Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
File: 9lWaWOLE8UoftjRDGQgK88xWRGs.mft (raw, json)
Hash identifier: dL8k04P6RXTgpgdUolaeZu9L/Fgp4ZEh90SCjaNGZ7o=
Subject key identifier: A3:87:B4:04:68:27:74:F9:73:A1:BA:0C:34:F3:1A:9F:6A:43:EF:C0
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Certificate issuer: /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial: 019EC224B7B5ADFAA8286370D8F7BC691EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
Manifest number: 4A
Signing time: Sat 13 Jun 2026 18:00:46 +0000
Manifest this update: Sat 13 Jun 2026 18:00:46 +0000
Manifest next update: Sun 14 Jun 2026 18:00:46 +0000
Files and hashes: 1: 9lWaWOLE8UoftjRDGQgK88xWRGs.crl (hash: OYCz9yQB+jHH8DXG1W9/n9tTh6L/dqWQG33W0yt6Scc=)
2: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (hash: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b7:b5:ad:fa:a8:28:63:70:d8:f7:bc:69:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Validity
Not Before: Jun 13 18:00:46 2026 GMT
Not After : Jun 14 18:00:46 2026 GMT
Subject: CN=a387b404682774f973a1ba0c34f31a9f6a43efc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:96:bf:34:56:ef:89:46:8e:82:e2:d8:86:
0f:93:74:73:6d:d1:92:16:00:6f:3a:bf:bd:6f:90:
62:70:4c:0c:7d:68:09:a0:52:9f:86:48:15:c5:0e:
a1:90:56:e1:0b:79:7e:fd:73:ac:bb:49:75:ec:4d:
e7:97:ec:37:9d:d0:26:58:85:c7:3e:70:50:c8:b0:
e6:47:21:87:1d:97:c4:2b:fb:cb:7a:ac:eb:57:95:
9a:3f:25:ad:23:99:da:64:b2:ac:40:83:69:88:58:
d8:36:2e:f8:2e:c9:ad:6d:67:16:bf:79:23:a8:ca:
3d:2e:14:a9:66:c5:1a:c0:b9:7b:cc:41:a8:93:f6:
4b:aa:bf:f6:6d:4b:c0:9c:6f:cd:e9:2c:a1:fb:d9:
e4:85:88:93:0a:c7:3f:96:ce:28:4a:6b:f1:5e:ec:
06:9b:a9:88:49:95:34:18:f3:f0:ba:19:d8:77:da:
90:40:ad:03:77:9b:fa:2e:5f:ce:da:e4:7d:07:b7:
3d:00:d9:b8:c4:53:f4:33:ae:8c:60:f4:dc:b3:94:
a9:f1:46:6a:81:53:d7:93:7f:04:a1:00:35:dd:69:
f4:94:3e:0a:f5:b5:cc:2a:05:eb:3e:f3:cf:3b:17:
67:7d:d5:46:de:2f:0c:33:61:1e:db:7e:eb:be:33:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:87:B4:04:68:27:74:F9:73:A1:BA:0C:34:F3:1A:9F:6A:43:EF:C0
X509v3 Authority Key Identifier:
keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f8:f2:98:da:c3:16:c2:d5:90:eb:35:8e:33:25:15:38:0e:
84:fe:47:38:8a:bc:fe:b3:2e:93:cf:ae:6a:ef:61:fe:76:23:
50:b2:54:4d:74:0f:79:58:26:3e:3a:39:9d:00:6a:a9:36:9f:
e3:d2:21:82:59:40:5e:9e:85:76:25:1c:d9:43:b6:97:7b:d0:
c5:f4:b2:a2:ce:d7:cd:bb:e5:f6:f8:a4:21:fe:47:2d:7a:83:
90:43:cc:37:dd:72:cd:bf:18:56:b1:af:81:bc:8d:32:07:77:
8c:a7:e1:83:4a:e5:d3:17:01:ad:12:cd:91:75:35:a1:86:92:
f6:67:40:db:3c:79:80:3b:33:31:4c:97:75:07:db:7c:8c:ee:
f9:97:39:f9:5a:88:37:ff:76:a6:2d:c8:72:6e:6e:d5:6d:77:
e7:5f:7f:37:c0:e1:8a:0c:ce:67:85:27:25:5f:b0:2d:61:06:
65:37:5c:5d:12:40:23:7e:53:f3:d3:73:90:67:27:89:62:e4:
4d:78:9e:75:09:fa:43:b6:f0:7f:f3:b2:86:45:fb:ec:8b:9d:
f3:94:88:3b:06:3d:b2:60:44:f7:ad:48:c1:81:18:f9:a4:7b:
1a:72:de:87:57:13:d3:9e:db:3d:c3:17:b2:16:c6:bf:8c:37:
e8:82:8b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:18:27 2026 by rpki-client