Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: F8YEBBJoszJMbbdJ0O8ZBlw4dRbX/xIwZ6TCp9seoyo=
Subject key identifier: 06:27:03:0B:BF:E0:DB:4B:0F:9E:F5:09:74:AB:72:15:70:43:CD:DD
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019EC29273A7725E4241E8F2ADAB64F16864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 013C
Signing time: Sat 13 Jun 2026 20:00:38 +0000
Manifest this update: Sat 13 Jun 2026 20:00:38 +0000
Manifest next update: Sun 14 Jun 2026 20:00:38 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: lKIOO2FnIqvg1OcNNVluISI9YUVTy5vAHvjkl+gCg2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:73:a7:72:5e:42:41:e8:f2:ad:ab:64:f1:68:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Jun 13 20:00:38 2026 GMT
Not After : Jun 14 20:00:38 2026 GMT
Subject: CN=0627030bbfe0db4b0f9ef50974ab72157043cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:3b:a6:3a:4e:2c:08:ee:f9:27:1a:2a:d6:
4b:38:2a:3d:b4:81:32:84:3c:89:c2:d8:98:56:3f:
40:cd:f3:d0:71:bd:78:fa:34:4e:88:a5:3a:2a:2e:
27:d2:b3:e8:a0:5c:47:02:a6:18:6b:59:98:f4:2d:
34:09:f8:31:ec:0f:b7:1d:9f:a4:b3:9a:21:99:65:
93:7f:60:e8:0f:f5:20:be:ab:1a:42:08:6f:17:90:
c8:a4:15:9c:3d:9d:1e:80:c7:0f:19:ec:58:19:eb:
ba:7e:f6:c4:9a:cc:78:db:58:b6:ea:a0:02:73:fd:
18:25:2b:f4:f7:6d:c0:51:97:8e:1f:24:9f:b9:a6:
36:11:76:dc:e8:b7:dd:75:30:b1:34:d7:ed:12:53:
71:0d:84:c9:e2:0b:98:d6:22:ae:c6:06:d3:95:5f:
68:4c:4d:b1:29:9d:a4:81:c0:53:d0:d3:f7:fa:b5:
f5:da:74:93:6d:a0:c8:49:b1:40:ec:3a:bb:75:96:
39:a2:e7:21:84:8d:74:8d:4d:fb:9a:a4:c1:45:95:
81:06:0e:bb:95:b2:e3:de:d6:5e:c9:00:2f:02:2a:
2e:7d:f0:6f:09:55:35:cc:02:b7:b6:3a:61:88:a2:
0b:4f:2e:49:39:35:6e:a8:0c:db:91:37:2a:61:41:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:03:0B:BF:E0:DB:4B:0F:9E:F5:09:74:AB:72:15:70:43:CD:DD
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:dc:72:90:64:ba:4b:e4:ad:f7:8b:b9:d3:87:72:9c:fd:2f:
ef:40:17:32:28:26:b9:61:00:f1:fb:92:ea:0c:b4:0d:3c:52:
2c:6a:9b:97:2f:90:26:02:1e:41:58:fe:98:0e:58:4a:38:8f:
8b:6e:d1:47:ff:c6:0a:2e:10:e9:fa:9a:d4:ac:a9:46:f2:55:
68:8f:7f:d7:34:f9:d4:83:19:7e:e6:8f:2c:04:12:d9:bd:95:
09:34:7b:a8:71:fa:72:e5:1b:85:d7:96:ba:e2:fe:3c:a6:0f:
af:da:55:5a:e7:00:9a:0b:1d:3a:7f:07:d0:36:2f:74:b1:0b:
e1:8a:2f:fb:9a:27:83:c5:af:39:15:79:03:ef:71:0b:fe:be:
93:89:ef:5f:cb:60:d9:66:07:6a:26:58:8f:39:7f:34:df:16:
aa:cc:16:4a:ed:7e:e9:5b:76:a1:e3:a7:38:71:f3:d0:40:d5:
d0:4b:91:03:2f:e9:91:9c:69:a5:fe:36:2b:be:a6:5a:b4:b0:
d2:70:a6:ed:03:a8:71:af:fd:7b:c8:d9:b1:dd:dc:ad:7c:ec:
23:8c:4d:1e:ce:ad:94:7b:9e:f5:55:26:fd:0a:9b:3d:d7:a6:
92:2d:1a:7f:e6:65:37:7c:aa:95:0d:1b:8d:2a:37:59:8f:15:
e5:44:09:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:36:01 2026 by rpki-client