
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
File: 0x1LlB4GS0a8Ka9kW8dUcE06lME.mft (raw, json)
Hash identifier: dq2Y7J4jnbiKBNFlHN3NnUSTTgncA0jlfMhrT7hAXo4=
Subject key identifier: F9:B0:6F:53:29:05:A8:C7:FD:43:7F:6E:EB:26:C4:AE:A1:8E:29:30
Authority key identifier: D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
Certificate issuer: /CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Certificate serial: 019EBDA2CE5B3D88AA093DAC4ED92964A577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
Manifest number: 090F
Signing time: Fri 12 Jun 2026 21:00:23 +0000
Manifest this update: Fri 12 Jun 2026 21:00:23 +0000
Manifest next update: Sat 13 Jun 2026 21:00:23 +0000
Files and hashes: 1: 0x1LlB4GS0a8Ka9kW8dUcE06lME.crl (hash: wOoCS2UBn3eSJtZQTQs17k8xmFg+Bd5+Y2rNAtIGdbU=)
2: yNpYoRN2Jui6WiJYc8qJGmLQ8ZM.roa (hash: N3NkPMi2wZ62GAfD3+jtEuabxW8VmrmktMjIWdHv/jo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:a2:ce:5b:3d:88:aa:09:3d:ac:4e:d9:29:64:a5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31d4b941e064b46bc29af645bc754704d3a94c1
Validity
Not Before: Jun 12 21:00:23 2026 GMT
Not After : Jun 13 21:00:23 2026 GMT
Subject: CN=f9b06f532905a8c7fd437f6eeb26c4aea18e2930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:8f:1a:60:21:74:a4:37:0a:01:d6:0d:0d:
4f:8b:2f:5b:6c:6b:d2:9c:9d:e1:58:6c:51:cc:25:
dc:92:93:6c:19:36:c7:30:2f:77:6f:10:3c:a2:d6:
1e:f5:7f:d5:7e:e8:51:ae:cd:ce:4a:3d:a3:ce:ac:
68:b7:ab:a0:2c:99:fd:87:45:87:aa:46:68:00:11:
bf:63:37:a3:95:e2:8c:96:00:d3:e4:af:bc:5f:09:
f8:05:60:1c:4a:19:c5:28:e8:36:59:1b:77:c2:46:
67:08:25:15:4c:2b:47:a7:73:64:77:9e:ac:7b:8c:
8f:41:99:70:ef:e8:5f:ee:ad:dd:08:3e:6d:94:4b:
c0:fa:56:6e:4b:10:f1:ab:79:ea:6b:9f:26:36:02:
f3:f0:75:35:ee:8f:f3:16:eb:ea:47:b1:fa:bb:38:
74:bc:a4:2e:d5:37:d1:98:6c:f7:a5:75:9f:a3:f1:
9a:26:89:02:50:91:2a:76:6f:ed:5e:fc:a5:b4:98:
3e:37:08:ab:e7:b9:b7:a5:54:02:2e:a2:f7:e6:32:
9d:21:04:2a:eb:e3:b4:0d:76:86:dd:be:24:82:c3:
11:77:13:b4:cc:e2:8f:ac:e2:d9:73:63:a9:2b:fa:
02:10:70:91:2e:d8:37:79:e5:7e:09:be:68:ce:02:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B0:6F:53:29:05:A8:C7:FD:43:7F:6E:EB:26:C4:AE:A1:8E:29:30
X509v3 Authority Key Identifier:
keyid:D3:1D:4B:94:1E:06:4B:46:BC:29:AF:64:5B:C7:54:70:4D:3A:94:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x1LlB4GS0a8Ka9kW8dUcE06lME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/333113-a891-4d92-b669-705449bdeeb6/1/0x1LlB4GS0a8Ka9kW8dUcE06lME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b9:19:07:7e:21:de:b2:8d:23:4e:7b:18:5c:f1:9d:94:79:
28:83:e4:59:aa:51:b5:9e:43:f2:fe:f0:99:eb:35:04:2a:8a:
d5:26:0a:b8:37:2c:d1:6c:82:da:f9:f6:9b:e2:bf:36:ed:ad:
39:85:95:7f:d1:92:27:fc:e3:23:23:43:7a:8f:c8:5c:80:69:
7b:d7:fa:10:f6:4c:9e:6a:5d:52:ff:ac:3c:88:ad:d2:f8:46:
76:97:9e:fb:26:dd:7f:e2:df:ad:a3:03:77:9e:f2:86:76:9f:
67:c4:46:de:b4:5f:fb:31:97:b1:cc:9e:5a:f7:44:cf:e5:b0:
ed:a1:b0:69:42:2c:4d:eb:7c:e8:97:42:51:c0:5b:91:21:3b:
05:0f:65:42:2c:94:e8:05:98:8c:df:a6:cc:13:4c:82:e1:bc:
8e:f7:60:42:e9:bf:70:b0:6d:fb:3b:7a:51:a3:d9:60:cd:3a:
26:1b:53:d4:ef:a7:b6:fb:37:71:e8:be:3a:78:05:00:0b:1b:
13:57:47:03:88:99:4e:59:a2:88:16:ed:eb:dd:cf:de:75:5c:
2a:80:9c:f3:69:29:ca:5f:79:fe:c0:c1:d4:2e:64:64:48:76:
58:8d:29:53:03:29:43:ad:3b:68:8a:c7:a1:89:f2:fe:2b:90:
dd:8a:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:57:37 2026 by rpki-client