Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: 5tH+QoRN9HBy9jP/NC+uNC+hJ4EK4i9x+69xGGy7MzI=
Subject key identifier: 03:A0:F8:F4:16:28:66:60:0E:BA:64:5B:C9:4B:AD:F9:A9:59:E5:0C
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019EBEED26BB53E2AC0FF3A11AE785BC5F5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 08C3
Signing time: Sat 13 Jun 2026 03:01:13 +0000
Manifest this update: Sat 13 Jun 2026 03:01:13 +0000
Manifest next update: Sun 14 Jun 2026 03:01:13 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: jJ8GhTDNaLzZVKW2I8xL/pzCQJ33xKBhfng06RcqWJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:26:bb:53:e2:ac:0f:f3:a1:1a:e7:85:bc:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 13 03:01:13 2026 GMT
Not After : Jun 14 03:01:13 2026 GMT
Subject: CN=03a0f8f4162866600eba645bc94badf9a959e50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:76:84:5f:d0:8c:84:fa:d0:e6:0e:23:50:
60:0a:14:05:00:01:e8:03:e1:f5:38:93:a5:e9:1f:
7f:50:2b:05:25:b0:fd:ad:35:a7:af:e7:b2:54:34:
e9:35:fc:3a:af:c7:47:58:82:bb:94:5d:60:69:97:
65:c7:a6:52:5d:24:cd:77:f0:05:fc:b3:a8:33:69:
15:5c:78:42:13:f3:a6:55:a3:98:13:10:72:ea:2d:
16:cf:fa:7e:d3:1e:c0:07:b4:ad:3b:74:03:48:50:
fe:e5:4c:73:6a:d9:b8:92:a4:41:20:c5:65:a0:99:
01:e5:c9:c2:2c:83:2f:53:96:fc:85:e3:a4:63:f2:
fc:91:e4:fe:4b:4f:6c:7f:e8:aa:bc:48:02:9f:9f:
92:92:d4:14:d5:8e:69:39:85:80:6d:60:ab:63:98:
55:ac:32:ca:84:a6:c2:f8:d5:06:c1:a2:ee:8e:f5:
57:92:c3:20:4d:a7:7b:dd:51:63:92:51:2b:34:af:
31:b3:5a:17:17:59:07:7b:63:70:9f:28:31:7d:7c:
fc:36:39:d2:1f:40:23:c3:9a:62:a7:06:8c:2e:4f:
97:bb:04:ce:d5:bb:a6:ea:23:13:f9:40:46:b6:b3:
37:91:63:e4:26:ca:56:77:6d:54:37:fc:6c:3a:56:
a2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A0:F8:F4:16:28:66:60:0E:BA:64:5B:C9:4B:AD:F9:A9:59:E5:0C
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:ac:f2:e5:b5:92:6d:31:da:8d:99:a8:02:53:5f:28:3c:83:
d6:f4:b3:91:ee:ef:63:ce:a4:b1:0e:ef:56:66:a4:c2:14:81:
6c:41:28:57:fa:16:d2:f7:a3:2e:f5:88:88:06:df:56:c7:1a:
92:40:ae:5f:c1:f6:e4:d5:0c:7b:8f:77:dc:cd:0d:a3:40:04:
18:0c:a7:67:14:31:34:0b:05:6d:88:2c:1e:a6:ca:a4:fe:09:
de:c9:64:a1:2d:5e:fa:04:83:7d:d4:80:f2:df:85:91:01:87:
d6:40:9d:1e:0a:53:f0:9e:c4:5d:1b:ba:08:58:73:39:2b:29:
4f:81:67:d7:28:8f:0d:e4:2f:68:85:d7:5f:74:ad:ab:b4:48:
82:9b:95:14:ff:cb:fc:ac:2d:11:ee:72:5a:c3:cc:0f:9b:1a:
f4:b8:45:75:5d:ff:b6:9c:7f:41:06:19:9e:4c:cc:3c:60:af:
d4:65:7b:1a:22:ff:1d:e5:ec:45:a9:c1:c9:54:c6:20:a3:0a:
37:53:39:d6:45:d5:13:10:af:91:d1:5e:a6:e2:cd:97:0a:df:
a6:47:95:5e:9d:20:27:3e:84:6c:67:82:32:86:09:2e:77:6c:
e0:82:1f:40:39:a1:32:dc:fc:90:c8:cb:3d:91:f9:ff:05:9c:
53:28:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:32 2026 by rpki-client