Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
File: 9iZUZY9nKqzzcTO1xxz0sRwYado.mft (raw, json)
Hash identifier: qgHla1IgUPp3/Ouj2vquANRFpJ1yUJyj0WGX2/ehaWI=
Subject key identifier: FF:5D:81:FC:73:70:49:84:40:D3:73:99:BB:48:1B:C2:1F:4C:2F:9A
Authority key identifier: F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
Certificate issuer: /CN=f62654658f672aacf37133b5c71cf4b11c1869da
Certificate serial: 019EC224829DFC5CA405E53C041373F3F61B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
Manifest number: 0466
Signing time: Sat 13 Jun 2026 18:00:33 +0000
Manifest this update: Sat 13 Jun 2026 18:00:33 +0000
Manifest next update: Sun 14 Jun 2026 18:00:33 +0000
Files and hashes: 1: 9iZUZY9nKqzzcTO1xxz0sRwYado.crl (hash: 3v/jErldat5NDiiDEkcIGnYJA8suSXeSM+Vi40mHYVU=)
2: d6pd06B5mnNywdYo5eZBwLJxfT8.asa (hash: ETla8YTJcM+5uBnfvCMaInkUnAmAwDLx0tjpRZMyWmk=)
3: tvMXQZLl7Wysz_xvdn4KxR27LYI.roa (hash: DS+mGSmFWnDI1NNRJFgUsn5iaFW320NJTO3U5Mk3hfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:82:9d:fc:5c:a4:05:e5:3c:04:13:73:f3:f6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62654658f672aacf37133b5c71cf4b11c1869da
Validity
Not Before: Jun 13 18:00:33 2026 GMT
Not After : Jun 14 18:00:33 2026 GMT
Subject: CN=ff5d81fc7370498440d37399bb481bc21f4c2f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:af:3c:3b:b2:9b:68:9c:6f:5b:41:c3:fe:
f7:3d:3d:b2:86:cc:f9:8a:73:47:97:68:42:8a:f7:
da:d1:3b:1b:f6:1b:21:6b:84:0e:ad:43:c9:ea:15:
cc:7c:4e:ae:5b:5b:2a:c0:63:01:89:41:7d:9e:3c:
f9:ec:39:e1:73:89:46:af:33:cd:0f:5a:f6:01:47:
c3:03:ff:12:ba:55:02:53:13:72:b7:dc:47:25:89:
8e:5e:85:0c:ed:49:91:f4:c9:71:62:af:e6:7e:82:
d7:5c:3a:3d:6e:53:0a:9d:82:59:25:b4:93:d8:44:
a4:2d:fd:a7:7e:b0:cb:a1:92:9e:04:96:ef:e7:36:
37:ab:a9:f3:9e:49:a1:31:5b:a4:0f:ba:2b:2e:fd:
b0:3b:ac:f6:58:76:b6:d5:6e:82:92:7d:82:b1:4d:
7e:ad:0e:7f:55:22:49:a3:22:46:86:e4:38:ff:b4:
2a:19:b4:17:91:38:e6:f1:94:29:5a:ee:10:51:f1:
ba:cd:97:79:56:f9:6b:3a:34:54:d5:7b:38:bf:66:
6d:94:e4:5c:5e:71:58:c9:11:6d:bc:f3:0c:5a:4b:
11:bc:9a:2d:7e:f1:c4:e0:e7:b8:8a:65:e3:81:60:
46:a4:87:88:ef:0b:40:5f:46:04:ae:6d:26:bf:22:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:81:FC:73:70:49:84:40:D3:73:99:BB:48:1B:C2:1F:4C:2F:9A
X509v3 Authority Key Identifier:
keyid:F6:26:54:65:8F:67:2A:AC:F3:71:33:B5:C7:1C:F4:B1:1C:18:69:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iZUZY9nKqzzcTO1xxz0sRwYado.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a68e26-92e5-4f49-adb8-664778845b16/1/9iZUZY9nKqzzcTO1xxz0sRwYado.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fc:bb:d7:63:3f:eb:84:85:69:ac:ca:4e:58:a4:97:71:d1:
96:95:ed:59:16:be:10:6d:9e:1b:98:a9:ef:2f:5a:79:32:cb:
bc:d5:5e:60:29:28:2a:20:db:52:f9:86:04:23:37:55:21:75:
1d:ce:4a:36:f1:b7:80:ea:3a:7b:03:58:29:67:88:8e:d3:84:
1c:88:fa:18:51:ab:be:fa:f9:15:94:0d:7b:5b:51:5b:d6:21:
3a:bc:f4:b1:35:38:f4:f2:bf:9f:39:ae:70:42:8c:d3:f9:f3:
25:e9:08:7c:38:25:7d:f1:bf:6e:24:55:1c:a0:63:58:94:7e:
74:7e:b3:50:b7:a6:65:51:f1:fc:fd:87:b0:85:2d:29:c0:05:
e7:18:d7:dd:5c:cd:83:3c:81:f5:c5:d8:23:0e:ce:6a:18:b0:
93:f7:b6:99:6c:68:8f:dd:b9:01:19:16:a9:a8:b8:60:f2:6c:
b5:e8:7f:9c:66:ec:fc:93:de:30:cb:c2:a0:3c:0c:1a:1b:12:
24:f8:24:69:fb:a8:bb:cc:8d:9d:40:6a:b8:52:bf:47:01:93:
29:35:1c:69:79:76:10:1f:83:b3:7b:0a:e1:1f:2b:f7:87:81:
1f:94:d5:ce:ad:4f:41:02:43:04:5b:eb:aa:d7:17:d0:01:e7:
37:30:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:23:04 2026 by rpki-client