Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json)
Hash identifier: XUXJ1BqfUw0Xz2pGirltrEUMSiX2IQ3JSC7P0n1XPv8=
Subject key identifier: 3B:8F:3F:36:77:F3:C9:E9:F3:EB:61:50:D3:FB:BD:07:07:A2:BF:61
Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Certificate serial: 019EC0DB6DD00540C5E137EC32412BABD654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
Manifest number: 02C2
Signing time: Sat 13 Jun 2026 12:01:06 +0000
Manifest this update: Sat 13 Jun 2026 12:01:06 +0000
Manifest next update: Sun 14 Jun 2026 12:01:06 +0000
Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: g9knoFG+iJGYPHB1RH9lW8ioEhA1Ta7bt4cA+zED9eA=)
2: BzRL5dLKwivSlyjmJMancnc4uqU.roa (hash: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I=)
3: PjTeJzbTRv2RxHKdetjA5AhU64o.roa (hash: 5sG8ZewUK8wMTwzvBdT3o63ELvX++X0paAzfcLtiipw=)
4: YZnN_D9K8I6oAKeftWU-F1SrfFA.roa (hash: M+Z8dP+XL6StWORqHxpKktlWJDS4C7Ey8tzneAbTFjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:6d:d0:05:40:c5:e1:37:ec:32:41:2b:ab:d6:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581
Validity
Not Before: Jun 13 12:01:06 2026 GMT
Not After : Jun 14 12:01:06 2026 GMT
Subject: CN=3b8f3f3677f3c9e9f3eb6150d3fbbd0707a2bf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:10:2c:6d:78:55:6c:3a:11:fd:d5:ab:bd:
20:cd:2a:5a:b9:c2:b3:e0:2e:91:1c:cf:2a:eb:c0:
47:93:d1:68:8d:37:57:0a:da:a6:3b:d6:5f:9b:27:
3f:1f:1e:bb:0a:99:ad:d6:06:dd:52:65:84:7c:a4:
8e:55:d4:34:2c:5a:8d:3d:8f:69:cc:a4:5f:02:2b:
0e:a3:4a:21:95:05:df:ab:12:a1:f7:42:b2:42:e2:
00:71:fa:f7:26:1c:08:6b:ca:e1:c1:d1:4e:35:ed:
3d:1e:b7:c9:c0:fe:b1:a0:7e:c5:13:dd:ac:e4:e3:
4f:a3:4c:39:ad:3f:45:23:68:b9:68:22:ff:ef:b4:
67:7e:20:d8:08:11:07:8e:90:fe:5e:07:3c:c0:cc:
6d:d8:46:2f:ca:9f:13:09:2b:52:4f:24:ee:3e:7a:
4a:d2:36:b7:0a:84:be:10:10:4c:e5:0e:2a:66:d0:
98:31:e2:2e:0c:98:d8:14:ed:04:f4:43:81:1c:53:
ee:ad:d4:1a:7d:4e:89:25:55:93:fd:45:a1:c0:94:
b7:09:a3:98:b2:d4:38:3c:a1:b6:81:b1:3a:1e:ca:
72:25:db:74:7b:37:ee:95:96:21:6a:77:b0:61:3c:
5a:cb:32:51:f8:f2:24:fa:09:ff:07:85:ec:7f:19:
58:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:3F:36:77:F3:C9:E9:F3:EB:61:50:D3:FB:BD:07:07:A2:BF:61
X509v3 Authority Key Identifier:
keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:d0:db:c5:19:ce:08:fa:0d:70:47:ba:39:87:25:41:8c:43:
20:72:7d:df:b1:fb:a0:85:cf:3d:04:99:ad:8e:e7:b6:38:ec:
af:d6:f9:a1:b2:71:54:14:1e:fd:4e:63:37:e6:8b:9e:54:26:
94:62:a4:dc:79:cd:64:16:7b:9d:91:a0:49:a1:3e:4a:8b:a4:
08:8c:bb:76:17:af:14:bf:21:29:4b:4e:82:f2:3c:29:67:61:
73:c2:3c:04:91:98:d8:00:cb:55:92:f2:d7:9a:12:cd:45:dd:
63:b7:a4:01:88:a6:8f:bd:a0:e7:cc:79:29:44:9c:af:37:cf:
2a:b5:cd:27:80:ee:a8:bd:9d:d2:84:6b:33:7a:3a:cf:61:11:
e4:13:45:18:86:88:15:8b:aa:5a:f9:69:dc:e9:fd:eb:f8:7c:
90:f7:12:f8:e2:9c:1f:75:07:9a:d2:48:86:c6:19:29:77:ca:
af:e1:8d:56:85:55:f4:27:bb:98:3a:84:1d:58:40:16:84:d4:
3b:fd:d0:2e:6f:dd:36:24:52:a8:d7:12:dc:72:b9:51:5a:22:
11:e0:ce:65:90:d8:5b:3a:1e:24:58:a9:64:24:a4:5b:a0:e3:
0d:be:7d:96:81:cb:c3:4d:6e:c3:04:9e:16:f1:bb:fe:26:bb:
e2:1d:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:53:46 2026 by rpki-client