Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: rt4nZwqR0Nka6LZc5CLag0aaD1aslKZtC2yWu1iD2r4=
Subject key identifier: A4:8A:41:E5:F0:20:1C:DE:1F:6F:1B:7A:DD:63:0B:C6:5C:42:8E:C0
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019D3186FEE8DE53C84DF3CAA601EBBFA3D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 0138
Signing time: Fri 27 Mar 2026 23:00:23 +0000
Manifest this update: Fri 27 Mar 2026 23:00:23 +0000
Manifest next update: Sat 28 Mar 2026 23:00:23 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: 2OighwkNn+pIHFOsUQVUTfiGFyyV5xqdUBT3RMcWv/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:86:fe:e8:de:53:c8:4d:f3:ca:a6:01:eb:bf:a3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Mar 27 23:00:23 2026 GMT
Not After : Mar 28 23:00:23 2026 GMT
Subject: CN=a48a41e5f0201cde1f6f1b7add630bc65c428ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:2b:07:89:e6:49:26:46:28:de:b4:2b:4f:
69:bb:ce:2b:b2:18:9a:c2:58:94:05:f9:f3:a8:c3:
ca:4c:68:fc:ad:10:01:37:d9:42:11:b4:c2:e6:b3:
9c:6d:79:3b:a5:2a:ab:12:c5:a8:12:93:7f:c1:c1:
b9:6f:45:78:f3:ad:34:aa:8c:c5:2a:17:3a:a6:5b:
8e:da:c8:2c:a4:81:96:a2:ca:4e:ca:81:e0:92:73:
db:37:f9:7e:6a:d6:2d:70:3f:4c:ad:6a:e4:1b:fe:
bb:37:0c:ed:4b:75:98:d5:b8:fc:df:14:0a:b6:07:
4b:f0:c3:91:98:02:92:94:dd:88:e0:b0:14:19:14:
ff:ca:39:a1:15:ea:e3:bd:0a:ad:ca:cb:05:e3:33:
a5:39:66:d1:3c:e9:77:0c:2e:e7:ba:42:99:33:03:
9d:94:54:f2:bd:4b:d9:35:ff:08:f9:e3:35:a0:ad:
4a:47:65:85:a8:e4:a2:08:bb:e4:94:52:60:e4:10:
02:b1:ed:1b:75:f4:02:71:47:6f:6b:e2:d2:27:69:
41:a2:e2:d3:d9:95:e5:b1:36:47:af:2b:63:93:f7:
a2:c3:90:f9:e7:a0:11:0e:82:8b:23:e5:e9:8a:46:
5b:c8:0b:c0:01:75:6f:31:3b:8d:db:75:ae:e1:c9:
2a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8A:41:E5:F0:20:1C:DE:1F:6F:1B:7A:DD:63:0B:C6:5C:42:8E:C0
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1d:56:24:e4:e7:a4:da:e8:22:54:44:02:0b:95:00:0f:c3:
9b:07:ef:18:f6:b3:df:cd:1d:59:79:e6:f7:95:4b:4f:07:8b:
c0:47:83:b5:d2:5c:f0:62:45:e5:c7:b0:0d:26:e7:ad:1e:68:
54:28:b0:45:a2:a3:4f:c6:b0:e1:20:07:3d:f3:25:80:93:6e:
fb:d5:65:d8:1c:28:3c:4e:02:67:7c:a7:11:69:9b:b3:be:d4:
a7:0f:24:8f:8b:28:69:35:52:9f:2a:a4:83:d8:f6:a3:49:0c:
cd:57:c7:5c:02:3a:7a:d6:a1:e4:83:0c:fe:c2:67:4a:d3:9d:
f1:02:d3:60:54:ba:45:29:99:bd:1b:1d:4e:2c:51:c2:38:91:
40:e1:63:31:59:4f:f6:73:ae:89:a4:92:2e:a8:a5:eb:63:9d:
8d:b0:c3:df:fe:25:35:a9:39:37:d4:69:2d:fb:a0:c7:7a:f4:
da:5c:34:7a:61:7c:2c:b9:cd:dd:f1:67:15:85:bf:66:53:9d:
6e:72:4e:5d:84:7b:2c:fc:ef:7f:0b:6c:83:9b:e6:d6:a7:63:
1b:8c:ab:d2:65:29:1d:58:79:f1:02:ca:ec:f0:13:b2:b1:fc:
bd:0a:bd:cd:1c:b4:28:d6:6a:f8:38:5f:49:c7:15:37:82:38:
40:fb:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:42:15 2026 by rpki-client