Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json)
Hash identifier: A4zbEWckoudf7t8oDPO4bK67knYKeTXHzNZ1678Gdos=
Subject key identifier: DD:B4:75:DC:58:98:1E:4D:A9:F1:F9:55:E0:3A:40:48:BA:12:6B:2E
Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866
Certificate serial: 019EBFC8885C6E9E874C69B21F468500F6C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
Manifest number: 1007
Signing time: Sat 13 Jun 2026 07:00:50 +0000
Manifest this update: Sat 13 Jun 2026 07:00:50 +0000
Manifest next update: Sun 14 Jun 2026 07:00:50 +0000
Files and hashes: 1: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: bhADmhND3LDHf79Sy50GpPE08TZp/3pEv7R82gFrnR4=)
2: o3IVsTtHp4LvNCkM3vhyjfWuFnU.roa (hash: lY2LMXKbJT6BlB/lSBYqcfLveqU3+U+eDmIrpngNEak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:88:5c:6e:9e:87:4c:69:b2:1f:46:85:00:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866
Validity
Not Before: Jun 13 07:00:50 2026 GMT
Not After : Jun 14 07:00:50 2026 GMT
Subject: CN=ddb475dc58981e4da9f1f955e03a4048ba126b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:28:ed:20:75:e3:8b:88:ef:1c:d2:64:f4:
69:45:25:b1:21:6d:50:8f:6c:6e:a8:05:4c:09:ee:
71:8d:82:67:f8:56:7c:f7:f2:d3:bc:59:54:3a:ac:
00:79:6d:b3:9d:d5:d6:3c:cc:55:22:bd:c4:25:30:
f0:a9:3c:27:d3:17:75:e0:a5:14:d7:32:05:41:a9:
76:84:19:93:10:7a:18:5e:0e:34:59:5d:60:da:91:
ba:de:12:04:84:68:6b:f2:6a:2f:c6:64:e3:d1:a3:
71:d8:38:55:77:ce:64:95:ba:40:11:1b:d7:31:5d:
e2:28:76:5a:cc:51:f6:28:b1:79:b5:d7:a5:b9:15:
9c:44:00:ba:04:37:49:59:79:ae:63:5d:d8:e3:10:
91:47:9e:23:cc:44:44:ea:e9:4c:87:e3:5d:d2:33:
7a:7e:ff:a8:a5:d0:57:80:9d:35:70:55:1f:4f:6d:
8d:51:75:f9:85:84:97:1e:3f:71:bb:79:b9:4e:ba:
0c:49:27:89:a9:f9:42:01:fe:2d:37:6a:79:f0:b1:
0e:00:36:c8:79:1c:77:83:17:b7:fa:9b:70:18:f7:
44:cb:fa:0d:e3:83:28:bd:54:d2:4a:29:ca:83:b9:
5c:46:f2:2d:64:37:e1:3a:3f:d1:5b:d7:57:a4:8c:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:75:DC:58:98:1E:4D:A9:F1:F9:55:E0:3A:40:48:BA:12:6B:2E
X509v3 Authority Key Identifier:
keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4e:30:2f:ce:47:24:f2:26:3c:06:cf:a6:36:78:ed:aa:43:
10:17:b6:93:2f:4c:c7:55:c4:df:24:bb:9a:ce:e8:12:78:4f:
dd:26:d1:70:26:0b:7b:64:70:32:aa:db:3d:20:f9:ad:08:ab:
fa:d1:52:15:14:d4:5b:fd:6b:81:48:eb:b2:c6:b9:fb:e0:69:
f1:5b:25:d8:36:38:0a:a9:aa:77:ab:66:97:79:1d:ff:b7:8e:
fa:d0:fb:aa:28:0e:0a:25:7b:50:ed:df:b4:17:22:67:ea:9c:
f7:ce:e4:d3:b0:1e:1c:f7:19:c2:e7:81:a6:fc:c9:d8:4c:39:
b5:be:f7:40:bf:25:81:7e:a7:f6:c7:3d:6e:48:c4:5b:ab:39:
ba:6f:47:1d:f0:53:d3:77:bf:14:71:f2:ff:4b:f3:07:7a:80:
95:4b:93:bb:9b:6e:a0:69:88:1b:a9:a8:43:69:af:78:84:b0:
f3:56:7e:3f:d3:c7:d3:07:04:d6:b8:f4:b4:74:f5:47:be:1a:
61:fa:e5:e1:e0:62:05:d8:75:9b:a4:a6:49:4f:4e:62:c1:7c:
b0:e4:4f:fd:5b:47:70:38:fe:a7:02:8b:62:38:29:5b:dd:ba:
a5:60:92:9b:9e:5f:27:af:e0:b2:a9:76:b6:04:6e:4f:5a:83:
88:b5:68:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:19 2026 by rpki-client