Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
File: ifnCFo0tgt39inBjfUQBivMLH5c.mft (raw, json)
Hash identifier: 1+smXvkOMxjubA5cAmth0VbT2Qz3X2x9/s0SJXuq9ek=
Subject key identifier: 9E:3C:11:21:A2:0D:4B:D2:36:49:37:6F:AC:09:41:D6:14:BA:E8:3A
Authority key identifier: 89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
Certificate issuer: /CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Certificate serial: 019EC3009EA10CF02DEDA9E83D2F3CA352AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
Manifest number: 0494
Signing time: Sat 13 Jun 2026 22:00:58 +0000
Manifest this update: Sat 13 Jun 2026 22:00:58 +0000
Manifest next update: Sun 14 Jun 2026 22:00:58 +0000
Files and hashes: 1: gBJFcoYbkBHMY5TM8IY4zHwd7l8.roa (hash: N41NaFkXMzlFGahMYjKRbrB7l7KmQbIsQ/36YmVvgpQ=)
2: ifnCFo0tgt39inBjfUQBivMLH5c.crl (hash: mefM5QRxuxJS7keoDtZB6AFWz+4YgguV+BM13FjDKTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:9e:a1:0c:f0:2d:ed:a9:e8:3d:2f:3c:a3:52:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89f9c2168d2d82ddfd8a70637d44018af30b1f97
Validity
Not Before: Jun 13 22:00:58 2026 GMT
Not After : Jun 14 22:00:58 2026 GMT
Subject: CN=9e3c1121a20d4bd23649376fac0941d614bae83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f9:2a:df:ab:65:1a:2e:47:05:51:34:5a:cd:
39:8e:02:9a:e1:af:e9:15:c2:37:84:d8:22:87:2d:
54:79:13:3e:24:16:84:4e:1e:0b:36:d1:f1:cd:88:
22:35:2e:6a:b1:73:7f:ab:8e:c7:79:03:38:75:f2:
49:05:da:9a:17:e4:08:31:50:8e:c9:83:23:68:9f:
ac:34:0d:32:03:03:9f:f7:31:da:c2:70:b9:88:9c:
23:dc:d4:a8:75:a3:87:fb:ed:73:78:6c:93:38:04:
4e:88:b4:55:09:09:7c:7c:c3:c7:06:71:e2:a3:06:
7d:f2:9b:c9:99:df:44:0a:d9:05:29:10:35:b7:1f:
a4:9e:3b:b8:be:f7:60:ec:e8:dc:b4:39:ea:86:ac:
98:04:59:f5:a1:69:b3:70:a6:98:ad:e0:9e:ef:71:
73:15:6f:78:ce:e7:01:22:69:00:95:bc:38:2b:b2:
94:78:23:d6:e2:c7:e1:4e:46:c1:bd:81:bf:96:29:
f1:00:40:a5:d2:c2:c3:3a:d9:fa:28:e4:cb:a2:2b:
f3:68:ad:36:ab:28:50:b6:0b:d6:74:69:31:68:64:
51:8f:b4:9d:51:4b:99:85:2c:13:c9:d8:30:19:8f:
de:58:55:a7:a6:49:c8:70:91:00:63:fe:d6:f0:ca:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:11:21:A2:0D:4B:D2:36:49:37:6F:AC:09:41:D6:14:BA:E8:3A
X509v3 Authority Key Identifier:
keyid:89:F9:C2:16:8D:2D:82:DD:FD:8A:70:63:7D:44:01:8A:F3:0B:1F:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifnCFo0tgt39inBjfUQBivMLH5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e1ea9b-d529-48ba-8ba2-bacae030e374/1/ifnCFo0tgt39inBjfUQBivMLH5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:93:56:ff:f4:66:cc:06:28:e1:b5:45:46:3d:71:5e:2d:f1:
a9:65:c3:a4:f4:b7:18:e9:9a:a0:24:02:e3:16:96:c6:e5:4d:
23:a1:ef:70:6f:60:9d:97:dc:e8:d2:b2:66:8d:3a:60:0e:95:
a1:18:64:57:d5:dc:31:3d:95:b3:0a:32:f7:6a:2b:71:09:8b:
e9:46:89:d3:6d:f0:1d:1c:38:ed:2e:25:e3:70:68:b6:bd:9c:
b5:32:a6:08:cd:f7:e7:33:60:14:fc:71:eb:56:72:57:74:fd:
80:42:97:c8:a6:01:e5:44:59:60:b9:d7:d7:0b:4b:34:63:9e:
2b:57:20:6e:56:44:49:2e:a1:2e:c3:8f:48:39:a5:b4:bb:16:
93:42:77:f0:ed:29:02:5c:a0:41:11:58:e8:f9:65:2f:4a:4b:
e9:3b:e1:58:f2:0f:53:3c:a3:50:98:f2:06:d0:9b:5f:64:40:
87:fa:51:02:1a:ac:01:7e:dd:93:39:45:02:d5:5f:97:db:ec:
8c:35:39:9c:07:6c:c2:85:83:4b:1d:6e:30:dd:4c:6e:b6:ba:
96:dc:44:96:66:dd:15:41:f6:c4:86:0d:24:fc:a6:e7:42:d2:
04:ea:af:6b:ae:a8:23:a2:31:bd:7e:91:66:9f:91:70:e3:a6:
e6:dc:8b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:08:58 2026 by rpki-client