Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json)
Hash identifier: IJ5W/S2bhoT++FZNfls/pJrrspdtJTUKw1nTRDgbEtE=
Subject key identifier: 9F:36:7C:C1:AD:9E:6F:11:E7:63:DC:A3:AD:28:55:68:7E:C2:51:9F
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 019EBEB62E32AF330A23FE75893DB6AB09AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
Manifest number: 1204
Signing time: Sat 13 Jun 2026 02:01:10 +0000
Manifest this update: Sat 13 Jun 2026 02:01:10 +0000
Manifest next update: Sun 14 Jun 2026 02:01:10 +0000
Files and hashes: 1: 4xcI6-ajxKmP_Ug4IMIxPvlGv34.roa (hash: xrDvVgzmOi/0saXzoSAdi3kdTTIHSg71KS5FPmg6F+8=)
2: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: OnCaZnRj9fvV9B4BcTEWnTw6e5vT2W07chvQAdc90Cw=)
3: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (hash: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc=)
4: UQeZhixfXf_YkfYGyO2Lf14Z6_s.roa (hash: eKAIar7WRAnNke9Qfa+HTZNykSJ9iONQr3Jz7CFyN/A=)
5: XBmkVeuFRD2uueboTgIjRhoEQuE.roa (hash: v9V72yDsw7P8I61J+zB2Rok+f/g1fiD48qiwYR7onlg=)
6: aY_8elSb_8uPtGsvwdPAoghtAvU.asa (hash: 76WdsCvAP23WdKa5dRnRSbPtIWmjIgnXov9zdJdVJm4=)
7: iRdgIX5OxjNM1yQqzGrI-IlFYWU.roa (hash: o1VCuPGQGLom0fvLJJYHwM1EdofsHXcxsnsAuKlYpn4=)
8: rVAZAeOQDvwPVh2Fwei2q2CF_Qg.roa (hash: XaxWalW01B0ra8JXzNNUG2fuhXDskHxvyOQTCE4WGSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b6:2e:32:af:33:0a:23:fe:75:89:3d:b6:ab:09:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jun 13 02:01:10 2026 GMT
Not After : Jun 14 02:01:10 2026 GMT
Subject: CN=9f367cc1ad9e6f11e763dca3ad2855687ec2519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e5:72:d2:e2:1e:23:ff:30:0c:b5:e7:47:70:
fb:c4:4b:e6:26:03:db:99:22:4a:99:bf:3d:bd:d1:
c3:06:fb:c6:8b:02:b0:8f:5d:e2:86:10:f6:c1:14:
09:96:9e:6f:9d:93:4b:7b:7e:a7:36:5f:76:89:69:
af:b2:20:a6:7c:be:a9:18:28:a9:5d:72:e5:15:f2:
b1:33:24:81:57:6a:f9:26:29:41:fc:04:a2:8c:57:
15:74:82:3e:50:d0:ec:0c:99:49:85:17:3c:f6:15:
43:77:ed:11:f2:c0:27:9e:42:63:2f:76:73:e1:d0:
53:bc:03:d6:42:79:49:a7:25:94:cf:27:3c:39:d3:
63:5a:62:ba:7a:e8:69:f5:62:64:14:56:32:b0:19:
e6:64:3d:b3:40:8c:ed:26:1e:82:bb:b1:c6:b2:50:
fb:30:78:3d:fa:5e:25:5e:98:dc:2a:46:f3:58:68:
b7:31:87:e8:eb:7c:27:fc:f1:5b:44:b8:f5:96:ba:
3b:f8:ae:50:ef:91:25:19:19:4d:c5:49:c5:9f:66:
f4:dc:32:b2:d5:5e:6b:7b:d7:20:40:8c:db:30:76:
99:be:8d:66:70:c3:71:f8:db:ba:ae:db:52:42:ec:
33:d2:11:b3:f7:ff:35:19:c0:a9:fd:a5:e4:ab:48:
62:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:36:7C:C1:AD:9E:6F:11:E7:63:DC:A3:AD:28:55:68:7E:C2:51:9F
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ff:fe:0f:a3:3f:65:f6:36:90:a9:95:87:49:d5:40:d6:04:
8c:40:2b:5f:25:8f:ea:6c:ca:ff:d5:c7:9c:b3:44:b0:ab:41:
b7:31:36:26:df:6a:07:45:58:40:76:6b:35:e4:20:f8:0d:b2:
31:ef:bf:a9:a1:52:16:f1:fb:7d:fc:2a:03:f2:16:a7:ec:e5:
35:05:8c:2a:46:37:c7:f9:d9:78:ec:ed:7b:c4:5c:dc:28:61:
59:ad:e0:a0:8b:1f:de:4a:c9:a0:cb:09:2b:77:75:23:de:95:
fe:2f:98:b9:ec:f4:5b:20:12:9f:c6:8d:4c:12:bc:d8:c5:c3:
ef:c6:55:7e:d2:bb:3f:13:ce:13:e6:be:18:65:4e:ed:6d:ed:
a8:27:53:86:8e:7d:84:52:4d:2e:35:ea:e1:4f:8c:68:82:98:
3a:ad:68:a4:00:06:b0:32:b3:a4:d4:84:8c:7f:de:d7:24:e8:
67:89:b0:02:5f:42:49:42:b4:e0:69:08:f0:5f:be:2e:7c:65:
b3:62:05:64:00:19:a1:4a:82:48:23:7c:4e:d1:21:7e:82:a0:
81:5b:0d:af:58:ef:31:70:2f:9f:5e:d1:a3:4f:b6:30:43:1c:
28:b9:fd:ff:58:fc:90:44:e5:db:72:fa:f5:61:0a:2e:91:90:
e8:3a:c1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:04:12 2026 by rpki-client