:dd:29:6a:e7:d2:2d:45:73:
f4:7f:bc:86:c1:7a:49:98:14:71:f1:52:16:52:d1:
94:b8:6a:7b:3d:e9:53:34:dc:9d:77:d8:a5:14:fa:
6d:34:c6:ea:30:32:e2:56:2f:0d:c4:6a:9b:d0:32:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F6:CF:78:E2:30:EB:A3:84:C2:30:26:C2:16:F5:6D:04:90:0A:9E
X509v3 Authority Key Identifier:
keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c1:b9:b9:f1:bc:15:aa:7c:18:31:c0:1a:ba:44:4c:0e:94:
35:25:af:c4:04:2b:7b:b3:ba:2e:a9:8c:e6:31:8c:d7:a5:a9:
6d:c4:3b:5e:d4:1d:e0:38:39:00:00:df:b0:08:ad:a7:2e:d0:
61:f9:c6:82:8d:e6:15:77:0e:b1:92:51:92:2a:7c:a8:5e:3f:
6c:86:8c:6f:f9:fa:16:cf:42:4c:60:6e:30:66:ec:1d:5c:01:
b7:e3:cc:db:68:0f:67:09:23:2d:7a:07:0f:05:2c:6e:83:17:
35:9e:1a:29:e0:58:65:d2:ee:63:cd:db:46:2f:38:ff:b8:a2:
e4:a5:0f:53:e2:40:8b:6e:a7:d7:69:4c:31:c8:dd:ae:43:6f:
c9:16:ae:74:e7:73:ad:9a:b7:ac:ab:a1:ff:fa:2b:d1:60:c1:
dc:34:97:d7:8e:d7:70:c0:ff:c6:8d:3d:e7:b6:92:a4:ed:50:
87:43:08:2d:5a:c1:20:73:90:76:2d:f7:e7:15:13:fd:85:73:
c1:60:77:46:4d:a7:91:9b:f8:63:cc:b5:9c:bb:78:7c:81:2d:
34:ff:a7:0c:9b:c0:03:4d:bf:d9:01:24:a5:cf:92:12:33:ca:
07:08:19:60:c5:fa:2c:14:db:7b:76:84:7b:5d:9d:bd:69:8e:
51:0f:55:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:09:04 2026 by rpki-client