Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: pQknf9Q3az1VKvspNBcz+QYpoVSgP/AyILgs6olngPI=
Subject key identifier: 0E:3E:B5:99:55:7A:C4:9A:1B:D4:57:12:29:FD:02:55:CA:E6:29:1E
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019D99D01FAAB6215669B3DBFAABA2B9E1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 016E
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: Dq1w8a5q9T6MO3DE76o0rE5KvWpCqgnFVVYICfqTx9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:1f:aa:b6:21:56:69:b3:db:fa:ab:a2:b9:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=0e3eb599557ac49a1bd4571229fd0255cae6291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:76:94:72:7a:9e:8c:cb:f8:b4:52:d6:8a:73:
63:cd:94:bd:bd:b8:e1:92:94:0f:2c:de:c1:88:ea:
cf:0f:0c:01:9b:3d:ff:30:ac:fa:01:29:e3:da:c1:
08:be:39:53:d0:3b:68:78:83:3d:d5:c5:91:d8:28:
86:a6:7a:6f:95:41:90:6c:53:a0:e4:ee:51:98:d7:
e0:c4:91:8d:08:74:af:ab:9e:ac:1d:3b:f5:7c:fc:
69:73:fd:c8:d3:99:54:f2:3e:5c:b2:22:2d:f6:d9:
0b:6e:25:86:cc:75:f6:5b:80:e1:31:07:62:91:81:
cf:64:c8:8e:05:d2:11:0d:35:77:dc:15:20:c0:e7:
c9:3d:12:30:57:9c:93:00:6e:85:20:26:95:35:69:
5c:3e:f0:ca:fe:82:79:d3:bc:58:92:f3:4a:7a:3b:
62:ce:0e:de:41:c9:fd:51:42:4a:41:c1:3f:84:d9:
b3:43:50:a3:c7:77:8c:88:0d:e9:de:74:77:88:42:
d9:4c:7f:ce:bd:25:9c:72:33:2d:e6:b6:fa:9a:33:
16:de:80:85:b7:ab:90:15:56:8a:e4:fa:4a:ba:bf:
cd:07:a5:2f:33:70:31:08:72:54:f6:66:4a:f8:73:
b6:49:08:e1:55:d0:30:2b:de:72:24:38:a0:29:b5:
32:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:B5:99:55:7A:C4:9A:1B:D4:57:12:29:FD:02:55:CA:E6:29:1E
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5e:1c:0b:9a:f9:cb:20:6f:2a:a4:a0:7e:05:7f:a1:a9:37:
60:ca:37:49:0c:f4:1e:76:32:db:fb:1a:7c:fb:0e:cf:61:4c:
8d:d7:d7:cd:bb:90:ea:ec:11:a3:1a:dd:0a:79:09:b8:7d:5e:
d4:f6:d3:60:5e:97:6a:ee:f3:00:f4:eb:d2:bb:71:27:04:19:
f4:f6:ec:e8:75:e1:8b:81:17:d9:8b:a0:42:c0:18:57:b2:72:
70:2b:14:2b:22:be:54:fe:87:79:4a:2b:e4:07:7c:11:4b:f2:
19:84:b7:54:23:b3:10:cc:c6:9e:32:3d:2e:75:c5:69:29:0f:
e6:e1:14:32:9e:31:da:f9:2d:1b:73:85:71:9e:ed:f2:fd:15:
0a:bc:2e:9e:b4:ed:bf:80:9a:6a:fa:ab:52:fa:4e:0c:83:83:
a2:0e:3a:ca:64:f6:b0:18:07:95:b6:5e:ad:1b:ba:f4:30:53:
6e:34:fa:80:9d:13:9b:68:ed:d9:69:1f:69:32:a2:97:82:ef:
f8:27:5a:99:0d:42:c3:e1:73:b1:e1:97:86:1b:07:87:93:06:
86:d4:1d:db:15:3a:04:ec:5b:82:af:7f:d3:a2:ac:19:2c:2a:
05:d5:b4:7c:4b:8c:e5:a7:6f:50:23:92:5d:ec:2d:fd:47:6e:
53:b3:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:26 2026 by rpki-client