Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
File: 9OQPA5eaP05K052pg7Z7p-YhXA0.mft (raw, json)
Hash identifier: vRHFFlasz8XEyiq/Te2rjOHbj4n+CfCblNg/VMuQcZc=
Subject key identifier: A9:88:CA:40:91:8A:19:B5:AB:2D:7E:55:7E:70:F7:74:B4:87:51:13
Authority key identifier: F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
Certificate issuer: /CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Certificate serial: 019EBEB5B3618B529002CFD415671AD62C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 02:00:39 +0000
Manifest this update: Sat 13 Jun 2026 02:00:39 +0000
Manifest next update: Sun 14 Jun 2026 02:00:39 +0000
Files and hashes: 1: 9OQPA5eaP05K052pg7Z7p-YhXA0.crl (hash: E99OxrObkOrhy5+nqBj8VQTw+xUQ/RjCglxwLgwSKP4=)
2: FXnznPhn55vYjBoYQttg28E4IK0.roa (hash: Dl0FXZLA3s/7+Hd8tk5PaoTmm8/8008Q5/BvoslwSfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:b3:61:8b:52:90:02:cf:d4:15:67:1a:d6:2c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e40f03979a3f4e4ad39da983b67ba7e6215c0d
Validity
Not Before: Jun 13 02:00:39 2026 GMT
Not After : Jun 14 02:00:39 2026 GMT
Subject: CN=a988ca40918a19b5ab2d7e557e70f774b4875113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:90:f7:22:d6:ab:03:ea:da:f6:0f:b9:e2:3b:
25:87:ea:6c:2a:45:8a:11:bc:1a:5e:70:be:fe:48:
ca:63:a2:ea:a7:8b:de:0f:43:5e:89:6d:1e:8c:7a:
d9:52:6d:39:0c:0d:33:4f:50:49:28:f0:f3:7b:e5:
b0:c2:d2:6e:6e:3e:72:a8:33:41:f6:87:d8:b0:4d:
4d:38:0e:f9:0a:d6:29:5b:66:c7:f7:7e:78:37:a5:
25:73:db:93:09:25:09:66:46:89:8b:bd:7c:13:a4:
f5:3c:f2:d3:0a:22:41:c8:82:e5:27:86:7e:70:b0:
73:0c:72:ef:0f:52:40:53:7c:c1:d1:ea:7c:91:fe:
71:f0:e0:ea:cd:58:7d:2e:ab:13:ec:8b:31:ea:75:
65:63:da:2f:a1:34:09:66:84:f4:43:3e:ff:32:aa:
4e:db:f9:91:73:94:dd:fd:b3:b2:30:1e:ea:c6:33:
7c:d0:ae:47:c8:aa:09:21:3f:33:e6:c4:0e:ff:1d:
56:b0:79:d8:c4:49:b8:92:af:68:d6:4d:c5:1d:14:
89:e2:1f:d0:e7:91:ca:4a:3e:11:2a:df:b2:93:57:
2c:74:cf:3e:1a:fa:d5:91:63:7e:fc:a0:a9:63:9f:
c2:c9:da:7f:43:9c:45:cf:a5:44:1a:68:10:9e:05:
5a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:88:CA:40:91:8A:19:B5:AB:2D:7E:55:7E:70:F7:74:B4:87:51:13
X509v3 Authority Key Identifier:
keyid:F4:E4:0F:03:97:9A:3F:4E:4A:D3:9D:A9:83:B6:7B:A7:E6:21:5C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OQPA5eaP05K052pg7Z7p-YhXA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d4ffc0-a52d-461b-9719-a914e3ce3941/1/9OQPA5eaP05K052pg7Z7p-YhXA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:21:eb:16:aa:56:97:0d:14:cf:3b:1f:f5:5a:dd:9c:d9:30:
b6:ea:ac:ee:89:47:7f:13:85:11:ea:d2:df:74:93:2c:b6:da:
a9:c8:8b:fc:dd:fd:6a:49:82:c3:37:2d:ed:84:8f:f2:7b:07:
d0:a0:10:36:b8:9e:e1:34:b7:c6:d2:49:f9:e8:84:50:6e:da:
5f:f3:37:04:c6:86:d9:2e:08:10:f3:70:da:90:dc:12:25:18:
95:0e:53:a2:ea:dc:b6:4f:c2:4f:8d:1d:7b:09:51:90:b8:49:
1d:69:38:5c:03:f2:9d:af:4e:2a:99:69:dd:bc:f4:dc:32:64:
0b:16:8a:a7:65:26:6a:2e:d9:62:ea:dc:45:ac:5a:b4:7b:8a:
5e:97:50:97:ae:28:f5:67:43:66:cc:44:a9:63:57:f8:d2:14:
e9:4b:df:d0:43:ed:ce:70:46:0c:05:19:c9:4e:26:6d:47:bd:
e9:e0:eb:30:b5:f7:61:36:fe:d2:c2:18:68:c6:69:27:5c:49:
45:ab:0c:b6:32:22:01:50:49:0a:89:45:55:a5:cc:01:f0:07:
47:d7:02:35:5f:a2:59:a9:77:5e:41:e6:d1:94:65:a0:e4:02:
48:45:be:32:3e:ce:58:5d:b7:19:38:2c:e2:34:2b:91:19:8b:
ff:fc:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:48:27 2026 by rpki-client