Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json)
Hash identifier: AGX1hyqZi7yJN8jrKXyjRHqGG9/VM6gRbew+rlKFqe4=
Subject key identifier: FE:BB:85:C2:CB:2A:39:01:D2:94:2B:62:00:EC:27:DE:C6:76:14:7E
Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Certificate serial: 019EBEEC3F135D7375674598CC2BB198E34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
Manifest number: 0E8C
Signing time: Sat 13 Jun 2026 03:00:14 +0000
Manifest this update: Sat 13 Jun 2026 03:00:14 +0000
Manifest next update: Sun 14 Jun 2026 03:00:14 +0000
Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: z7oHWH9It8NckPyvOKPO4UHUKdTKyNMVMb1QkicdEnY=)
2: yCy_86dbJqoexnTrD2dlicXc2yE.roa (hash: JBNXmhezJRCIp5u3OP1UX59OO3DddhKcgHEEF7XBd38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:3f:13:5d:73:75:67:45:98:cc:2b:b1:98:e3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b
Validity
Not Before: Jun 13 03:00:14 2026 GMT
Not After : Jun 14 03:00:14 2026 GMT
Subject: CN=febb85c2cb2a3901d2942b6200ec27dec676147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:6f:10:df:e0:6d:2e:3d:f9:a4:23:cf:7e:
4b:c9:93:3a:86:71:19:9d:d9:d2:f2:2a:82:0a:59:
c8:ef:4c:a1:23:1d:ed:e6:d7:3e:35:33:0c:a3:07:
11:83:2a:8d:6e:27:c8:07:53:d9:bd:50:54:d1:07:
f0:01:e5:94:2a:35:21:e2:ef:31:e8:8f:eb:11:fd:
2a:d6:66:d6:c0:f9:1d:ca:1c:71:28:a2:3f:1c:df:
ad:8d:83:f2:a2:c1:38:66:20:cc:66:12:a2:19:9c:
09:17:90:5b:cb:9a:9c:17:74:58:cd:f5:d0:e9:90:
06:f5:3f:7c:0b:dc:7d:4f:05:0a:f5:8e:5f:67:dd:
1f:30:35:25:3d:4c:8c:fe:53:c6:13:d2:61:69:06:
08:ce:1b:f3:e4:af:d0:39:14:51:88:67:3a:8a:ab:
cc:f5:46:4e:6d:8c:5f:29:0f:a7:4d:dc:ac:c4:bb:
55:a0:d9:14:4e:8f:ad:1e:aa:3d:47:37:cc:b9:0b:
6f:9d:cf:43:2d:b2:97:d2:fc:f7:7f:0f:5c:1a:b2:
78:31:f8:ee:74:e1:11:af:04:72:29:fa:40:eb:53:
11:76:47:07:74:fe:9f:7a:9f:30:c9:e1:f6:02:2d:
0b:34:4a:1b:ef:5d:8c:bf:f8:37:66:da:77:33:b1:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BB:85:C2:CB:2A:39:01:D2:94:2B:62:00:EC:27:DE:C6:76:14:7E
X509v3 Authority Key Identifier:
keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:da:14:70:7e:20:94:08:2c:5f:4a:1d:60:b6:95:8b:04:1a:
51:96:04:d5:a5:5b:20:57:a5:4d:62:e6:09:15:b0:55:ba:93:
8e:13:13:f7:26:91:aa:92:cc:29:de:17:4f:52:97:79:21:f6:
95:19:80:ef:8e:24:86:5e:2b:f1:61:4c:7d:38:b1:18:a1:97:
d8:16:70:94:bc:1d:b1:e9:0b:95:6a:34:f1:c1:c8:eb:46:96:
3a:80:fa:df:20:b5:be:e4:ad:70:3e:b7:7b:62:09:5c:51:90:
65:c1:70:60:3c:e8:1e:92:5b:91:ed:ca:72:17:13:c7:72:b3:
e6:d4:19:41:e4:9b:2a:8e:52:26:c2:b2:9c:bd:03:6c:5e:7c:
94:5d:97:34:51:b8:ed:a0:73:70:c8:94:a7:89:7a:62:7f:72:
7c:77:b5:4f:f6:bd:bf:00:f6:64:15:4e:c8:c1:ed:30:19:44:
dc:5d:a5:0a:ea:19:a9:0d:03:8f:2f:8b:cc:7f:b4:f9:31:8d:
47:62:94:67:88:15:3d:2a:17:77:0e:5a:e3:3c:db:ca:0a:d6:
7a:36:73:cb:5c:94:79:23:8c:ff:cf:38:7d:94:4f:f5:3c:64:
fa:1e:30:a3:a6:ae:e8:79:02:a7:f4:d9:17:fa:31:44:d7:c4:
8b:79:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:43:29 2026 by rpki-client