Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: dwcZIhpeW4KEoCtb+240FP0kgRsx+iomrU1IgphOQ0Y=
Subject key identifier: 0D:B5:0C:B9:1A:C0:8F:2D:AF:98:71:20:4C:37:B5:A1:7A:B8:C7:01
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 01A0CEFFCE9FDCAA9E2201D1EA173CC74AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 16:01:06 +0000
Manifest this update: Wed 23 Sep 2026 16:01:06 +0000
Manifest next update: Thu 24 Sep 2026 16:01:06 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: oYC+5jZgURLP23QZu8s8PL++Cf4e21Rvcl4E2yOMkG4=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:ce:9f:dc:aa:9e:22:01:d1:ea:17:3c:c7:4a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Sep 23 16:01:06 2026 GMT
Not After : Sep 24 16:01:06 2026 GMT
Subject: CN=0db50cb91ac08f2daf9871204c37b5a17ab8c701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:38:44:7e:f5:2d:52:85:3f:08:aa:0d:dc:
26:72:12:02:96:1c:8b:57:42:19:96:3b:99:61:26:
d7:2d:c0:84:fa:7e:3f:4a:a5:60:32:70:72:41:93:
b1:42:c3:98:8c:7b:94:95:4c:e0:ec:56:ac:18:6b:
50:a5:31:a4:0b:ef:47:f0:d8:38:7d:12:56:a5:ce:
17:b5:a7:4d:8d:d3:2e:58:29:ad:c8:fc:30:79:d0:
5f:45:b3:46:9d:e3:9f:f5:69:7a:13:99:d1:9a:6d:
6e:99:d3:53:53:3b:59:c5:d0:bd:c0:13:dd:e5:03:
8f:3b:a5:85:5d:79:af:c8:e7:9c:18:d5:e6:3f:29:
1d:d4:b9:a1:2e:d2:10:92:35:60:5a:eb:34:b7:08:
ce:1c:f9:e1:f4:63:63:64:e8:bd:c2:e2:2a:0c:ed:
9a:ce:53:51:16:73:11:7b:c1:f2:56:18:12:b3:bb:
18:27:4e:ba:1c:61:ea:e8:f8:76:ce:b1:01:59:8b:
6f:5f:02:3f:27:f5:a7:b8:a8:0d:14:19:f5:37:d4:
c2:04:fb:b1:e1:fe:3f:20:90:39:af:96:77:80:50:
82:02:0f:dd:5f:42:8f:f4:08:54:cc:4b:a9:50:45:
ec:02:4a:97:08:27:48:ea:a1:18:7b:6c:5b:35:84:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:0C:B9:1A:C0:8F:2D:AF:98:71:20:4C:37:B5:A1:7A:B8:C7:01
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0f:9a:3b:d9:3c:e9:19:a9:ed:3f:90:0b:fb:20:01:d6:fc:
7c:e5:ce:7a:13:60:45:a7:f6:fb:af:7b:dd:4b:3e:10:d2:3a:
f8:21:4a:c1:f2:72:0f:a5:aa:e4:c4:77:a7:41:56:3b:85:c3:
6c:83:c8:21:52:32:e0:97:7f:94:5a:38:84:61:25:b4:d6:1d:
cf:1f:8a:f9:46:6d:d9:c8:3c:60:07:f6:46:84:06:a9:c5:7b:
b7:75:73:ff:5a:8f:ee:c0:5c:bd:7b:e6:d8:16:c0:40:ac:a5:
5f:69:70:91:03:fb:ce:d3:a7:da:bd:51:fe:41:e9:54:09:9a:
75:ad:7a:29:7a:d5:c2:6a:b2:c2:bd:1b:98:e5:27:01:82:0d:
2c:03:c4:b1:58:fc:87:06:91:55:ae:97:46:f4:4f:6e:f3:88:
93:6e:39:e4:85:11:c7:5f:8c:9a:ff:ec:ce:76:86:99:77:38:
50:08:bd:85:b8:83:13:ee:4e:93:4b:ae:a7:09:72:a5:58:67:
8e:76:a8:ce:c3:1a:43:05:ed:c4:c6:aa:4d:c7:5b:a9:91:a9:
b0:8e:ef:9f:1a:3c:72:10:fc:ec:f5:e2:5b:84:33:60:fc:22:
9f:dc:09:63:1c:11:75:e9:da:27:4f:7c:96:6e:6f:20:74:a4:
f5:a7:c5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:19:56 2026 by rpki-client