Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: 6cZ/rnA1nLq2kNgt+++eWBCeWvSTxednPhvQVlMI+wA=
Subject key identifier: 23:C2:E6:5F:3B:3D:45:8D:8C:00:5A:D5:0E:39:82:AD:DD:F8:11:E1
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019D2961966D2D0E1B973F6F0E9DB8981194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0DBC
Signing time: Thu 26 Mar 2026 09:02:34 +0000
Manifest this update: Thu 26 Mar 2026 09:02:34 +0000
Manifest next update: Fri 27 Mar 2026 09:02:34 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: FDKrhKKBRmkR91Iw/6aprNurOBc1DMMc68zwrfCkLX8=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:96:6d:2d:0e:1b:97:3f:6f:0e:9d:b8:98:11:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Mar 26 09:02:34 2026 GMT
Not After : Mar 27 09:02:34 2026 GMT
Subject: CN=23c2e65f3b3d458d8c005ad50e3982adddf811e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:33:7f:6d:16:84:06:75:ae:91:76:64:69:
35:ab:3d:85:72:67:08:e3:9b:10:3a:43:8a:6e:68:
3e:fd:df:6b:99:6d:50:86:72:ee:5e:cf:90:b8:04:
1e:ff:2c:aa:13:f4:f1:f0:ed:16:84:0c:78:91:62:
97:f4:2d:c9:0c:16:a4:07:fc:46:cb:55:36:08:3e:
11:26:f5:6e:26:c2:2c:fe:3d:fd:95:f6:7f:e6:51:
96:9f:b7:0c:64:e9:9c:ae:b5:d1:5c:85:74:45:d5:
01:db:a8:2a:80:03:68:97:54:86:19:6a:42:6a:2c:
b3:2f:3f:ca:ef:f9:4a:79:b9:7c:1b:10:d9:f6:11:
8a:6e:82:af:85:77:52:6c:46:77:d6:bc:ce:53:3e:
6f:7e:0a:1a:c2:d6:f7:1c:39:50:2c:1a:3e:d3:e4:
f3:6b:8f:25:a7:16:08:91:5d:fd:2a:db:f0:af:64:
a1:7d:87:99:91:71:bb:ac:50:cb:80:c5:79:0f:2c:
7d:82:22:13:b7:da:b8:ec:47:f6:bd:10:31:9e:3f:
6e:c5:b4:f0:3c:94:6c:b2:49:df:c7:b6:3f:bf:c7:
07:0c:72:c4:0f:c1:a7:20:5a:04:16:05:0e:49:1c:
c5:f4:da:f1:6f:19:14:61:83:a1:68:58:4a:e5:77:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C2:E6:5F:3B:3D:45:8D:8C:00:5A:D5:0E:39:82:AD:DD:F8:11:E1
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:aa:79:bf:4d:8c:ba:3e:81:76:b0:b0:bc:11:fb:d0:78:42:
1c:20:5a:b1:09:5f:f0:e0:07:6e:91:97:11:24:a7:08:a8:95:
b6:cb:cc:05:13:6f:0a:19:03:ab:30:47:a9:f8:d0:87:88:1b:
aa:9f:b1:6f:5e:5c:81:60:0c:73:a4:c4:e2:7a:94:c7:e4:0f:
9f:c6:65:da:ee:81:43:89:83:21:f6:71:af:b3:e6:8d:99:f5:
98:75:89:a0:48:de:ed:0d:d2:05:4b:aa:6a:52:28:be:a8:e9:
35:12:33:58:6c:6a:5a:7c:15:ff:1f:d3:b9:b5:aa:08:c4:02:
9f:46:ad:3a:5a:20:00:6f:59:61:4a:9e:a0:6c:8b:8f:92:a1:
d6:a4:ab:0b:db:d9:08:b9:34:f8:bc:d3:34:81:db:c3:17:fd:
13:f5:97:a1:69:96:7d:c0:e0:16:5b:c3:9f:44:b8:62:39:96:
08:3e:d2:6d:0e:a1:37:f9:e8:a3:a6:f4:fb:5a:77:01:da:5b:
80:68:8e:42:0d:54:3d:de:4f:7c:a5:6d:b8:0a:0d:b6:50:06:
ca:e8:e4:7f:25:e1:f0:f1:e1:dc:95:ee:2b:bd:dd:b2:37:aa:
b0:9d:98:ac:36:6c:1e:72:b3:30:b8:e5:8a:d3:d3:48:ca:a2:
66:d4:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:28:56 2026 by rpki-client