Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
File: 9XIyXS0hl0ZpxIj566pru5LNX-0.mft (raw, json)
Hash identifier: yOewgmEW+qk9QcHNhjxpxCfhwaTGdQ0G8b0XMNygEBI=
Subject key identifier: 75:E8:09:6C:28:41:BB:26:3B:93:CD:B5:41:B7:69:DF:98:EE:15:D6
Authority key identifier: F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
Certificate issuer: /CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Certificate serial: 019EC1490631E47331324B53D2D906D46CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 14:00:48 +0000
Manifest this update: Sat 13 Jun 2026 14:00:48 +0000
Manifest next update: Sun 14 Jun 2026 14:00:48 +0000
Files and hashes: 1: 9XIyXS0hl0ZpxIj566pru5LNX-0.crl (hash: hQTC5IbA21z8hMfVCV6eR/kaypC44H+lY4lab7Sh/Vo=)
2: mGKvGN6mzAi9Xi9OgEnQnIpovsQ.roa (hash: AZAga0gvOyoyk29F5YS9oe0dyqX933PqnZoBR7aFkQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:06:31:e4:73:31:32:4b:53:d2:d9:06:d4:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f572325d2d21974669c488f9ebaa6bbb92cd5fed
Validity
Not Before: Jun 13 14:00:48 2026 GMT
Not After : Jun 14 14:00:48 2026 GMT
Subject: CN=75e8096c2841bb263b93cdb541b769df98ee15d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:61:4e:27:68:6c:06:55:81:70:4a:d2:a4:ff:
60:ba:94:dc:46:ab:88:a9:60:c9:db:e2:77:1f:fa:
26:da:56:b1:97:69:64:bb:d9:25:3b:7e:5e:31:8d:
99:54:43:1b:34:60:05:39:8e:5e:00:ab:1e:de:d3:
17:61:83:5a:bd:c8:ec:3b:a7:22:49:ef:ab:1f:3b:
99:b8:dc:ac:f5:4e:3b:bf:59:fc:fa:bf:ee:a0:1c:
2b:f9:3f:77:53:1e:4f:d3:99:3f:4d:fb:b3:15:aa:
07:72:15:2f:a8:87:e7:94:d2:39:98:c6:9a:63:d2:
e7:ad:ab:74:ce:2d:b5:d7:0f:0e:d2:6e:b9:04:f9:
e5:a9:63:6e:f5:04:76:42:30:59:19:a1:0e:63:d9:
33:45:fb:ec:ed:c1:31:e0:41:3f:ed:8a:1c:4f:f3:
88:47:b6:43:c8:11:3e:9d:e9:2a:6e:b6:d4:0e:b9:
cc:ca:50:06:27:48:2d:66:19:bc:38:d0:1d:37:f1:
0a:ed:6d:d1:e6:d3:2f:a2:8a:2c:b3:be:ee:fb:71:
e4:d1:53:33:13:dc:4f:a3:2e:74:0e:2a:75:4f:79:
15:15:a7:0b:9c:01:cf:0d:cb:e4:46:62:f8:30:c3:
fb:1a:87:7b:92:85:50:b2:87:c3:f6:89:d3:ba:54:
8a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E8:09:6C:28:41:BB:26:3B:93:CD:B5:41:B7:69:DF:98:EE:15:D6
X509v3 Authority Key Identifier:
keyid:F5:72:32:5D:2D:21:97:46:69:C4:88:F9:EB:AA:6B:BB:92:CD:5F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XIyXS0hl0ZpxIj566pru5LNX-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ac0385-2090-4704-8e01-3e62e9e78906/1/9XIyXS0hl0ZpxIj566pru5LNX-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:63:74:5d:76:a0:37:ff:98:3d:36:72:0f:a5:d0:40:a3:e8:
06:ec:5f:3d:92:ef:d5:c0:83:f7:9e:1b:03:2b:ff:f5:db:c4:
a9:28:86:74:bf:12:8c:75:20:87:c2:38:c2:fe:e9:c2:29:c6:
f7:df:9b:ab:5d:3a:f8:89:0a:9a:69:de:0f:bb:d1:74:de:73:
04:be:c8:10:aa:d5:9f:22:66:77:ed:a8:44:ce:8a:b9:85:54:
0a:9b:db:aa:42:ca:57:7e:96:20:03:1b:28:f7:a0:9d:77:72:
33:35:6f:53:08:f3:88:c3:28:27:55:63:93:6f:ab:0d:32:34:
11:f2:fc:c2:53:c1:5d:78:cb:49:80:81:56:60:a8:3b:5f:dc:
77:8d:fb:d1:bd:17:44:97:97:33:db:5e:67:0f:96:5d:8d:f8:
c5:a1:d6:30:2c:36:6d:ce:70:db:83:ef:bb:49:56:9e:0b:91:
c0:67:71:54:3d:ec:d0:11:67:c5:8a:20:9e:62:8f:07:8c:f2:
1e:d7:37:df:7b:85:65:f8:c0:f6:14:61:0d:7b:49:7e:d6:69:
6c:dd:12:2d:36:16:35:87:58:63:ef:9c:01:82:c8:cc:2d:5f:
b8:24:e0:4e:3a:4f:10:c2:e9:9a:2d:4a:98:09:53:ae:a5:9e:
60:30:86:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:12:40 2026 by rpki-client