Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json)
Hash identifier: SYwzEn4QbPvxKPugDiTlmswGhvizaL0sSp4WyMYn57Q=
Subject key identifier: 22:4D:96:0B:BF:A3:BD:E1:EA:9D:88:5D:D0:73:B9:AC:A6:05:20:10
Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Certificate serial: 019EBE47E67EEDD3E05051752C70D8AA4C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
Manifest number: 09C0
Signing time: Sat 13 Jun 2026 00:00:43 +0000
Manifest this update: Sat 13 Jun 2026 00:00:43 +0000
Manifest next update: Sun 14 Jun 2026 00:00:43 +0000
Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: A6B3WB5YOTKg+vZ0Awebm+75Xhh0CSacvW/MZDquRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:e6:7e:ed:d3:e0:50:51:75:2c:70:d8:aa:4c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c
Validity
Not Before: Jun 13 00:00:43 2026 GMT
Not After : Jun 14 00:00:43 2026 GMT
Subject: CN=224d960bbfa3bde1ea9d885dd073b9aca6052010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:28:a8:6c:8c:d9:03:bd:ff:5d:e7:66:94:
d0:d4:2d:fa:0e:90:02:38:c8:90:c9:9b:94:e6:ca:
c7:94:dd:6b:b8:64:64:c2:34:76:5f:ed:a0:dc:9d:
e3:f2:5e:8e:b1:23:a9:f1:8e:f2:98:5e:9f:b0:29:
c8:d9:03:46:70:b7:8f:d3:5f:95:5e:10:b0:d9:7f:
2b:7c:cd:c7:4c:2e:91:aa:93:ad:ac:ab:bf:08:48:
ef:b9:e0:52:68:4e:7f:7a:c5:ae:4d:b4:44:39:0a:
7f:70:31:53:4e:22:a8:d4:0e:97:ed:38:48:8a:4e:
2a:14:98:a0:18:2e:68:b1:89:bf:c6:7c:98:72:3a:
db:e1:36:84:9d:b9:bc:cc:84:cd:82:c1:b1:d9:d6:
f6:1c:38:71:98:c2:53:47:81:0a:97:9f:9f:ac:e9:
78:84:a5:a9:44:e5:6e:ef:a1:b3:01:5d:05:f4:4a:
52:d3:a3:0e:77:f0:8f:58:a3:88:b1:3e:10:b4:f3:
f8:62:12:2d:e4:1c:db:d1:89:50:e4:ea:07:92:0b:
d8:a9:11:a4:27:43:e2:4e:e6:39:f7:03:00:3f:33:
26:35:c1:34:3c:34:1e:6c:50:be:68:ab:71:d9:68:
6e:83:20:fd:a8:03:6a:a6:5c:76:d6:a1:e8:9f:25:
6c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4D:96:0B:BF:A3:BD:E1:EA:9D:88:5D:D0:73:B9:AC:A6:05:20:10
X509v3 Authority Key Identifier:
keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:63:45:68:32:63:53:5c:5d:70:cc:48:83:83:ac:81:6b:8c:
89:be:c1:cb:78:bf:cb:08:74:ac:d4:74:5c:ee:5d:7a:44:db:
79:5d:c4:5f:1f:94:27:ed:e3:b7:bd:bd:7b:33:c3:93:ad:50:
b6:fc:b1:25:9e:f5:87:a1:0b:a1:72:0d:14:e3:d3:4a:36:fe:
fa:45:a1:ee:20:af:5c:70:8d:8d:53:b6:1a:8e:ac:b2:ea:f2:
d2:bf:e3:d1:02:eb:fa:7a:a5:11:1d:2d:7f:4c:7a:85:e7:4d:
cb:1c:25:24:e6:70:fe:cc:20:0e:99:ec:c0:e2:4b:74:c1:7e:
f3:2e:ba:a7:4f:72:95:89:5b:3e:03:0c:33:8a:99:09:4a:81:
df:b1:cf:bf:5a:c1:a5:f4:3b:49:e1:9f:c8:d8:f5:7e:76:2e:
2a:2c:f8:c3:a2:ba:c9:fe:3f:10:c3:77:10:80:2b:0e:9c:ec:
b2:9a:64:bf:71:48:72:16:d6:69:7d:46:2b:c5:0e:a1:35:69:
0b:68:4b:0d:b3:45:98:aa:19:07:61:12:ba:b9:19:18:a9:be:
bc:06:3b:4d:25:6b:fa:fc:1d:5a:d3:1a:e1:d4:4a:3d:28:1e:
0c:85:82:00:4b:bc:83:9b:f8:ee:ea:5b:f7:35:3b:a7:b3:e8:
13:0c:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:19 2026 by rpki-client