Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json)
Hash identifier: 7/e7kfvzppgdwT3515p2bZYgtS2d3OldFpDiZ0Qicek=
Subject key identifier: B8:97:1C:30:71:45:EA:1C:6D:ED:69:46:FA:18:5A:81:5C:42:EC:42
Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Certificate serial: 019EBD357789514FCA62966185252DD4EBA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
Manifest number: 1959
Signing time: Fri 12 Jun 2026 19:00:58 +0000
Manifest this update: Fri 12 Jun 2026 19:00:58 +0000
Manifest next update: Sat 13 Jun 2026 19:00:58 +0000
Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: mmbqUbkBTzC1EIQRdoTVZPurlXBTIWfA+kOUoVr3oGI=)
2: BqRJvB_nPRiPWuTGUs43OFgE1cg.roa (hash: CouaUfaCJlCnH6IGbuUpQJc4a6XZQ+ovYHzWhnqUp88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:77:89:51:4f:ca:62:96:61:85:25:2d:d4:eb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7
Validity
Not Before: Jun 12 19:00:58 2026 GMT
Not After : Jun 13 19:00:58 2026 GMT
Subject: CN=b8971c307145ea1c6ded6946fa185a815c42ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:94:0f:98:12:a4:41:45:30:32:4d:75:cc:
92:43:67:2a:99:b6:e4:7a:7a:a1:d7:6b:2e:ba:28:
56:c6:5c:a3:2e:b5:b6:89:0a:71:cb:d7:42:ab:5b:
15:4b:b5:97:13:64:77:09:9f:fe:77:4a:fa:1e:b7:
c6:a8:65:20:ed:14:6b:30:b4:ea:2a:8c:cc:4e:a0:
d5:46:01:0b:3e:a7:b3:4e:b9:02:b3:87:e4:3a:eb:
44:4c:d3:24:2a:cd:e2:6e:f9:e8:30:3a:ab:f9:ca:
40:e3:ac:4c:b0:42:2c:f3:2d:00:7e:65:61:ba:39:
ae:a0:00:71:4c:66:d0:ea:ed:2f:de:77:dd:72:8c:
c4:d1:6d:c9:92:2e:77:00:40:73:c9:a3:d6:a0:f9:
32:9b:75:40:b5:dd:6d:dc:4d:88:35:5c:8e:e6:33:
c7:d3:5d:13:5d:6a:7e:ef:18:20:a1:47:d1:2f:2c:
79:db:06:c6:35:cb:9c:ce:55:e8:f6:a9:d8:0f:ce:
4b:5b:78:e2:1b:50:01:eb:c9:be:c9:74:fe:85:e7:
e7:8a:ac:8e:df:44:8c:42:02:16:6b:c3:43:19:15:
dc:2c:f3:5a:5c:09:85:f6:5f:dc:dd:f2:5d:4d:6b:
69:5a:fc:5a:72:84:2c:78:c4:33:e9:18:f5:94:ba:
c8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:97:1C:30:71:45:EA:1C:6D:ED:69:46:FA:18:5A:81:5C:42:EC:42
X509v3 Authority Key Identifier:
keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b7:f2:bf:6f:66:27:03:5c:b0:e3:c6:d9:5b:f1:06:83:58:
12:14:31:4e:cb:80:44:35:19:e2:de:0e:87:41:b5:00:29:cc:
65:42:f1:b6:9d:43:2d:78:56:5c:14:ae:6e:a5:0e:2f:50:fe:
39:d0:76:ef:76:2d:92:14:d8:2f:c9:c6:fc:4b:44:30:e9:fa:
21:6d:25:05:04:06:4c:71:56:33:d4:4c:0c:c2:0c:6a:e5:34:
4e:19:40:d5:9a:c1:4c:c1:b0:1a:6c:0f:aa:eb:ae:86:b0:12:
06:4a:42:ae:af:01:9e:39:c0:76:cf:f5:eb:14:8f:9e:0d:0f:
d8:cc:65:38:16:7a:34:48:1e:d2:50:cd:10:7d:54:83:b1:a9:
39:8c:46:28:72:63:64:1e:df:da:3e:c8:ee:75:23:91:ed:59:
41:95:70:2f:42:31:d4:23:50:b9:fe:99:31:01:f3:aa:90:89:
d7:ff:63:f9:03:87:61:eb:ad:23:3e:90:10:64:78:30:41:95:
e7:9a:e3:f3:8e:73:34:41:b8:92:b2:35:95:6b:94:60:bb:6e:
ff:c1:2f:82:28:cb:a0:48:1c:84:19:bb:07:0f:ba:f5:c5:e9:
ba:7e:b8:3e:6c:4a:18:01:11:3c:68:77:52:5a:88:43:28:1f:
00:0a:cd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:55:25 2026 by rpki-client