Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier: HuEEpAAEK1JZZX2cwoLZIEdWpSd1AJsGSwHID2bsQ90=
Subject key identifier: C2:A2:B8:A3:AC:ED:6F:B1:DD:77:52:E3:16:68:2E:C3:B6:54:00:3F
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 019D27DF7185A099A02DEA47C831CA379743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number: 1880
Signing time: Thu 26 Mar 2026 02:00:47 +0000
Manifest this update: Thu 26 Mar 2026 02:00:47 +0000
Manifest next update: Fri 27 Mar 2026 02:00:47 +0000
Files and hashes: 1: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: hR+Rkx3T5IcV1KkCpXyKvOHnymumHvytQuLR4Im8Dis=)
2: jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa (hash: p6WX3Hu0x5KT7vdzzBlcWjdetobjNczy8S7l0BXnNGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:71:85:a0:99:a0:2d:ea:47:c8:31:ca:37:97:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: Mar 26 02:00:47 2026 GMT
Not After : Mar 27 02:00:47 2026 GMT
Subject: CN=c2a2b8a3aced6fb1dd7752e316682ec3b654003f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:24:7e:8b:25:f4:d6:00:fb:08:d5:63:53:
2e:e4:87:a4:d2:8c:b1:aa:98:15:99:b7:a1:24:1e:
b6:8f:6c:b7:ca:ac:b5:42:1f:cb:b0:d7:99:48:24:
f5:3b:6c:31:f4:10:95:59:27:4c:ee:de:d2:ef:d9:
b3:44:fe:42:98:64:b6:8e:7e:8c:c4:8a:38:83:05:
cc:36:fd:77:a2:7d:2d:d7:ed:03:20:61:7d:75:32:
e7:84:47:6e:cb:5b:33:5b:3d:28:26:c8:97:65:ae:
d4:98:df:02:d0:fe:23:e9:75:c0:f5:8c:94:c1:7c:
d7:dd:eb:6d:a7:43:7a:3f:5f:f7:3c:6a:ce:8f:40:
8a:59:dd:53:4e:39:a8:75:32:1c:84:ea:cc:77:f2:
4a:bd:e3:a9:de:be:7b:5c:62:a7:ad:bd:4c:f7:35:
f2:27:c4:69:ec:a0:53:38:a8:00:95:c5:2a:63:f1:
18:e1:62:6b:5d:f3:c4:00:d9:b5:0e:4a:23:38:bd:
a3:81:23:b7:e1:dd:1a:05:7f:43:35:93:64:7e:5e:
f5:f6:74:89:55:45:6a:d5:c6:0d:98:97:5d:88:2e:
e9:00:09:7e:e5:5f:66:50:9e:6a:d2:72:69:17:74:
c5:56:27:00:28:57:ee:d2:0a:2d:ad:ee:15:62:ab:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:B8:A3:AC:ED:6F:B1:DD:77:52:E3:16:68:2E:C3:B6:54:00:3F
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:a6:9b:fc:48:0a:98:dc:00:b6:6d:a2:b3:6d:61:06:8f:
f3:d3:86:d5:19:7e:49:e0:7e:02:5a:4d:56:74:e9:5c:fa:3f:
e5:79:f6:a3:18:b3:e6:e2:19:9a:39:89:b6:25:af:3d:80:47:
92:62:b4:07:93:ae:5d:63:a5:a1:9c:f9:8d:cd:c4:9b:17:ea:
8f:94:4f:61:b2:18:a5:32:5e:c4:9f:2d:3a:e8:ea:d3:b0:b4:
5c:6a:d6:c8:57:f0:bc:c3:68:a6:ad:4f:f5:1e:9d:1b:c7:95:
f8:1d:f3:6d:32:78:fb:64:62:6a:fa:42:24:da:0b:3a:68:9a:
da:c0:d0:da:bb:b2:55:af:af:84:2a:7f:f1:5d:e7:cf:c8:63:
4a:d7:d6:1b:76:3e:22:ec:54:8d:c2:ce:35:f1:e6:29:d4:be:
0a:b6:57:02:2e:0c:1c:2b:42:60:a7:bb:6a:6c:ec:c3:f2:31:
73:0c:36:55:90:5e:9b:f3:9d:58:2d:a1:bb:a1:f8:22:59:5f:
9b:dc:22:b4:bd:74:4e:cd:48:a6:56:b8:ed:6c:48:75:17:6b:
7f:6e:d3:31:97:98:1c:11:e7:2d:6a:d8:74:18:96:dd:5c:77:
1a:2b:38:31:df:d6:b5:22:8e:f2:b3:e5:7f:aa:b8:16:c2:4c:
1d:be:f7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:41:48 2026 by rpki-client