Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
File: f9gGjnNZlrir5x24LODWupZcJTs.mft (raw, json)
Hash identifier: 39mu7JWbG1QJS8ycNQEWmKTF3jJ6JCk7qnVO6TjS4Ls=
Subject key identifier: 2B:B5:E3:F4:FC:E7:57:F3:E5:39:3C:84:B3:CA:07:C8:75:64:34:88
Authority key identifier: 7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
Certificate issuer: /CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Certificate serial: 019EC0A3E88666C0B44C22AC65628165C1F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
Manifest number: 013B
Signing time: Sat 13 Jun 2026 11:00:27 +0000
Manifest this update: Sat 13 Jun 2026 11:00:27 +0000
Manifest next update: Sun 14 Jun 2026 11:00:27 +0000
Files and hashes: 1: 4wayKTDL0C1-3fX0fDk8_7nVVzE.asa (hash: vPLSw9x0tUrEHh7KFV3i9yLuIjiZTpCl5KAxhMoqI9Y=)
2: FL1sqcRejDIMSh0sMhL_ZqJw4wM.roa (hash: cBRPTc3S/Wcw8/oeYxpadl2du6Hf1WSqA+6+KI3HY8o=)
3: f9gGjnNZlrir5x24LODWupZcJTs.crl (hash: taySx+R0Bl5TUe7ql1cVXrc5Hg5Ci4Ee31cS1ECAkF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:e8:86:66:c0:b4:4c:22:ac:65:62:81:65:c1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fd8068e735996b8abe71db82ce0d6ba965c253b
Validity
Not Before: Jun 13 11:00:27 2026 GMT
Not After : Jun 14 11:00:27 2026 GMT
Subject: CN=2bb5e3f4fce757f3e5393c84b3ca07c875643488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:bb:b2:43:af:9d:2e:45:c9:3a:47:c5:19:
70:23:bd:1e:54:fc:3a:e5:b2:a8:1a:04:31:1f:18:
fe:2d:2a:6b:f0:58:9e:19:e6:66:02:55:85:75:cd:
8a:e6:24:c7:ce:f7:c8:96:93:09:1f:64:93:c8:b5:
bb:5a:19:31:36:2c:a6:8e:0b:80:32:b6:75:12:fe:
ca:d9:7d:fa:a2:32:33:4f:c2:ec:dd:da:7a:72:53:
39:5f:76:63:e3:9b:eb:25:16:13:8f:2f:3d:43:fc:
69:ed:31:fc:98:de:fc:8a:c2:b0:69:57:27:5a:6a:
77:f9:fc:1d:ac:27:89:17:04:98:f7:61:ea:c7:8d:
a6:fc:ad:93:64:0b:95:8e:64:0f:55:c2:50:0b:da:
d0:92:e4:ad:8d:39:16:8b:4f:39:3a:07:bf:dd:2d:
e7:d7:e1:5c:f4:4c:ef:74:fc:35:06:9c:a6:ff:62:
9a:b3:f0:c5:94:5f:4b:4b:4e:2d:0b:ac:c3:d2:0f:
05:0b:b3:a0:50:8d:67:08:1f:13:ba:40:67:c3:36:
51:c2:60:a9:91:f8:2b:0c:25:e6:f3:99:ad:31:ec:
37:47:cd:6a:62:9f:1a:c4:40:30:60:84:6e:7e:62:
2a:31:be:2e:3d:87:ac:de:27:36:a9:34:33:39:dc:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:E3:F4:FC:E7:57:F3:E5:39:3C:84:B3:CA:07:C8:75:64:34:88
X509v3 Authority Key Identifier:
keyid:7F:D8:06:8E:73:59:96:B8:AB:E7:1D:B8:2C:E0:D6:BA:96:5C:25:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9gGjnNZlrir5x24LODWupZcJTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/675df6-fce6-4cb1-a7bf-22b9aaa286f6/1/f9gGjnNZlrir5x24LODWupZcJTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e6:47:9d:69:9f:06:da:de:76:61:27:8e:74:bc:d0:4f:3a:
11:66:e8:ae:4d:4a:b7:9e:5c:d5:81:29:a9:f0:c0:77:0f:b8:
96:21:d4:c8:e3:11:b8:38:c9:6d:d8:a2:b6:5b:44:71:ae:d9:
5b:19:96:fb:e9:12:13:12:b8:36:8c:6d:21:41:e3:37:b2:56:
7f:e5:87:e3:0c:d1:22:f8:c0:11:c4:c9:f6:e6:2e:4f:2e:79:
8c:15:c0:37:54:e7:5c:63:53:a8:7f:13:be:de:dc:5b:29:ee:
97:dc:d6:33:8c:ff:62:3c:19:01:4c:d3:9a:ab:57:e7:1f:f6:
a4:55:ac:9a:f7:97:36:c6:48:f5:a8:1f:17:ba:57:7f:03:08:
09:6c:70:7d:79:8f:f6:03:1e:25:af:b8:3b:35:db:49:16:11:
71:6c:4f:54:3a:97:b3:15:32:52:29:c3:5a:92:ee:9b:58:e1:
8c:79:9a:ad:83:8b:a2:88:53:14:42:59:20:70:48:fc:ab:fd:
b3:1e:59:1c:93:03:e9:3a:ca:d0:ac:fe:da:3e:7f:e3:02:34:
30:91:57:5b:ab:7b:77:25:a1:1a:28:ca:f6:75:b5:b7:91:65:
2c:0b:61:f7:04:4d:ad:b7:63:1a:93:0a:39:6f:18:70:f5:fe:
5d:70:6f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:58 2026 by rpki-client