Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
File: C9MR-KZ36gSWjt3jRk-zMmDw3io.mft (raw, json)
Hash identifier: 3mAvxnzwxP+ZhzCCNyOg0MJdH7mzTHSxK3PWCOj98eg=
Subject key identifier: 9D:29:0E:F9:A7:9A:67:51:4F:B1:9A:6E:56:D2:B7:8A:1A:FE:8C:A8
Authority key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Certificate issuer: /CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Certificate serial: 01A0D3F006BE3EB47B8604F980E02A874E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
Manifest number: 011D
Signing time: Thu 24 Sep 2026 15:01:57 +0000
Manifest this update: Thu 24 Sep 2026 15:01:57 +0000
Manifest next update: Fri 25 Sep 2026 15:01:57 +0000
Files and hashes: 1: C9MR-KZ36gSWjt3jRk-zMmDw3io.crl (hash: xFWni5irVLLHl3lCppxeSbh1EtFfjYjTp14h7yLXEoI=)
2: IjhSeXDwvusbQcjhrnsKrkqMjMs.roa (hash: WM9UbddM+SxZstTFU66phFX+LJopIyVe8Pc+BnGorDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:06:be:3e:b4:7b:86:04:f9:80:e0:2a:87:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Validity
Not Before: Sep 24 15:01:57 2026 GMT
Not After : Sep 25 15:01:57 2026 GMT
Subject: CN=9d290ef9a79a67514fb19a6e56d2b78a1afe8ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:af:f2:44:cd:a9:ca:7a:2e:99:42:fc:b6:cb:
a8:ae:26:58:f2:f1:fc:4f:42:79:a4:58:8f:a4:83:
75:00:c5:f9:08:e2:b4:52:c0:92:5d:b7:af:7e:55:
ad:27:53:12:63:2b:fb:2f:c1:d5:bb:cc:40:01:b2:
44:b8:41:f6:b6:dc:c0:ae:7f:ab:81:66:cb:49:83:
5d:ac:d2:a4:7b:45:d2:5e:ba:58:4d:ac:3b:b4:cc:
cb:3f:dc:50:90:52:a9:a2:7b:a4:7f:fe:44:00:64:
cc:c6:71:2b:c1:93:57:95:49:36:8b:2b:dd:1e:06:
3a:c5:62:85:3a:67:79:7b:2a:7c:a1:b7:e6:19:ed:
50:88:d8:99:04:3f:ad:d4:a4:28:09:a4:62:4a:8d:
57:a4:6e:01:2f:e7:37:80:fd:5a:bb:d0:91:cb:24:
fd:a7:5c:51:ea:06:a6:1d:11:5b:90:c6:aa:7e:d9:
30:5e:e6:3f:ac:0d:8a:74:60:a9:92:11:c5:78:ff:
22:a1:cc:17:80:f8:d6:f5:13:83:7a:f5:d2:5c:05:
1d:4d:ba:b9:70:cd:30:c0:b7:8c:2a:a3:b6:9d:af:
9e:bb:0c:02:04:7b:35:71:6c:94:f3:7d:4e:22:ca:
9c:5a:90:36:e5:ad:7b:0a:0a:82:f1:0b:e9:24:e8:
fb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:0E:F9:A7:9A:67:51:4F:B1:9A:6E:56:D2:B7:8A:1A:FE:8C:A8
X509v3 Authority Key Identifier:
keyid:0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:da:1e:8f:0b:90:21:3b:0a:58:c2:cf:fb:da:2d:bb:9d:e9:
91:5e:b7:a9:f3:07:37:b4:46:82:fb:3f:fd:0b:f5:da:bf:2d:
35:a7:35:da:d5:85:6f:12:39:a9:fb:6a:78:57:b8:c5:cf:7f:
e7:f5:9b:a3:b4:1a:8f:f5:fb:64:f5:da:4b:23:6b:37:fc:41:
d1:7a:e1:0b:0f:0d:75:5b:1e:fc:e1:4c:68:05:75:3d:61:6b:
08:bf:06:75:e4:ab:40:1e:58:b9:cf:82:92:99:ff:e3:86:a0:
83:64:3b:0a:f9:66:a3:c4:f1:05:89:8e:57:66:43:12:8f:bf:
a0:63:07:d9:7e:66:7c:64:c7:01:65:e4:b4:c2:aa:e6:78:85:
78:5c:2c:22:a7:f9:2b:36:88:a2:bb:d2:ad:41:83:ad:d6:fc:
2b:b1:e0:d2:88:2b:b2:58:0a:97:6b:76:32:96:b1:b4:d1:30:
b0:f8:0f:d9:e7:28:26:f3:9c:95:dc:b7:38:ef:97:fd:46:36:
e8:f8:21:18:7f:dd:c0:db:55:3c:b0:2b:74:ca:84:ae:f8:33:
e8:47:af:55:9c:df:2c:5b:1c:3f:3d:e0:82:2e:9a:7b:d9:e7:
41:db:96:e4:36:89:91:e3:79:59:fc:47:70:a2:63:09:ea:7d:
ff:3a:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:51:54 2026 by rpki-client