Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: rfSRKJzZT7IkjYDjwz0JMvCnMJaBounTvcEXa56WiCo=
Subject key identifier: F5:74:12:E8:AD:94:94:65:E0:9F:5E:24:7E:13:DB:4C:33:05:7E:D0
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019D2B85681A02244F959AC242E9BB7FE5C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0CCB
Signing time: Thu 26 Mar 2026 19:00:56 +0000
Manifest this update: Thu 26 Mar 2026 19:00:56 +0000
Manifest next update: Fri 27 Mar 2026 19:00:56 +0000
Files and hashes: 1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: ciK+5Xr+Jd8JSYcCQEYnTzHr7bf+blq7fvnLlsE207Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:68:1a:02:24:4f:95:9a:c2:42:e9:bb:7f:e5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Mar 26 19:00:56 2026 GMT
Not After : Mar 27 19:00:56 2026 GMT
Subject: CN=f57412e8ad949465e09f5e247e13db4c33057ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:48:b0:dc:77:ab:6c:7e:54:ba:fb:b9:40:
0a:4a:7d:3b:73:e9:2f:b1:95:d9:5b:59:13:e1:13:
6c:6d:f7:07:a5:83:28:06:f3:e9:69:92:ac:bc:05:
d2:5d:58:c0:d3:23:e5:2c:e3:4d:2f:ad:10:08:94:
2b:76:11:45:30:6e:32:4c:c9:a2:73:de:27:9c:e7:
05:93:54:88:fa:49:ae:65:ce:52:32:1b:41:eb:68:
92:10:54:be:79:40:c3:64:a3:92:2d:5c:ab:14:81:
2a:81:33:a6:04:6b:9d:68:b9:e5:65:68:cf:07:4c:
a0:96:0d:57:5a:5b:5f:25:83:e0:88:b5:a7:82:27:
a3:10:ed:6f:ad:1f:50:69:91:84:cc:c8:51:38:8a:
6a:94:b9:41:24:09:c7:75:62:b1:09:79:8b:a8:4b:
76:23:ab:c2:6b:08:b0:fd:58:18:9b:63:7e:16:20:
18:a3:73:7e:d2:28:1f:33:96:49:01:58:32:e9:a4:
b8:a6:a8:bb:52:b2:a8:39:d0:6c:df:37:4e:ca:09:
af:65:f4:eb:da:01:58:e5:6f:54:a8:74:ed:c2:b3:
78:2e:1f:df:dd:8e:fd:80:18:63:dc:4a:f5:28:48:
23:a7:56:f9:c1:4b:97:6d:fd:f5:74:2a:d5:aa:4f:
52:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:74:12:E8:AD:94:94:65:E0:9F:5E:24:7E:13:DB:4C:33:05:7E:D0
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d4:50:c2:17:8b:cd:a6:3c:4c:7b:b1:c6:d4:2b:b6:be:fe:
4a:74:87:1d:e4:0e:ea:13:b5:5c:e5:60:8d:fe:f8:01:0a:52:
94:3d:cb:ef:87:46:31:13:67:f5:17:05:cd:80:27:8f:12:c2:
7e:18:22:7b:cf:5a:26:23:2d:13:0e:dd:b8:b8:84:13:4a:bf:
14:db:6d:b6:9c:8f:a3:ab:1c:33:20:be:b4:21:d3:c7:04:e8:
0c:11:ea:a0:99:df:62:43:60:ab:c5:e9:74:72:d9:a4:62:1b:
00:75:38:49:ad:c7:b6:e6:2a:1e:ce:d9:b7:8d:d7:c5:74:9a:
cf:f8:d5:d4:55:17:52:50:9e:6c:b9:ff:d8:fb:81:34:e0:cc:
92:87:61:db:c7:d5:ce:b0:25:2f:01:dd:b1:0e:ce:c4:c3:a4:
9e:cd:72:d2:12:63:8f:ac:8b:d7:e8:00:df:a5:36:bb:b3:ed:
d1:63:f0:ef:79:ca:57:8c:5a:3c:43:07:bf:5d:0e:01:26:76:
0f:a5:96:24:72:21:08:57:22:5c:65:2e:cc:6f:0e:2e:e4:da:
0e:ad:9a:b5:7b:aa:90:40:ff:6f:5f:72:0b:94:cb:26:85:24:
7b:84:fd:21:99:d0:c4:e1:e9:21:5a:41:fe:56:9d:e6:76:b7:
49:91:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:02:26 2026 by rpki-client