Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: UA4tfH6BVP6A5oS/s9CcK9UnB2Oi7SoCAZA+TlkGsBc=
Subject key identifier: 3C:55:DA:D6:68:5D:57:DE:CE:EF:C4:60:39:9F:56:75:58:95:08:E1
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019E1CEB723B6F92DB97940F2B4393DD7F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 16:00:52 +0000
Manifest this update: Tue 12 May 2026 16:00:52 +0000
Manifest next update: Wed 13 May 2026 16:00:52 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: E/WGPJO3fAUhT27aqwFrTS5t9f+dnPkjUKEkkYsFOXc=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:72:3b:6f:92:db:97:94:0f:2b:43:93:dd:7f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: May 12 16:00:52 2026 GMT
Not After : May 13 16:00:52 2026 GMT
Subject: CN=3c55dad6685d57deceefc460399f5675589508e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:06:77:38:a3:aa:53:b6:72:d0:b7:a3:30:
01:6c:53:c6:ae:05:3a:b0:e8:38:b3:81:41:f1:08:
1b:06:92:82:c3:28:5a:56:c1:27:f3:15:81:8f:f3:
64:60:03:07:87:ae:b2:27:17:3b:c1:39:5b:cf:cc:
9f:27:21:ed:c8:c5:7b:7e:44:30:3a:66:96:73:a0:
29:c9:ff:d6:b5:0c:61:29:a6:f4:5e:57:a6:8f:15:
8c:e0:4e:9e:61:2d:c1:a3:64:9a:cb:3a:1d:3b:80:
b2:15:74:27:2a:d2:e5:3d:56:55:45:d7:c7:09:88:
45:ef:0d:d5:bf:08:db:8e:e9:8c:6b:fb:28:f3:e1:
69:ef:87:23:e9:d8:e4:17:57:ed:02:aa:f9:7b:68:
5e:c0:04:86:97:d8:8d:ee:b0:f4:38:d5:3a:8a:86:
96:43:54:06:f3:f2:04:ee:a5:93:4e:4c:03:f9:d5:
8b:72:4f:0d:b9:2c:97:7c:d2:a8:99:65:b3:7f:53:
46:5b:4a:cf:34:a3:63:cd:46:36:8f:e5:11:bd:1f:
11:11:c8:40:1f:b9:b5:9a:ab:0c:24:02:67:59:66:
ed:48:61:f2:e1:50:44:c7:19:b9:13:a4:e8:b8:e0:
66:89:b9:c6:25:57:01:47:6b:1c:1a:98:ed:19:0d:
5b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:55:DA:D6:68:5D:57:DE:CE:EF:C4:60:39:9F:56:75:58:95:08:E1
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cb:51:bd:aa:08:1c:04:51:e3:de:f6:69:05:2e:0d:9f:cb:
3f:c9:16:75:c1:11:f5:ac:9f:fe:d7:f5:1a:db:ef:4f:ac:48:
f2:68:88:4c:ba:e0:89:6f:6a:91:c3:95:98:14:bf:68:11:1d:
3a:e3:9f:f6:4d:5f:01:61:e8:19:a1:f2:3e:ef:2f:29:57:5e:
0b:9a:d9:2c:63:a9:84:5d:13:49:ed:27:fd:23:80:4b:e4:e2:
d1:3e:c5:03:cd:5f:13:47:2e:fe:fa:62:f1:d6:d3:fa:5a:6f:
31:a9:f4:60:38:ea:f8:76:50:b6:cb:ed:10:4a:6a:4a:cc:2d:
83:4d:fd:fc:8d:07:a9:d8:79:f6:cb:89:b4:6c:93:db:ad:f0:
9b:c1:df:bb:fd:8d:99:0b:6c:5b:2d:9a:2c:10:66:61:a1:ed:
ec:f0:74:30:dc:37:d6:d1:3f:85:6e:82:d4:3f:4b:2e:27:53:
0d:eb:47:1e:cc:18:83:61:d6:e6:a6:43:ba:19:78:f6:6f:0b:
6f:a8:69:40:72:5a:49:33:e8:00:fd:7d:bc:ff:ef:16:a1:86:
65:4b:94:a6:59:57:f8:ea:3c:d8:24:6d:cc:1e:b8:93:6e:fa:
0a:de:c7:2b:4b:c7:31:d9:04:8c:bd:f3:90:35:d9:5d:38:95:
c2:57:91:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:41 2026 by rpki-client