Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json)
Hash identifier: pWUcpF0Z/Xu5IuOxSTPOGEH1CAmpRqllO0nAjxHkIjU=
Subject key identifier: 3D:B7:E5:47:53:E8:A8:2D:A0:59:37:05:4E:A0:3D:2B:C0:DF:57:32
Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Certificate serial: 019EC0DBBC1C19D0DA03D673A66C7B060677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
Manifest number: 1546
Signing time: Sat 13 Jun 2026 12:01:26 +0000
Manifest this update: Sat 13 Jun 2026 12:01:26 +0000
Manifest next update: Sun 14 Jun 2026 12:01:26 +0000
Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: w5FRMrNrBgaNYDwLCnamEMR9OcbkI5TaYRoMiIM3nrc=)
2: YlUOJaq43NpuLvhyIjdUpjtIh5k.roa (hash: CQMT/ddbiL7hLzG2QkDs7berkHQrguNEVB/e2zlXUlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:bc:1c:19:d0:da:03:d6:73:a6:6c:7b:06:06:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a
Validity
Not Before: Jun 13 12:01:26 2026 GMT
Not After : Jun 14 12:01:26 2026 GMT
Subject: CN=3db7e54753e8a82da05937054ea03d2bc0df5732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:30:8e:be:b1:e2:9e:00:93:a7:bb:8d:3e:
7e:61:7c:2e:bf:81:f2:1c:54:9f:70:60:95:87:f1:
0f:4d:47:d9:0f:c7:13:af:88:94:a8:39:f5:d4:e3:
7a:cc:5e:59:3f:ce:b0:b3:24:03:86:51:d5:84:1c:
37:04:bd:ed:75:28:a6:43:1a:43:1c:6e:56:e8:f1:
f6:b8:c9:b4:f9:06:64:f4:9e:e1:a3:98:2f:97:83:
1c:5e:87:52:84:23:31:0b:fd:df:43:d5:68:c7:8a:
ab:de:c4:bd:da:d0:a8:9c:11:22:b8:81:e0:20:48:
a8:b8:64:a8:4e:b3:ea:0b:2c:c0:a1:ab:84:7a:6c:
e6:d2:f0:f3:8a:14:9a:cd:83:87:c3:ea:d1:04:4e:
0a:f8:4d:e3:38:11:89:bb:7f:70:2e:cd:34:b2:ac:
a3:b2:51:24:12:c8:a6:54:ae:82:6c:31:1d:e1:a1:
f7:81:01:2a:af:c6:4f:74:ea:49:8d:ab:1e:63:ee:
d6:3f:7e:58:d1:dd:b8:e5:a6:62:27:b7:5e:7d:d1:
cf:6b:52:b5:6e:e6:64:36:02:f9:16:15:5a:1e:89:
1a:d3:9c:54:f0:b6:8d:2c:bb:ed:56:ae:c3:8e:cd:
d1:a7:a7:c2:d1:6d:3c:11:3e:4d:99:d2:8a:de:5e:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B7:E5:47:53:E8:A8:2D:A0:59:37:05:4E:A0:3D:2B:C0:DF:57:32
X509v3 Authority Key Identifier:
keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0e:b2:fa:72:6e:c8:ec:b4:aa:80:bd:7d:a4:f6:75:08:12:
4a:e2:b3:22:cf:51:3a:5d:c1:f0:cd:c9:c3:ce:a3:28:a1:3f:
8d:17:78:b6:48:45:15:74:89:0d:17:ef:81:cd:a7:9c:64:32:
df:80:e5:fb:75:ac:49:56:c8:c1:cb:5a:2a:4c:56:11:9d:ae:
b2:84:35:d7:06:72:90:ae:b4:54:6e:b8:99:15:78:3f:dc:45:
53:7b:11:4e:f9:9f:c8:a1:0f:0b:ee:bd:d9:4b:fd:9a:ba:58:
bc:bf:47:51:c2:d6:36:7b:d1:d7:3f:75:42:77:de:28:68:a0:
d8:ab:58:1d:0f:d7:84:2e:63:7c:ba:64:18:7d:e5:21:1d:34:
79:ff:70:e8:af:c6:d7:f1:08:8c:f9:97:30:18:b2:71:a4:f5:
20:53:21:15:0b:2f:b2:8a:b4:7e:9b:08:5f:ec:2a:75:f5:cb:
f1:bb:10:a1:ff:5d:1d:23:b0:54:c4:39:b6:12:3d:5b:33:86:
fb:5f:66:e0:5a:26:1d:cc:8d:7a:59:8b:6e:49:cd:5b:3f:d8:
f5:13:eb:6b:21:92:c8:5e:2d:24:c6:a5:8e:e5:ca:77:ce:f0:
6e:48:01:cd:b5:0c:32:4a:ca:5d:3b:de:24:fa:f2:1d:a9:47:
e9:a9:c2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:37:20 2026 by rpki-client