Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json)
Hash identifier: Ib20G+TNPtYxY6Lbi9bQJuOD+T1v0aLvJHWCjjTaolk=
Subject key identifier: 47:72:34:E5:17:7D:92:00:52:D0:FF:FC:47:E6:30:2A:10:68:F4:73
Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Certificate serial: 019EC0360DDF8B7895E9FA4216E5718FFB8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
Manifest number: 0295
Signing time: Sat 13 Jun 2026 09:00:28 +0000
Manifest this update: Sat 13 Jun 2026 09:00:28 +0000
Manifest next update: Sun 14 Jun 2026 09:00:28 +0000
Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: ffec7kolrRT0DOXyRL+1RMdnhoxDHM71lCooR3GbmTo=)
2: tbayT3vxpj9F6-hjVdEL1Ty6y0U.roa (hash: Ko/+YeSqgQQmx5PHs3jC/GfjdrV44JmmirXuegDNGWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:0d:df:8b:78:95:e9:fa:42:16:e5:71:8f:fb:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a
Validity
Not Before: Jun 13 09:00:28 2026 GMT
Not After : Jun 14 09:00:28 2026 GMT
Subject: CN=477234e5177d920052d0fffc47e6302a1068f473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:f6:9a:2f:83:71:f4:26:2d:78:3c:5d:5d:
6e:ef:67:11:1c:f6:fc:3a:ce:92:58:54:d5:95:7c:
90:b6:5e:10:83:5a:46:ae:60:83:c1:22:a0:08:bf:
ae:f5:ad:dc:57:05:a9:e8:e0:90:7b:7a:c2:a8:97:
e8:b3:82:e1:e0:21:9c:e6:b7:3c:0c:57:8c:99:71:
9e:c6:91:78:7b:6f:b2:84:32:f5:19:05:1a:5a:03:
38:55:8b:b6:5f:4b:8b:d8:88:cf:4c:df:8c:ae:e6:
e3:5e:7c:35:66:4d:93:63:1b:87:2c:a1:61:50:ac:
ca:1a:78:55:c2:56:57:00:4e:13:b5:cc:3c:06:eb:
55:34:20:23:00:cc:1b:f0:02:c1:2b:2a:33:70:f3:
6f:65:a9:8b:2e:14:a7:84:39:dc:03:b0:d1:13:ec:
52:8c:7f:52:42:4b:34:81:35:d2:69:f1:4a:2b:a1:
46:cc:28:5e:1c:04:c6:fc:2f:50:91:91:fa:43:8a:
30:bf:ec:a9:be:c7:52:17:bd:77:3d:de:09:f3:c8:
2b:39:9a:be:3c:ca:8e:db:d8:e7:26:48:bf:d1:b3:
7c:b7:4d:eb:8c:ce:fd:7d:5d:46:96:7a:d0:57:85:
6b:34:43:ce:f8:4a:1f:45:6d:a4:73:1a:f6:24:ff:
3e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:72:34:E5:17:7D:92:00:52:D0:FF:FC:47:E6:30:2A:10:68:F4:73
X509v3 Authority Key Identifier:
keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:82:e7:d4:f2:b4:37:7b:f1:da:44:3d:74:5e:f1:52:a2:52:
5a:57:47:d6:a0:08:3e:51:10:94:26:2d:9a:50:a8:d6:4b:c2:
ce:6c:e2:b5:09:8d:41:07:57:71:d2:bb:fd:ad:c9:38:ce:bd:
36:eb:89:43:d8:54:d8:45:da:33:9f:fb:90:73:78:d0:d9:64:
d1:52:63:00:c1:07:55:62:1d:57:52:c4:19:7c:42:66:6a:86:
fa:af:65:9d:61:c6:ce:09:4e:27:f7:23:26:5b:4e:a4:9b:da:
d8:0b:fa:4a:60:d0:37:f7:c9:bc:ed:cb:69:8d:50:a6:21:78:
68:54:2e:42:63:b9:83:04:b2:1c:31:7b:28:15:0c:27:50:6f:
b6:45:a9:82:f3:57:58:8a:91:90:c0:28:67:f5:e1:56:d2:01:
ab:ab:91:c9:1b:fa:cd:3b:0e:63:b1:8f:3c:48:ca:da:23:8a:
36:30:01:fe:e4:df:a4:bc:f6:da:d9:42:e1:05:71:62:35:c9:
06:4f:15:4c:fe:16:f1:d6:34:37:00:bf:b7:b0:18:59:50:70:
33:13:e9:64:89:3c:43:6a:76:f5:fc:e7:1b:90:44:67:86:7a:
b1:fe:92:cf:43:68:63:c2:d7:34:de:11:ba:e9:a7:cf:d2:dc:
db:e2:15:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:08:19 2026 by rpki-client