Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json)
Hash identifier: hQjB54b5fSmBcgnWjvEq28TaCHVVPyPGDl/BspftoJQ=
Subject key identifier: 9E:CF:0B:30:1D:8F:A1:B7:41:1E:6E:97:09:32:C7:4A:CE:4E:C8:CB
Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Certificate serial: 019EBE10B384C68E810E3B9EE21382C01A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
Manifest number: 0644
Signing time: Fri 12 Jun 2026 23:00:26 +0000
Manifest this update: Fri 12 Jun 2026 23:00:26 +0000
Manifest next update: Sat 13 Jun 2026 23:00:26 +0000
Files and hashes: 1: EgBYTsP4WnLdOgI7v9fWewoBmRQ.roa (hash: SdXuNAo4cL+y4o9C6xVzKmsv8YTzVdsZLx73iiyVrKA=)
2: jhC9a0KGOhskqK8y2P66-mdvVMk.asa (hash: i9dLz9pNHP1gfZet4bvzsUUCDdP+wUgqYcPorhYgXZ4=)
3: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: j1Ii9e6tPZrEtVIMLsouR2Z4J2D4z40nPEbZ/Xa7ldw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:10:b3:84:c6:8e:81:0e:3b:9e:e2:13:82:c0:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec
Validity
Not Before: Jun 12 23:00:26 2026 GMT
Not After : Jun 13 23:00:26 2026 GMT
Subject: CN=9ecf0b301d8fa1b7411e6e970932c74ace4ec8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:88:db:17:3e:a6:9e:55:f4:e8:c5:8d:43:
21:20:27:f8:ed:3a:e7:82:2a:67:a1:24:fd:fe:a6:
35:28:98:33:35:ca:0b:fd:4c:7a:ba:0b:6a:32:26:
51:17:b3:fe:08:0d:f7:99:fd:05:ef:c3:1d:49:53:
c4:b6:30:1f:5f:b2:d0:28:47:88:1e:18:85:21:52:
ce:27:81:c4:20:34:12:db:20:2e:ee:66:ad:33:77:
16:9b:c4:a8:95:72:4c:df:7f:c5:09:9a:d9:1d:e3:
af:c3:f5:48:c6:8b:63:63:4e:29:9d:01:14:c2:66:
81:46:10:87:01:08:9a:05:a5:4b:a8:8c:df:6a:c0:
89:5d:f2:7b:76:f2:69:65:dd:1c:c6:11:01:f2:b7:
34:b8:60:17:ed:18:87:fb:14:fa:5b:80:aa:a8:dc:
33:85:49:4d:0a:1d:52:a6:f4:73:1e:54:8d:98:4d:
96:b0:26:a8:94:00:48:c4:de:f3:dd:ce:6b:11:f8:
50:c9:e3:b8:80:ab:25:88:17:2a:29:31:d5:d2:82:
61:d4:78:71:dc:6d:69:f7:bd:57:9c:64:1a:23:57:
71:12:63:f0:37:a8:6a:92:74:0b:25:8f:2a:e9:6d:
ec:88:8c:4f:21:87:86:76:01:cc:c2:44:0c:fa:53:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CF:0B:30:1D:8F:A1:B7:41:1E:6E:97:09:32:C7:4A:CE:4E:C8:CB
X509v3 Authority Key Identifier:
keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:3c:96:5b:cf:24:8d:95:75:7a:d4:c8:60:f0:0a:55:77:b3:
0e:22:bd:61:c0:cf:26:14:d3:79:59:40:37:1e:c6:82:d6:be:
81:8c:c2:c8:70:a3:94:b8:77:89:56:a4:ee:46:a6:47:11:de:
7a:4f:f3:70:e2:03:84:dd:9b:d8:ba:5a:0a:7e:43:b9:f4:00:
0a:c4:b2:2d:48:98:00:af:98:69:f7:b7:36:35:4e:04:df:f6:
c4:8c:85:02:d7:ab:2b:f7:83:1e:41:ac:c9:e2:fb:2c:5d:6c:
09:7f:90:21:25:92:8a:45:fc:79:9d:d6:c0:66:65:3f:be:31:
fd:ca:87:13:57:14:44:ec:a9:c0:6b:1f:fa:78:50:6b:53:77:
95:2c:ae:b2:36:4b:3a:77:c5:db:4b:5c:96:cf:1f:3d:04:05:
85:5b:4f:fc:6b:6e:f5:b0:29:87:84:54:d2:03:d7:94:df:61:
db:6b:b1:19:33:af:a1:67:b8:b6:8a:81:a6:78:f8:94:9c:2e:
83:90:14:f2:48:84:ba:ba:15:d0:be:be:9f:03:eb:8b:4f:1a:
97:23:60:fe:51:2b:46:16:c4:c3:7d:01:a6:1f:93:ce:0b:7c:
95:20:20:30:17:21:39:1c:4d:02:c7:a8:65:10:80:df:3b:26:
10:60:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:23:50 2026 by rpki-client