Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: MQgu1K51dV/wWIcLUJ16Lffp9SAbhURl4cKG/ruraGI=
Subject key identifier: BD:15:58:16:EC:57:D6:70:FA:D7:DE:29:27:08:B7:C0:2E:D3:05:64
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 01A0CE5AF5AE13F3C27A5A26E2FC19A672D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 13:01:02 +0000
Manifest this update: Wed 23 Sep 2026 13:01:02 +0000
Manifest next update: Thu 24 Sep 2026 13:01:02 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: CQsMUA6V8FEbT1NnHeNbCFXKS8dHpwntc2MBPNbJXO4=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:f5:ae:13:f3:c2:7a:5a:26:e2:fc:19:a6:72:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Sep 23 13:01:02 2026 GMT
Not After : Sep 24 13:01:02 2026 GMT
Subject: CN=bd155816ec57d670fad7de292708b7c02ed30564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:12:03:c1:28:66:cd:02:59:1b:84:0c:b4:
a3:ac:66:ff:57:eb:f8:46:c1:cd:df:a4:f8:22:c3:
ac:a3:76:1d:23:01:bc:dc:9b:11:e1:bc:e5:c6:3c:
2d:17:ea:de:83:26:40:60:c6:24:ab:c8:18:ed:f8:
2b:d5:43:1a:a3:e8:ac:a4:0d:e9:8e:94:6a:91:5e:
f5:d3:9f:72:1b:db:8a:ac:2b:3e:2d:5f:22:0c:bc:
b6:c9:a2:1e:88:60:bc:d4:ac:f2:df:7e:1d:42:5a:
80:66:bd:8f:b0:30:34:cf:19:63:6c:c6:d8:28:98:
09:b3:7b:42:30:d3:a2:85:cb:dc:04:3a:83:62:88:
e4:4b:d3:d8:64:89:10:08:00:be:05:a6:fe:63:79:
6a:8b:0d:e1:20:ef:a0:51:bb:2a:94:f4:80:ee:44:
11:6d:ea:d1:19:ab:03:dc:48:20:bd:cf:fc:47:0c:
0b:bf:da:5a:fb:10:a3:3c:df:5e:67:52:83:7b:12:
08:9f:91:b5:02:d6:2d:60:c1:0f:f0:9f:a7:ee:5f:
e0:f3:49:85:07:61:1f:2f:a3:90:68:78:fa:bc:4c:
45:93:2e:7f:03:d4:e2:3f:07:fe:92:18:ce:80:aa:
e0:71:fb:9a:ac:c6:95:8d:90:40:f7:89:cb:4a:4a:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:15:58:16:EC:57:D6:70:FA:D7:DE:29:27:08:B7:C0:2E:D3:05:64
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:4a:86:ea:a0:fc:67:eb:3e:83:e6:81:37:9b:4e:b6:7b:d2:
10:5d:a8:7e:22:71:0c:9c:73:a4:4b:79:0d:51:f5:3f:1a:8b:
fe:96:31:82:65:ca:94:a2:0f:f6:8b:10:83:d0:03:76:ae:05:
30:a8:82:bd:23:df:85:d8:3f:97:84:bb:53:c8:e1:03:39:8a:
83:a0:d3:f5:0a:08:1f:e2:b1:d3:58:3f:da:1b:13:3e:e8:5b:
5e:22:96:f7:0f:69:3f:45:f2:c1:52:ba:e7:da:d5:fb:75:83:
e3:ff:6d:f1:94:59:6a:d2:6a:ab:cb:eb:c1:0a:99:95:43:8b:
9e:59:69:d4:47:a4:66:ba:77:fd:8e:f3:0f:b0:85:76:36:11:
e0:3c:d4:59:a4:26:9b:e6:6a:69:7d:89:74:d2:63:69:17:31:
5c:3e:7a:e7:83:8b:80:41:a0:cf:b4:58:94:22:c7:1c:b9:b9:
9f:22:d8:bd:c1:3f:93:1c:58:83:8b:b5:e3:25:74:9f:c4:a0:
7f:87:26:c0:7a:3c:b7:5b:f8:c8:0a:03:d3:54:9b:9e:d4:d9:
c1:c5:c0:cd:58:34:ff:03:7f:7f:71:3e:44:16:a6:36:f7:c3:
25:cc:e7:31:c6:57:c1:24:04:2f:7e:65:45:65:c0:f3:fb:29:
b7:8e:a7:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOWvWuE/PCelom4vwZpnLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZDdlNzBjMDA1ZjU1NmE4MjU0ZTdiMTJiMGViM2QzMzE0
ZDQ1ZTIwHhcNMjYwOTIzMTMwMTAyWhcNMjYwOTI0MTMwMTAyWjAzMTEwLwYDVQQD
EyhiZDE1NTgxNmVjNTdkNjcwZmFkN2RlMjkyNzA4YjdjMDJlZDMwNTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WgSA8EoZs0CWRuEDLSjrGb/V+v4
RsHN36T4IsOso3YdIwG83JsR4bzlxjwtF+regyZAYMYkq8gY7fgr1UMao+ispA3p
jpRqkV71059yG9uKrCs+LV8iDLy2yaIeiGC81Kzy334dQlqAZr2PsDA0zxljbMbY
KJgJs3tCMNOihcvcBDqDYojkS9PYZIkQCAC+Bab+Y3lqiw3hIO+gUbsqlPSA7kQR
berRGasD3Eggvc/8RwwLv9pa+xCjPN9eZ1KDexIIn5G1AtYtYMEP8J+n7l/g80mF
B2EfL6OQaHj6vExFky5/A9TiPwf+khjOgKrgcfuarMaVjZBA94nLSkqiawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0VWBbsV9Zw+tfeKScIt8Au0wVkMB8GA1UdIwQY
MBaAFAvX5wwAX1VqglTnsSsOs9MxTUXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQt
YmIzY2M3Yzk0NGFkLzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80Y2ZmZWYtOWE5Ny00NTQ2LWJkZGQtYmIzY2M3Yzk0NGFk
LzEvQzlmbkRBQmZWV3FDVk9leEt3NnowekZOUmVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkqG6qD8
Z+s+g+aBN5tOtnvSEF2ofiJxDJxzpEt5DVH1PxqL/pYxgmXKlKIP9osQg9ADdq4F
MKiCvSPfhdg/l4S7U8jhAzmKg6DT9QoIH+Kx01g/2hsTPuhbXiKW9w9pP0XywVK6
59rV+3WD4/9t8ZRZatJqq8vrwQqZlUOLnllp1EekZrp3/Y7zD7CFdjYR4DzUWaQm
m+ZqaX2JdNJjaRcxXD5654OLgEGgz7RYlCLHHLm5nyLYvcE/kxxYg4u14yV0n8Sg
f4cmwHo8t1v4yAoD01SbntTZwcXAzVg0/wN/f3E+RBamNvfDJcznMcZXwSQEL35l
RWXA8/spt46npw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:10:23 2026 by rpki-client