Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File: 9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier: oBz3wV5UVwaLba9Ds2M94QT67W4WiHUOS+8hcfElb4s=
Subject key identifier: 9A:8E:B3:CC:39:4F:4F:78:0B:E2:37:21:4A:7B:AA:B8:B9:69:B3:7D
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer: /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial: 019EBE112DA92854FB92640959950A110F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number: 0E
Signing time: Fri 12 Jun 2026 23:00:56 +0000
Manifest this update: Fri 12 Jun 2026 23:00:56 +0000
Manifest next update: Sat 13 Jun 2026 23:00:56 +0000
Files and hashes: 1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: 9oj61x31SLb4pVmQRgfHIX2Dd+LvLcmZoALcMCqqZeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:11:2d:a9:28:54:fb:92:64:09:59:95:0a:11:0f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Validity
Not Before: Jun 12 23:00:56 2026 GMT
Not After : Jun 13 23:00:56 2026 GMT
Subject: CN=9a8eb3cc394f4f780be237214a7baab8b969b37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ea:57:1f:90:e2:df:65:ca:03:e2:19:3d:25:
e7:36:32:bb:21:47:68:b5:32:cb:85:03:7b:13:09:
82:fd:28:38:54:4d:97:44:ee:ed:56:2d:12:66:0a:
e0:38:53:d0:c5:d0:2f:3e:31:f1:a0:4b:67:d0:d9:
33:8a:e1:f9:83:68:e4:b0:a4:20:7c:76:52:cc:bc:
17:91:35:f5:98:c4:08:52:93:22:53:1d:28:00:e2:
db:b2:a0:78:a5:a8:56:78:8d:47:16:3a:57:6a:2f:
bb:d8:c0:eb:51:c7:2f:12:c7:67:43:9e:39:37:d0:
e5:fa:e1:49:56:35:9c:f4:ae:56:ab:cf:4d:63:be:
43:87:b2:99:a5:89:8e:c7:72:45:eb:ef:59:cc:f1:
31:53:2e:7d:f5:d2:a4:d8:48:33:f3:df:d3:d0:9d:
66:2f:69:72:c7:0c:9e:07:82:32:00:b3:c0:42:48:
aa:9d:06:01:44:ef:b5:1c:dd:fa:9d:03:8c:89:e7:
bc:95:ba:f7:de:1d:fd:5c:29:ac:6a:06:1d:05:a6:
65:b5:e5:87:6c:96:37:c0:e2:84:bd:37:7d:44:44:
eb:10:d0:ad:9d:b3:ea:fe:60:ff:9e:a8:a1:33:c6:
56:87:b8:f4:fe:59:9d:6b:74:79:dc:67:ef:9c:39:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8E:B3:CC:39:4F:4F:78:0B:E2:37:21:4A:7B:AA:B8:B9:69:B3:7D
X509v3 Authority Key Identifier:
keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:24:33:74:10:ed:b5:67:1c:74:48:5f:58:ef:bf:e1:80:a7:
bb:1d:64:84:dc:ac:a5:c7:1e:2a:f6:82:5d:e5:fb:84:03:77:
55:4b:49:ad:36:38:c5:c5:f0:80:1f:5c:1f:61:57:7a:6b:e1:
15:22:3b:31:02:c3:96:d9:35:06:9a:4d:96:08:91:14:6f:56:
de:b9:d7:87:79:fb:2c:1b:16:3b:f7:45:f8:f9:58:de:0b:79:
aa:f7:a7:6a:3d:c8:3e:26:9e:91:83:40:ac:64:c3:60:47:c9:
15:00:ac:77:e5:3b:a8:5e:4b:31:58:62:34:35:49:54:a0:70:
60:c4:71:cb:b3:fd:d4:cf:b3:f0:de:6c:bf:cd:5a:bd:fa:9a:
44:44:1f:7a:c2:ce:55:66:f1:a2:ed:d0:b3:c5:48:9a:26:32:
43:1d:2e:0d:f1:4a:7d:82:90:dd:2f:74:ab:d3:4c:bc:91:e2:
56:49:64:76:4b:59:85:56:5d:74:5e:68:1b:4d:0b:19:eb:48:
6e:27:cd:b2:e1:c5:1d:b5:4b:00:2c:be:d2:53:ee:55:1d:ab:
4e:a1:d4:70:a3:20:6f:01:34:a2:09:0a:b0:47:7d:f5:46:54:
97:33:ee:da:f1:19:56:8f:c6:1b:e9:22:4e:0a:9f:74:8f:2b:
ae:e8:1f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:17 2026 by rpki-client