Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json)
Hash identifier: rzzHCciqK5NVWSbSOKJzBomagVYvbIAsByJAs+KdeP0=
Subject key identifier: 97:0C:6B:7B:63:AA:21:8C:86:4A:54:21:65:F1:16:B2:1D:C6:EF:97
Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03
Certificate serial: 019ED3F4369000B411494F4B9FCB8C0E3E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
Manifest number: 0E18
Signing time: Wed 17 Jun 2026 05:00:57 +0000
Manifest this update: Wed 17 Jun 2026 05:00:57 +0000
Manifest next update: Thu 18 Jun 2026 05:00:57 +0000
Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: Fg1jgQqaExIgrpAhfbNRDYQ9fq1IQS6fFla3x+SzBGU=)
2: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (hash: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:36:90:00:b4:11:49:4f:4b:9f:cb:8c:0e:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03
Validity
Not Before: Jun 17 05:00:57 2026 GMT
Not After : Jun 18 05:00:57 2026 GMT
Subject: CN=970c6b7b63aa218c864a542165f116b21dc6ef97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:f6:f4:0f:8c:f4:c9:fa:eb:e9:90:18:90:
35:5d:e4:46:29:a8:53:2a:42:b4:e0:4e:4b:45:62:
52:be:0e:f9:49:71:0b:a7:bb:33:c0:97:ee:a3:3f:
60:34:ba:dd:a9:80:2a:27:c2:4c:33:11:ca:f9:b5:
7c:91:76:81:7a:de:5b:44:96:fe:a2:97:3b:f3:1c:
40:8f:8a:4d:35:d5:c3:fd:01:5c:86:77:b9:dc:55:
22:cf:f3:9c:02:39:92:2d:4c:ba:e1:2d:6a:0b:a1:
90:a9:a9:c3:62:e1:e2:0b:20:ec:a4:5c:14:0a:ca:
3e:f8:5a:85:3e:f8:99:50:85:60:97:bf:69:42:3b:
3c:9b:49:f9:3e:00:c5:3b:88:0b:dc:13:3f:bb:d6:
11:f3:21:7b:00:30:80:77:e3:1b:27:3c:65:e5:2d:
a0:27:6b:70:82:7a:60:c8:57:95:cd:c8:4e:78:33:
9f:28:06:d3:6b:99:3a:81:43:10:1b:2b:b6:ec:f2:
c8:e8:7d:fc:47:59:87:d3:fc:4f:07:04:19:e6:78:
04:a2:af:b8:a4:4f:cf:fa:16:4e:3d:64:c8:91:45:
7d:f6:ae:9b:57:f9:e6:ab:eb:70:12:71:70:dc:7d:
c7:58:5a:d7:96:af:9f:e8:c0:e0:e3:7a:bf:cf:53:
49:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0C:6B:7B:63:AA:21:8C:86:4A:54:21:65:F1:16:B2:1D:C6:EF:97
X509v3 Authority Key Identifier:
keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:ac:cc:20:53:41:bd:c9:73:ff:e2:5f:a7:11:ef:3f:9e:
8d:c3:3f:84:59:17:69:32:de:6a:07:93:b9:45:90:88:03:d7:
ed:99:54:89:90:f2:d1:66:a9:0c:f1:97:7e:46:d7:71:ec:79:
ad:36:34:8b:75:a5:84:ee:66:f7:54:4a:9f:59:4b:eb:5e:2a:
0f:1a:df:88:d5:ae:33:70:ea:fc:1e:4a:ab:12:26:c3:bc:de:
2d:2b:e9:97:a7:f0:63:bf:c6:e8:6a:b0:49:51:aa:6f:97:08:
b6:de:4a:a2:70:2b:c8:2c:ee:12:70:16:9f:89:8f:93:a2:a5:
ff:5b:09:e7:cd:b2:0c:0a:23:99:db:b7:f2:c7:93:6f:10:67:
53:32:92:5b:08:91:88:a0:9c:f3:f4:9a:3e:3e:77:59:37:04:
be:fb:74:0b:69:b7:95:4d:c4:f0:39:93:df:bb:40:ee:70:65:
3a:0e:69:dd:84:f5:72:e8:4a:77:9b:d8:30:1e:7c:10:d2:ee:
71:12:a2:7d:0f:03:a6:c6:75:97:a7:4f:6f:dc:c4:ce:37:74:
08:ad:d9:88:61:c0:e4:29:08:11:87:6d:2d:99:af:45:a0:f2:
8d:a8:c3:fb:5b:5a:f5:9e:49:92:ba:73:32:32:d4:3b:59:36:
19:16:fc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:46 2026 by rpki-client