Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: GqzMhgPQtljRBOi/8iRx1ezmGZ7+9DfkSdbkK+UuJyw=
Subject key identifier: 36:6E:5E:E8:27:12:EC:28:59:18:D0:42:B7:A0:A6:CD:CD:04:86:67
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019D29976BDF8D2991B2FEF02902C217805A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0CCA
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: I8oYci1zk9/GRRT7XOWy17eZKKAZviQut0bxNaS3yVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6b:df:8d:29:91:b2:fe:f0:29:02:c2:17:80:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=366e5ee82712ec285918d042b7a0a6cdcd048667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:00:10:a7:fd:25:94:41:39:ff:0a:f9:bf:
a0:74:85:6f:0b:e8:04:b4:0b:2b:b7:bd:e2:e4:6c:
07:ab:3f:90:25:5b:47:6f:d9:64:99:7c:e8:1d:10:
52:63:97:66:8b:fe:e2:cd:5b:da:75:9a:90:c6:45:
c8:eb:7b:8f:24:3e:7f:f2:24:ab:50:e8:41:7a:9f:
09:3c:be:ea:34:b5:73:81:34:8d:d4:7d:bf:48:63:
7f:dd:74:7d:27:69:c6:a0:8d:b1:ba:4e:08:d4:ee:
0e:1c:c6:f7:2f:d5:54:d4:2c:c9:28:63:68:9f:31:
76:94:0b:12:45:81:dc:e5:6a:d1:d0:1d:db:13:f9:
ad:d4:9f:82:7b:51:e0:8a:9f:ec:50:3f:47:57:70:
f3:ec:06:77:04:66:92:35:b9:18:53:96:3c:45:37:
bc:62:2b:61:10:2a:96:35:88:1c:ef:cf:1d:c8:33:
10:b8:a6:a0:9e:a4:d4:32:d6:27:58:3e:fc:52:b9:
24:20:72:89:ef:e3:9d:49:27:90:20:34:27:0c:be:
6c:cf:cb:76:66:77:eb:46:ad:33:3d:71:5d:87:05:
8a:19:46:2e:72:a1:d8:d6:d9:52:1b:9e:32:62:8f:
6e:73:96:85:ee:57:a5:b7:a2:ed:7a:e3:56:cb:54:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6E:5E:E8:27:12:EC:28:59:18:D0:42:B7:A0:A6:CD:CD:04:86:67
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3f:47:8e:2e:ce:6c:05:36:35:fc:ec:73:71:27:7b:9c:9b:
ff:2b:94:2d:1d:5b:d7:01:24:97:3c:8f:2f:63:6b:b3:94:38:
aa:a7:a0:0a:38:6c:cd:fc:e0:6c:f4:fc:97:88:ad:c3:21:43:
67:c7:02:1d:dd:39:5c:47:cd:ce:6a:ad:17:23:71:a1:f2:9c:
d7:5b:4a:c5:19:1d:70:5e:76:a2:c8:2d:4d:b4:48:80:66:a1:
3f:8b:43:72:d8:39:6f:6f:95:16:e0:59:67:f4:09:55:ce:ec:
55:06:a8:52:3b:31:29:7f:53:b1:d6:08:fa:f9:7a:d3:f8:b8:
01:05:d9:4e:43:bb:a4:a6:d5:4e:e4:64:97:2c:c5:0f:28:72:
19:8c:bb:8c:89:d5:8c:7d:8e:c4:a7:ec:e8:c5:89:a8:d6:03:
ac:8d:00:38:d4:de:71:3f:12:05:54:60:6e:2c:29:5f:e6:44:
64:04:a3:16:d4:8b:fa:3a:7a:de:39:58:55:5c:15:ce:6e:5e:
9f:e5:43:54:d2:8d:56:7e:ff:d1:3c:3a:ed:85:97:96:5e:b4:
11:f8:a9:ab:1e:8d:e2:e6:20:26:50:15:13:38:02:81:47:85:
46:f8:21:22:1b:db:7e:ab:eb:3f:f7:87:8a:13:9e:9e:0a:0a:
8a:10:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:54:23 2026 by rpki-client