Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json)
Hash identifier: Lyzq5rodUtyIGAlXVxAxcL6ple2dI4jUn5t4mNzhmP4=
Subject key identifier: BE:5B:D2:FD:61:1F:71:3F:0D:A6:FB:66:47:27:D5:CE:14:63:6D:92
Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Certificate serial: 019EC14964D506693E9903A6A546586EA795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
Manifest number: 18EB
Signing time: Sat 13 Jun 2026 14:01:13 +0000
Manifest this update: Sat 13 Jun 2026 14:01:13 +0000
Manifest next update: Sun 14 Jun 2026 14:01:13 +0000
Files and hashes: 1: 7kGNbroThpMnN96LqRGM-Y-5t9Y.roa (hash: lxPWqX0/OpM/p7/y+8GA/oyT71oB2fzc6nqiYIWie7o=)
2: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: OhXbagTg3qZhM066pLDiWW1M7vglC2T6qCby/Uu+7UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:64:d5:06:69:3e:99:03:a6:a5:46:58:6e:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a
Validity
Not Before: Jun 13 14:01:13 2026 GMT
Not After : Jun 14 14:01:13 2026 GMT
Subject: CN=be5bd2fd611f713f0da6fb664727d5ce14636d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:38:97:e6:7a:9f:81:1f:59:f6:aa:1e:cb:
c1:02:0a:3b:e5:1f:4b:27:9e:6c:a6:34:24:18:54:
f2:56:a0:7a:c3:2b:58:d8:08:0f:31:d4:cc:e2:82:
2e:67:fe:ef:05:bc:41:3f:8f:6e:93:2d:b6:38:e3:
4f:22:05:b8:a7:16:22:57:7b:2b:ce:e6:55:a5:63:
73:4d:44:33:5b:89:ad:fb:14:88:f9:fa:8a:e9:a5:
fa:ff:83:33:35:68:3f:f9:3e:67:91:40:24:b7:c4:
4b:41:f0:23:21:af:0a:b3:9c:71:fb:e8:b1:5b:bb:
df:17:bc:cd:79:a9:59:3d:f2:74:24:3d:f4:37:52:
a8:e2:d3:cd:2e:58:cd:f7:b7:c2:64:fe:c0:04:5f:
6c:b5:cb:95:80:47:0c:75:ea:c3:cb:10:ea:e0:68:
d9:c0:0c:69:7d:4a:59:12:6e:1f:ea:33:75:1d:f4:
d8:c9:70:3a:05:c0:8e:ab:92:4a:f0:31:63:8e:48:
85:90:29:42:8d:1c:fa:67:5c:e2:98:88:f2:6d:64:
0d:69:2f:32:e8:30:6e:a9:ac:32:6e:81:f7:a2:82:
26:ff:33:e4:b5:a9:23:a0:98:c4:7c:cb:c6:99:41:
be:e6:c0:52:ac:72:c5:15:a2:80:46:cd:64:f2:99:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5B:D2:FD:61:1F:71:3F:0D:A6:FB:66:47:27:D5:CE:14:63:6D:92
X509v3 Authority Key Identifier:
keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:02:6c:ef:14:fd:c4:ae:be:9e:ff:60:f0:29:80:f9:eb:12:
e0:3c:70:5a:88:ff:1f:fa:24:e8:b0:7b:b0:52:8f:01:63:6b:
1a:f2:6e:3e:b1:db:d4:7e:84:c9:5a:54:22:1d:52:6c:0e:ac:
7f:1a:8e:64:b9:1a:0b:5b:f7:f3:24:95:b9:1d:bd:a4:20:23:
9d:b1:d6:d3:43:18:48:60:9d:86:71:4f:89:52:28:8b:da:e6:
d9:7a:45:a9:8c:67:44:e5:2b:2f:26:c6:20:4b:66:c6:94:be:
81:66:de:19:d9:6c:e1:02:36:7f:f8:f0:d9:dd:41:94:1f:27:
3a:9d:b3:7d:52:c6:7a:e7:7c:21:b7:95:ec:ba:cd:4a:4a:9b:
a6:00:36:b6:15:e3:54:3e:b0:d7:03:24:18:0c:1b:08:da:93:
9b:ef:d8:80:b4:f7:06:a2:96:24:1b:f6:48:cb:c9:9a:e4:f1:
f2:76:3e:03:6b:2e:4b:4d:14:ae:28:c4:86:26:5a:eb:3c:6b:
1f:18:c7:f2:da:ac:1e:97:46:79:40:7c:db:c5:c6:85:c6:0e:
54:6b:2e:e7:78:ff:1f:d0:17:27:48:30:90:fc:0e:20:77:9c:
fd:a7:6c:55:f5:31:64:c7:f3:53:c4:e1:d4:ed:18:87:5f:f6:
f1:8a:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:02:14 2026 by rpki-client