Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: J8F41tUTskPqJEF2+rV2aZzfrtzRsnWmCv94Ni8YCco=
Subject key identifier: CD:4E:6C:D2:C9:1A:A8:AB:1F:2A:F0:31:8B:3E:50:E6:8A:52:3F:4F
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019D270473F528762889FB0570395FF4CA26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0449
Signing time: Wed 25 Mar 2026 22:01:36 +0000
Manifest this update: Wed 25 Mar 2026 22:01:36 +0000
Manifest next update: Thu 26 Mar 2026 22:01:36 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: dL91E5heeY6ZfdYH08w3qN9zhUpW16idhZIfUs+mdHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:73:f5:28:76:28:89:fb:05:70:39:5f:f4:ca:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Mar 25 22:01:36 2026 GMT
Not After : Mar 26 22:01:36 2026 GMT
Subject: CN=cd4e6cd2c91aa8ab1f2af0318b3e50e68a523f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:08:d1:fe:98:16:c8:f7:d3:59:88:ca:29:
ad:c8:34:6a:ae:7a:5f:03:1a:c2:6a:67:58:36:e7:
00:50:5c:a7:81:e4:6f:8c:90:10:e2:66:01:23:19:
3b:57:68:d9:62:8f:f3:7b:cc:12:dc:b7:bd:7c:ae:
d4:a0:eb:c0:45:66:b6:88:67:bd:31:cc:8c:2d:64:
49:6f:1a:ae:66:89:25:72:8d:e2:ba:6b:b7:6c:4c:
06:d3:bf:9e:51:1a:51:a3:f3:22:73:8e:e9:cb:9d:
56:9b:63:c0:56:6e:cf:c3:44:15:dc:1c:22:9d:a9:
3b:82:d8:b9:e9:77:bc:29:b7:b6:d4:71:3b:da:69:
25:b8:75:bd:19:13:e6:3b:0e:51:38:55:fd:34:a9:
2d:25:23:2f:1d:3f:80:a8:6c:bc:2f:43:59:3e:d3:
8b:77:ac:5e:3b:f9:24:8c:ee:56:aa:c2:db:80:2f:
39:64:a2:43:dd:e4:e6:30:4f:bd:58:e0:68:ae:7a:
5c:35:e9:41:aa:13:42:aa:6a:4d:18:23:72:8d:22:
a0:b8:8e:23:e1:92:d0:22:51:12:2c:c4:e7:b1:7d:
43:70:5d:1c:eb:95:de:96:a8:3c:99:4d:e2:fc:a6:
0c:b5:c6:f1:23:17:a3:60:1b:1a:73:ad:55:18:b8:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4E:6C:D2:C9:1A:A8:AB:1F:2A:F0:31:8B:3E:50:E6:8A:52:3F:4F
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:33:a0:fd:04:76:bc:e1:44:b5:69:ba:51:62:f6:7d:9c:
f1:e2:c1:08:38:40:d4:79:1f:3c:1d:8a:f1:bd:66:e5:dd:e3:
f6:ea:ca:32:02:e0:aa:f4:5d:fb:9c:28:27:67:9c:02:10:61:
a9:f5:20:1d:42:a0:88:d0:7e:7b:3c:be:67:99:95:8b:61:06:
4e:97:aa:04:63:ef:a2:6c:f9:17:e3:1b:3d:c0:b0:20:94:6e:
45:f6:f2:88:15:74:e9:76:b0:c6:73:1e:5c:78:1f:d4:96:cf:
16:8a:d1:69:c3:72:d9:18:43:2a:43:bb:cb:36:0c:44:03:ae:
c2:25:f9:00:4f:cb:81:bc:06:58:15:6f:91:3b:a7:0a:b5:08:
a4:93:61:e6:5a:e7:35:27:0f:4f:e1:77:55:cf:8c:de:f3:ff:
7a:5d:40:e9:b6:75:54:1a:90:86:89:a2:97:c0:b5:dc:d8:7c:
98:cd:b2:b5:b4:9e:a0:02:22:a1:05:fd:8e:99:f2:69:7f:c5:
df:77:3a:25:22:99:ac:48:10:86:ff:80:52:e6:d2:5f:01:bb:
c6:b3:aa:5b:70:37:9a:29:24:21:17:f0:50:36:8c:7d:35:91:
f7:63:d1:b4:d1:2e:e2:00:f4:34:83:66:22:27:9d:af:1d:69:
6f:9f:b7:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBHP1KHYoifsFcDlf9MomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5
NjVmYTkwHhcNMjYwMzI1MjIwMTM2WhcNMjYwMzI2MjIwMTM2WjAzMTEwLwYDVQQD
EyhjZDRlNmNkMmM5MWFhOGFiMWYyYWYwMzE4YjNlNTBlNjhhNTIzZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKwI0f6YFsj301mIyimtyDRqrnpf
AxrCamdYNucAUFyngeRvjJAQ4mYBIxk7V2jZYo/ze8wS3Le9fK7UoOvARWa2iGe9
McyMLWRJbxquZoklco3iumu3bEwG07+eURpRo/Mic47py51Wm2PAVm7Pw0QV3Bwi
nak7gti56Xe8Kbe21HE72mkluHW9GRPmOw5ROFX9NKktJSMvHT+AqGy8L0NZPtOL
d6xeO/kkjO5WqsLbgC85ZKJD3eTmME+9WOBornpcNelBqhNCqmpNGCNyjSKguI4j
4ZLQIlESLMTnsX1DcF0c65Xelqg8mU3i/KYMtcbxIxejYBsac61VGLgq0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1ObNLJGqirHyrwMYs+UOaKUj9PMB8GA1UdIwQY
MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt
YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll
LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFB0zoP0E
drzhRLVpulFi9n2c8eLBCDhA1HkfPB2K8b1m5d3j9urKMgLgqvRd+5woJ2ecAhBh
qfUgHUKgiNB+ezy+Z5mVi2EGTpeqBGPvomz5F+MbPcCwIJRuRfbyiBV06XawxnMe
XHgf1JbPForRacNy2RhDKkO7yzYMRAOuwiX5AE/LgbwGWBVvkTunCrUIpJNh5lrn
NScPT+F3Vc+M3vP/el1A6bZ1VBqQhomil8C13Nh8mM2ytbSeoAIioQX9jpnyaX/F
33c6JSKZrEgQhv+AUubSXwG7xrOqW3A3mikkIRfwUDaMfTWR92PRtNEu4gD0NINm
Iiedrx1pb5+3Mw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:59 2026 by rpki-client