Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: 9Pcb/dz4M2C4sDHVTXPtikCtQ+NvAFMeBomFsssR/xk=
Subject key identifier: AB:C0:BB:30:98:C0:BE:62:26:44:84:CF:03:1E:3A:6C:5D:A4:CF:2F
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 01A0BDD46C209546ACEEAE88ACB0BC53852B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0626
Signing time: Sun 20 Sep 2026 08:00:09 +0000
Manifest this update: Sun 20 Sep 2026 08:00:09 +0000
Manifest next update: Mon 21 Sep 2026 08:00:09 +0000
Files and hashes: 1: EcUtNVkTOi3EHBnQtghPEHrJEZY.roa (hash: GXsobrevmwlATTbR+PgJl7ZZUb6khqpMkBW74Ix7biA=)
2: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: pITVBG18XphPef5KUQIbXaOYEfx8tnV/Arzu19tKSvI=)
3: eEnsRD4MkS42ZQFP4tBVSY_su1Q.asa (hash: 24Fjo/JFr8frVKzI4FqGk7wyikPxymdrCMtvdm5CZvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:6c:20:95:46:ac:ee:ae:88:ac:b0:bc:53:85:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Sep 20 08:00:09 2026 GMT
Not After : Sep 21 08:00:09 2026 GMT
Subject: CN=abc0bb3098c0be62264484cf031e3a6c5da4cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:0f:81:60:6a:a1:8f:12:8a:81:bf:cc:cd:
6b:e7:7d:a5:ae:6c:33:4c:58:30:ce:d4:4b:ab:b4:
5b:f1:a2:92:b5:1b:b5:3d:12:6e:d0:61:48:ce:dc:
a9:ee:91:0e:4d:89:2a:80:e6:75:dc:8c:4d:ff:84:
34:8a:99:21:4d:cb:69:83:d1:a9:99:b4:04:7c:dd:
bb:26:83:0a:a6:d2:6d:cd:99:ee:77:88:bd:f6:3d:
e3:6a:4c:21:09:77:8d:a2:da:a6:30:5f:32:04:54:
6a:9e:7a:5e:ec:ef:93:7c:55:3b:8f:9d:9a:1f:a1:
01:8a:1f:01:b1:28:2c:be:ad:6a:35:04:e5:46:a4:
63:57:6f:a3:7c:b2:02:83:e4:5a:22:1e:80:8c:2c:
61:7a:da:3f:a3:a4:14:17:86:93:c4:b7:6a:e9:49:
fe:3f:16:87:72:a3:0d:89:cf:71:95:56:e8:77:31:
35:9f:e0:a4:ea:82:05:f3:a8:38:07:10:bb:f3:ed:
be:06:7f:b5:a1:36:56:7e:d0:e1:7c:e0:3c:c2:86:
8c:5c:8e:07:02:b8:79:c5:22:fa:92:97:68:7c:7a:
01:6a:6a:e8:b0:fe:6b:27:6b:a6:6c:ed:54:c9:c3:
cb:40:95:e8:ac:e6:ec:04:d3:3a:db:1b:9c:ca:de:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C0:BB:30:98:C0:BE:62:26:44:84:CF:03:1E:3A:6C:5D:A4:CF:2F
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:61:7b:6a:36:a7:07:8e:6c:55:82:9d:d0:d4:25:68:1f:86:
32:07:d4:58:ca:58:8d:7f:a0:12:28:39:ed:22:65:e7:52:ba:
d4:85:76:7d:b1:6e:72:c3:90:c2:37:d3:8c:3c:d1:f2:3b:d6:
3e:67:26:39:54:d4:06:5c:d2:c0:09:27:84:e7:87:76:8a:88:
68:8a:7b:c8:d3:63:c6:bc:c8:03:c7:f5:b0:d9:13:cc:5c:b1:
42:89:4b:45:17:b0:86:6b:c3:ce:58:ad:a3:93:03:ae:68:f4:
61:18:e2:15:38:ba:cd:01:42:77:c1:a0:6e:2d:83:13:44:d6:
39:2a:97:79:0f:22:67:3b:f5:46:62:3d:16:35:f6:9b:58:2c:
7b:bd:00:13:18:0e:75:3f:5a:4c:8c:19:9e:86:ab:a5:c1:ec:
c2:59:02:9e:0e:86:47:55:45:29:e1:60:94:71:a6:02:77:0a:
de:3b:a7:cc:e4:fb:f9:f9:74:a8:f2:37:6c:2a:ce:d2:f5:4a:
fa:3d:c5:98:13:0c:73:af:7b:1d:cb:f8:66:70:c1:14:90:1e:
8e:ce:7a:1d:13:da:ae:60:a4:7c:b8:93:68:df:71:b4:a5:b9:
1b:6c:e8:07:8f:08:da:07:e5:5c:91:23:2a:4b:3d:97:a0:49:
e0:5d:99:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91GwglUas7q6IrLC8U4UrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5
NjVmYTkwHhcNMjYwOTIwMDgwMDA5WhcNMjYwOTIxMDgwMDA5WjAzMTEwLwYDVQQD
EyhhYmMwYmIzMDk4YzBiZTYyMjY0NDg0Y2YwMzFlM2E2YzVkYTRjZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7QPgWBqoY8SioG/zM1r532lrmwz
TFgwztRLq7Rb8aKStRu1PRJu0GFIztyp7pEOTYkqgOZ13IxN/4Q0ipkhTctpg9Gp
mbQEfN27JoMKptJtzZnud4i99j3jakwhCXeNotqmMF8yBFRqnnpe7O+TfFU7j52a
H6EBih8BsSgsvq1qNQTlRqRjV2+jfLICg+RaIh6AjCxheto/o6QUF4aTxLdq6Un+
PxaHcqMNic9xlVbodzE1n+Ck6oIF86g4BxC78+2+Bn+1oTZWftDhfOA8woaMXI4H
Arh5xSL6kpdofHoBamrosP5rJ2umbO1UycPLQJXorObsBNM62xucyt7RswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvAuzCYwL5iJkSEzwMeOmxdpM8vMB8GA1UdIwQY
MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt
YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll
LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0GF7ajan
B45sVYKd0NQlaB+GMgfUWMpYjX+gEig57SJl51K61IV2fbFucsOQwjfTjDzR8jvW
PmcmOVTUBlzSwAknhOeHdoqIaIp7yNNjxrzIA8f1sNkTzFyxQolLRRewhmvDzlit
o5MDrmj0YRjiFTi6zQFCd8Ggbi2DE0TWOSqXeQ8iZzv1RmI9FjX2m1gse70AExgO
dT9aTIwZnoarpcHswlkCng6GR1VFKeFglHGmAncK3junzOT7+fl0qPI3bCrO0vVK
+j3FmBMMc697Hcv4ZnDBFJAejs56HRParmCkfLiTaN9xtKW5G2zoB48I2gflXJEj
Kks9l6BJ4F2ZPA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:55:48 2026 by rpki-client