
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json)
Hash identifier: 9c1Qf13x7ns4dQNrIhOMW0xJcbapYaRA4CvAdqCM0TI=
Subject key identifier: 42:7B:A9:F8:A1:DC:34:D8:6A:37:36:DA:3A:C7:7F:0C:B9:8B:98:4A
Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Certificate serial: 019EC06D6C7835E1BB551842F5A98E90B8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
Manifest number: 0C87
Signing time: Sat 13 Jun 2026 10:00:57 +0000
Manifest this update: Sat 13 Jun 2026 10:00:57 +0000
Manifest next update: Sun 14 Jun 2026 10:00:57 +0000
Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: LcR2P88yVVXioWulGPaj+5BxLhXZJy6QgVKgE7FW1wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:6c:78:35:e1:bb:55:18:42:f5:a9:8e:90:b8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550
Validity
Not Before: Jun 13 10:00:57 2026 GMT
Not After : Jun 14 10:00:57 2026 GMT
Subject: CN=427ba9f8a1dc34d86a3736da3ac77f0cb98b984a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:5c:a0:e1:da:e4:0a:a9:03:9d:d3:59:2b:
e8:d9:9c:e7:98:94:42:5f:bc:a6:11:2e:82:a0:95:
19:87:1a:97:34:e5:af:04:cc:e2:fb:86:d4:79:d2:
2f:20:6e:f8:13:a8:e7:29:95:16:66:bb:64:4c:54:
7d:28:8a:da:4c:c8:ae:ef:2b:12:bb:e7:e9:b0:bf:
fb:bc:77:7d:7b:f0:0d:85:45:e3:cb:33:f4:60:18:
8a:a1:db:a5:7b:ef:1b:9f:33:cb:f4:df:c6:e2:0a:
59:18:4f:5f:22:c9:57:fa:3e:4e:31:d6:eb:6a:05:
a2:c5:1e:d2:3c:a4:3c:98:53:d0:91:5c:87:29:c8:
41:d0:0a:a1:24:0e:e2:04:d0:93:2d:98:ea:a4:56:
c3:88:db:c3:65:3f:4d:b1:39:4b:f0:b1:12:41:38:
5b:5d:cd:f6:ff:ae:62:e5:13:75:c3:c2:ef:49:40:
fb:ce:82:2a:8f:43:bf:78:13:bd:08:14:a9:c7:95:
94:48:46:f1:ed:0c:9b:a3:66:73:2c:3e:0a:36:45:
d2:be:37:e5:9d:0a:5a:60:43:42:f5:f3:72:be:9a:
2a:1c:c7:bf:88:cc:78:3b:df:99:1c:d9:4f:fe:aa:
ae:5b:21:87:52:85:ff:d5:88:96:1a:6d:6d:20:ab:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:A9:F8:A1:DC:34:D8:6A:37:36:DA:3A:C7:7F:0C:B9:8B:98:4A
X509v3 Authority Key Identifier:
keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5e:7e:98:68:53:ff:33:9b:48:f3:28:e4:4c:94:77:1b:30:
08:df:5b:40:44:1f:0d:13:b7:40:4d:96:11:50:da:16:01:79:
98:16:0e:5f:13:11:2e:aa:16:95:e8:4b:8c:cb:ed:9d:a3:37:
e0:72:29:77:40:a0:59:f6:e7:da:44:52:cb:71:2f:0a:6d:a3:
10:2f:d7:5b:e7:cd:ce:8b:2f:57:d8:9e:74:13:2a:dd:5c:8a:
db:07:41:02:d7:f9:ff:eb:45:4e:e0:26:b1:80:03:89:1c:2f:
b5:71:80:c1:b0:b5:b8:ae:70:ae:f0:25:d9:4c:11:fe:2d:ba:
c1:b5:61:48:5d:f3:66:67:5c:20:90:06:7e:ca:c3:5a:cc:6f:
ab:ba:37:b5:21:5d:07:6c:0d:97:76:9c:d0:ea:e1:43:ae:8f:
b3:2d:a7:ff:4e:23:8d:90:05:69:1e:cf:b5:69:11:04:1d:d7:
56:3f:4d:65:63:4f:28:3e:97:98:1e:65:0f:0a:67:1e:93:f5:
b4:f7:8e:e4:af:06:85:e0:b3:ad:99:08:43:0e:26:d3:9f:62:
26:3b:0a:6c:91:49:77:28:cc:5a:45:34:84:5e:2c:5a:b2:65:
27:5f:97:20:aa:85:a7:8e:cb:16:df:74:e3:90:70:98:a1:2d:
94:1a:9b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:55:53 2026 by rpki-client