Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: alkq0UGlGWOu32BItJpabHVNwqepqOjPtd2T57Sibts=
Subject key identifier: F5:2D:5F:2A:32:BB:62:FC:75:1B:AD:1B:53:8E:5A:FB:5A:80:A8:02
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019D27A939CA63A41D1B92CE40AD3C6548FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: a8gkmHCYIZFsH+9cpqDliMUn+ooppkByyo4gVKXaZ8E=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:39:ca:63:a4:1d:1b:92:ce:40:ad:3c:65:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=f52d5f2a32bb62fc751bad1b538e5afb5a80a802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:b0:50:fd:89:15:e9:db:fd:3f:27:ab:10:
2c:5a:dc:51:a4:05:be:26:37:29:0a:03:62:54:c4:
cc:4c:a4:0b:d8:a1:c2:ac:37:88:00:26:11:df:6b:
62:42:ac:2e:a6:3b:de:44:0f:9b:fd:11:0a:93:1b:
4f:37:87:9a:b5:fe:57:d7:1e:4f:2d:ae:d9:29:ad:
f0:04:80:d4:3a:41:1c:61:26:a4:69:d7:7a:e6:93:
7b:e4:6f:22:5d:7f:de:da:9f:4c:b3:c1:d6:47:6e:
f8:4e:d4:2b:b7:5e:99:46:ba:53:6b:1f:a4:39:56:
c9:7e:29:6c:15:d5:c2:e0:e0:0f:90:0e:35:0f:51:
32:d0:99:71:d9:46:0d:ff:c6:85:9b:10:b6:ac:b3:
ee:fa:ec:46:d9:88:99:46:68:9c:3d:3d:ba:40:1e:
e1:76:f2:ce:af:6b:d2:44:dd:52:da:67:ce:70:60:
8a:b7:b9:fb:e3:b8:3e:fe:aa:5c:7a:d4:c5:13:e2:
ce:0d:d1:c3:c2:7e:59:56:3c:17:61:dc:95:78:c7:
9b:7c:56:90:a5:2c:bb:08:75:d4:63:bf:01:bc:59:
cd:90:9e:cf:0f:d9:fe:1a:ff:4b:3f:dd:6c:8c:a8:
41:d0:4e:06:75:fa:18:f1:65:1a:2b:ec:8d:eb:68:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2D:5F:2A:32:BB:62:FC:75:1B:AD:1B:53:8E:5A:FB:5A:80:A8:02
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:3a:56:5b:14:6d:80:4d:51:8f:90:6f:fa:fe:53:ed:54:
16:94:86:c9:a8:51:ea:86:21:ee:9d:0b:f3:92:5b:b2:fb:3d:
d9:68:8e:66:18:0d:20:6f:e9:1f:25:32:a5:6c:d2:85:6c:48:
5c:94:f2:6d:b2:ec:18:95:c3:5f:3f:58:d0:7a:e9:4c:4e:29:
12:1a:08:c7:3a:03:ea:c7:5c:dc:f7:84:cd:e1:ff:ff:f7:ea:
fc:72:b9:7d:d1:7e:e3:45:ea:14:79:e7:be:49:79:77:0e:e0:
5a:f5:2f:53:b8:2c:b9:f3:5e:a8:b6:cc:51:55:5f:54:3f:3c:
8d:12:bb:34:54:c5:fa:14:28:14:e2:35:a0:88:11:64:c9:2a:
31:95:e1:e9:fe:7c:84:66:c8:61:9d:59:66:f8:55:d0:11:c5:
2b:f4:07:72:4e:9a:da:ae:6e:6b:dc:54:00:0b:b1:6d:46:43:
3d:c4:0c:a3:76:88:49:28:e1:a0:59:63:ef:33:f2:fb:73:51:
5f:56:77:6f:74:56:84:37:a4:bc:48:00:b5:9e:cd:ae:88:c5:
46:46:f0:9b:b5:f4:bd:18:b3:03:88:55:0a:d5:6c:d3:e2:80:
87:62:02:cf:d2:d5:77:de:dc:bb:62:fd:05:3e:f4:59:60:fd:
ef:79:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:18 2026 by rpki-client