Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
File: 9XpIEqFZ72qekpcudXKtZi1yIVo.mft (raw, json)
Hash identifier: kMzoRvsXrH9WQk+kNedXvTtZHrrqaphoPb5cfwikDFo=
Subject key identifier: 3A:71:98:15:AF:70:5B:4B:BB:92:2E:2D:AF:50:C6:DF:5D:C2:A6:5A
Authority key identifier: F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
Certificate issuer: /CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Certificate serial: 019EC224D4A22E323B0A4A5AC08AA599CF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
Manifest number: 124C
Signing time: Sat 13 Jun 2026 18:00:54 +0000
Manifest this update: Sat 13 Jun 2026 18:00:54 +0000
Manifest next update: Sun 14 Jun 2026 18:00:54 +0000
Files and hashes: 1: 9XpIEqFZ72qekpcudXKtZi1yIVo.crl (hash: yUBZDz4QofLYGQSsfHueoLG5i281LrELmwTnmRkP2/k=)
2: lKVJdRF0hE9bPtqV3XlzvhT3Iqs.roa (hash: GeIEq9ieMXhGCkHBVtks0M5q4Jm8CcNNhR3YdczhVxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:d4:a2:2e:32:3b:0a:4a:5a:c0:8a:a5:99:cf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57a4812a159ef6a9e92972e7572ad662d72215a
Validity
Not Before: Jun 13 18:00:54 2026 GMT
Not After : Jun 14 18:00:54 2026 GMT
Subject: CN=3a719815af705b4bbb922e2daf50c6df5dc2a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:6f:0e:d8:d5:7c:8a:f4:11:d3:56:58:3a:
26:30:77:45:1f:c6:1a:4b:88:11:5f:3c:13:e6:ea:
c5:70:e0:20:80:5d:82:4a:21:04:c8:60:19:99:e4:
dc:8c:9d:c7:35:c2:1a:c0:a2:29:30:d6:d6:a1:ba:
e2:bd:39:aa:e4:6e:7b:ec:9c:cc:2f:36:16:8f:89:
4f:fd:7e:6d:f4:10:6c:d0:a2:86:c2:52:93:33:2c:
16:9d:35:0c:00:b1:e0:ec:7e:3d:94:86:57:49:90:
8c:ce:a6:12:c5:36:52:b2:3f:b3:d4:3e:82:c9:4d:
cf:bc:cb:b1:3b:f5:bc:30:e1:3b:a7:af:b8:70:b9:
4b:eb:ab:57:a5:da:03:52:40:c1:cc:7f:85:c4:02:
2f:ca:b5:53:ca:bf:8d:e7:d0:3b:3b:4b:3f:15:41:
a6:be:e5:77:16:b5:e7:ee:85:85:cf:c2:81:b9:20:
a3:73:2d:16:a0:33:ce:36:dc:1d:19:0e:29:de:0f:
3f:36:ae:31:a9:dc:fc:5f:4c:0f:2c:c7:70:76:e1:
2c:b2:0b:e8:ac:57:9b:1e:98:90:89:41:12:35:2e:
62:b5:15:5c:f9:c3:2c:55:90:20:b7:be:db:d4:e8:
a2:48:e2:94:5b:09:bd:61:27:e6:2d:f4:f0:3f:3e:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:71:98:15:AF:70:5B:4B:BB:92:2E:2D:AF:50:C6:DF:5D:C2:A6:5A
X509v3 Authority Key Identifier:
keyid:F5:7A:48:12:A1:59:EF:6A:9E:92:97:2E:75:72:AD:66:2D:72:21:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XpIEqFZ72qekpcudXKtZi1yIVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4fbe10-9487-4115-9856-beb70fd415ca/1/9XpIEqFZ72qekpcudXKtZi1yIVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:b0:e6:20:5c:17:d9:1a:39:e0:07:e3:3f:11:a0:03:95:
e7:85:79:84:c8:2c:3f:78:1d:2c:3b:0c:05:e4:fe:ca:b2:32:
4a:96:3d:b8:46:5b:75:77:c0:c7:5b:19:18:51:d6:04:2a:0e:
57:84:3f:44:1e:87:f8:c1:d3:b3:e3:61:ea:8c:64:34:7a:5c:
07:fe:8d:62:2c:ba:fe:22:e5:11:99:fc:ca:ad:4b:2f:f6:bb:
1a:21:0f:ce:c3:e3:19:e4:47:97:c7:b7:b5:c8:e2:26:b0:93:
21:56:33:9a:ff:33:21:ed:10:f4:e9:12:94:57:58:49:f0:67:
ed:68:1e:f7:12:b6:1b:44:d0:bf:76:fd:7a:92:35:5f:de:d6:
3c:c7:e8:95:fa:da:76:93:d4:db:1c:86:54:ab:c3:11:89:47:
5e:fd:5d:43:5d:54:5c:e6:47:cf:35:07:2b:3d:4c:23:1e:82:
cb:3b:31:2a:95:07:5e:86:e9:cb:ec:b7:27:20:15:89:36:c9:
54:08:f4:fd:7e:96:dd:29:8d:07:d9:b4:15:e6:83:2b:15:39:
96:77:d4:d4:33:1f:d3:42:3c:d4:95:9a:34:4a:22:14:69:97:
d4:46:b4:ac:08:fe:f5:6e:a0:3c:b9:5f:df:cf:c7:93:fc:e7:
34:58:0f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:59:41 2026 by rpki-client