Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: S1HMWQjtkym4xA2rsC8C5rhhEafTu2vNwO5aMVaRnCE=
Subject key identifier: A8:99:58:A5:EA:3B:03:E6:80:C7:FA:5C:81:B3:D3:BB:95:2E:56:90
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 01A0DA2874CB55B39C746BE83DB7130DFC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 031D
Signing time: Fri 25 Sep 2026 20:01:19 +0000
Manifest this update: Fri 25 Sep 2026 20:01:19 +0000
Manifest next update: Sat 26 Sep 2026 20:01:19 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: dY1JscmyCPaUWF2MUv0GMljUVWaVKAd3+7Y6UPtSxzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:74:cb:55:b3:9c:74:6b:e8:3d:b7:13:0d:fc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Sep 25 20:01:19 2026 GMT
Not After : Sep 26 20:01:19 2026 GMT
Subject: CN=a89958a5ea3b03e680c7fa5c81b3d3bb952e5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0e:92:69:5c:5d:c2:d3:18:bc:82:ae:91:18:
9a:f5:6b:01:f8:01:4d:0f:2d:fd:b5:a5:30:d1:9f:
e7:ab:ee:55:e3:00:59:a1:08:11:63:92:b3:60:91:
45:bf:9c:f8:c6:05:a6:67:49:aa:8e:71:bd:d6:c6:
41:4a:18:01:08:e4:ff:94:f1:6c:77:62:f7:4b:53:
a9:e1:08:ac:57:c8:21:f1:be:05:63:0d:06:cc:80:
90:03:b9:e3:5e:79:83:af:a3:fd:32:a5:c0:f7:cf:
36:4d:4b:58:6d:13:53:27:ec:3a:d1:c3:02:ee:8e:
75:93:10:64:78:1a:be:c0:9b:6d:ef:15:08:b8:65:
44:10:ba:f1:22:c4:f6:b0:89:76:9c:df:39:26:5a:
59:8e:41:25:5c:34:40:0b:f8:e3:33:36:38:83:48:
ce:6a:16:f6:72:9f:15:b0:87:a6:d2:65:e2:87:d2:
c1:ee:71:ee:58:e7:b9:cd:70:bc:49:8e:c3:4b:db:
e9:1e:9a:39:ac:44:b0:33:c5:d3:45:75:a0:5c:d2:
d7:b4:f6:d8:7d:13:5d:cd:36:a9:91:e1:b2:6d:40:
fd:6f:26:ab:e9:51:7a:28:86:41:05:ea:43:35:ca:
17:85:2b:bb:d0:b3:60:e6:a4:ea:8f:c1:2d:4c:ab:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:58:A5:EA:3B:03:E6:80:C7:FA:5C:81:B3:D3:BB:95:2E:56:90
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9a:30:18:54:fe:b1:48:a6:4c:74:a0:c1:9b:fc:4c:83:b4:
49:f7:a2:22:91:8e:87:d9:ee:ec:03:8f:41:98:0d:26:07:f1:
7e:18:49:07:1c:d0:44:7e:e2:04:71:c9:e5:73:32:b9:e9:18:
88:b9:aa:6e:f2:ec:5a:12:b3:87:9e:3a:75:c9:fd:fb:0b:99:
f1:27:d7:1e:ed:50:c4:d3:2d:38:02:37:d3:7d:d1:96:65:41:
c4:9d:e0:7a:82:d9:56:43:1f:0a:82:09:b3:86:47:27:93:48:
3c:e8:7b:09:5b:6d:ac:6b:a5:9f:a7:af:73:66:56:ac:8c:7d:
7a:74:be:0d:2d:24:0e:2e:ba:40:56:4b:01:d0:39:5b:d8:9a:
d1:77:23:bf:c0:72:22:aa:d5:10:10:98:bc:25:3a:cb:cd:f0:
ab:0c:7d:95:ac:8b:05:66:d4:f1:65:cc:79:85:41:03:42:83:
50:3e:79:3f:0f:66:c6:9e:cc:19:3e:d6:be:92:9d:ae:6d:7f:
ad:b9:11:cf:e4:07:d3:a2:72:2f:87:e4:95:0c:e5:c6:5c:e2:
87:93:a1:61:3c:6b:af:d7:db:37:f5:ad:64:f8:ad:99:f7:dd:
d5:80:15:fe:11:24:70:e9:fd:7c:4a:81:fe:44:c9:93:5f:bc:
78:5e:8e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:09:01 2026 by rpki-client