Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft (raw, json)
Hash identifier: RSrgM/QrENya9BUHnTQO/PBTnL40SnuDnSpmaf8R47g=
Subject key identifier: AF:39:FB:3F:5A:3C:2F:86:D6:F2:F2:DA:92:CC:B4:98:BF:38:2B:2A
Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Certificate serial: 019EBD3574A865FCBB0C6EE2F7810389B857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
Manifest number: 1077
Signing time: Fri 12 Jun 2026 19:00:57 +0000
Manifest this update: Fri 12 Jun 2026 19:00:57 +0000
Manifest next update: Sat 13 Jun 2026 19:00:57 +0000
Files and hashes: 1: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl (hash: hzm0C0oqsxt+PfwfHQj6gh305EGcoFky8xqE1Vt1T28=)
2: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (hash: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:74:a8:65:fc:bb:0c:6e:e2:f7:81:03:89:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Validity
Not Before: Jun 12 19:00:57 2026 GMT
Not After : Jun 13 19:00:57 2026 GMT
Subject: CN=af39fb3f5a3c2f86d6f2f2da92ccb498bf382b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:5d:29:41:a1:f5:6d:58:72:98:4d:db:39:
9a:1e:5f:71:09:de:26:a9:4d:f3:e0:a9:b0:6d:2e:
2e:8e:1c:44:4c:56:f7:8c:06:c0:7f:b5:85:a5:e8:
4c:cb:d1:64:34:94:89:4f:28:da:b1:f2:bb:ed:4a:
97:40:06:75:23:88:05:7c:25:85:4b:6a:de:a6:b3:
39:93:7f:f2:af:7a:a0:dc:80:86:d4:86:21:66:2b:
bb:d4:fa:4f:b9:b0:db:fc:38:fb:79:ee:e4:ab:a7:
c9:b2:33:92:b2:db:1a:50:52:09:d7:0e:dc:66:29:
d7:08:1d:7f:c6:c0:bf:4b:e7:6b:ad:60:d3:f6:56:
a1:6f:f9:51:c5:34:d1:18:0c:39:18:bc:d0:13:89:
1a:6b:47:ae:3b:5e:12:6c:69:2e:68:11:aa:c1:da:
bb:f3:5c:fa:93:40:74:72:12:33:35:c7:84:cf:64:
79:2e:a2:7f:48:07:eb:93:f5:04:c0:87:ae:a6:66:
f1:ff:f3:8c:c2:56:2e:a1:18:35:18:ae:f1:84:aa:
54:54:ae:72:fe:b4:74:76:8a:7a:c2:db:29:eb:bb:
59:79:e6:ec:6a:79:34:fd:70:03:e0:f2:44:51:da:
56:1c:72:5d:81:08:a7:3c:34:36:ae:dc:2c:67:43:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:39:FB:3F:5A:3C:2F:86:D6:F2:F2:DA:92:CC:B4:98:BF:38:2B:2A
X509v3 Authority Key Identifier:
keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:63:c2:1b:7f:fc:56:e8:a2:42:f3:23:88:52:fc:8f:7b:0d:
2e:3b:a8:0b:c5:7b:10:34:7c:f1:0e:91:48:45:bc:f2:84:d5:
42:f9:e9:82:48:f2:d6:dc:d9:cf:9c:b2:58:16:36:7b:e2:11:
03:a3:f4:ed:52:53:2f:ec:32:2e:2b:f5:76:96:ac:87:f6:c6:
b0:23:60:0c:f6:a4:5c:c1:87:e1:0b:ca:91:d9:4f:e2:84:45:
fe:b9:a0:5a:91:16:3b:e1:1f:43:2b:0a:3d:42:b2:11:5e:94:
f5:d4:68:fd:03:06:bf:e6:90:5e:ee:25:3f:e8:67:95:c2:f4:
a7:d7:4b:ac:7d:d9:45:6f:92:69:47:e5:e7:97:6f:7b:31:34:
47:d9:25:c2:7c:c1:7d:56:e4:f2:50:f2:bd:86:02:48:00:96:
ef:f3:cb:a0:e2:18:76:32:c1:7e:b2:0d:b3:a5:fb:ae:3a:db:
6b:50:ae:82:b3:8b:e0:d3:85:e0:dd:7b:32:3d:8d:81:1f:76:
72:b9:cc:75:7e:1d:e2:3c:24:0f:a3:ca:80:de:5e:f3:0d:4e:
09:2c:5c:44:ce:b2:1f:95:a9:75:b3:bd:37:2b:af:86:9a:3b:
81:45:94:8e:43:f4:05:40:3c:f2:98:b0:53:2c:60:8b:df:d3:
26:ea:8a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:59 2026 by rpki-client