Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: XMQ3y2Ddi5NQAZFiYj0EjtDbNzdkCwfTXLRST1X3N28=
Subject key identifier: 2A:6B:02:91:D6:92:DB:CA:5C:47:07:4E:6D:1C:32:B7:18:7F:10:B2
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019CAC0FA79D53092F55E4E34DA7049142DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0C89
Signing time: Mon 02 Mar 2026 01:00:32 +0000
Manifest this update: Mon 02 Mar 2026 01:00:32 +0000
Manifest next update: Tue 03 Mar 2026 01:00:32 +0000
Files and hashes: 1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: YjLJAPFCgG8YlXr2yl0428Jfq8RmRovJQRutekZi2NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:a7:9d:53:09:2f:55:e4:e3:4d:a7:04:91:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Mar 2 01:00:32 2026 GMT
Not After : Mar 3 01:00:32 2026 GMT
Subject: CN=2a6b0291d692dbca5c47074e6d1c32b7187f10b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:13:25:f7:b3:d3:10:e7:8f:da:c6:32:f6:8c:
c2:b6:2c:a0:65:d3:21:16:19:06:ba:b8:d0:46:96:
cd:3e:a5:cb:ea:84:11:10:7f:1f:a4:a5:53:8c:b6:
c3:7c:ff:0b:8e:ea:41:5e:9c:5b:86:0b:9f:3b:f9:
8d:d9:33:66:ff:68:cc:44:05:ba:2f:61:c0:4a:f5:
88:85:e6:b4:3b:e4:ee:6a:78:d9:b6:d4:61:6b:9a:
67:fe:89:6a:cc:cf:96:fd:b4:be:0e:1c:69:38:30:
83:26:10:f7:1a:6f:46:f2:13:0b:90:f3:8a:76:0d:
66:4e:4c:a3:4b:66:e8:00:20:11:97:1a:43:70:9a:
0a:74:f8:99:1b:ab:dd:2a:1b:56:f7:48:5b:bb:90:
45:15:af:e5:09:89:85:1d:9c:68:ee:07:bf:a8:1c:
3b:5f:70:85:82:a8:53:00:fc:90:79:28:b6:31:09:
b3:9f:0e:c6:65:4f:1a:19:70:99:fa:a9:fd:66:11:
01:7c:e1:fd:c3:fc:f4:1b:bd:f0:e9:01:c7:6b:10:
13:19:45:db:69:74:a2:a4:49:cb:61:ed:d7:e9:4c:
c1:8b:a7:0a:1f:d6:1d:34:28:bd:3c:b3:1e:c5:67:
6b:5b:28:b9:52:7c:84:01:fb:6d:e8:49:10:98:fb:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6B:02:91:D6:92:DB:CA:5C:47:07:4E:6D:1C:32:B7:18:7F:10:B2
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:aa:3f:c2:46:03:95:0a:e0:87:f1:e0:19:32:35:61:b4:a5:
9a:bb:62:31:98:cd:2d:f4:9a:49:ae:e8:3c:6c:f0:2c:66:97:
e5:d0:53:37:cd:ea:7e:dd:12:11:04:11:c1:5d:45:fd:b2:cc:
7d:5c:a4:75:5b:73:2b:e4:8b:1c:bf:d7:08:a6:8e:a2:e8:ed:
20:0f:0c:e9:87:d5:2f:59:2c:f2:dc:4d:d2:83:3f:90:7f:dd:
3f:70:b8:45:da:1b:11:e8:8e:ab:2c:c0:80:59:b4:64:61:df:
af:82:41:a0:24:1b:98:30:b2:42:83:13:17:34:ec:10:2f:02:
9c:f2:ca:14:b5:53:30:40:fb:52:28:8f:8e:18:91:eb:d5:da:
5e:f5:d1:18:91:18:30:9b:7d:da:f6:ec:d1:b4:09:35:af:5e:
93:a4:a0:eb:6a:17:8f:e8:e4:98:bd:c6:3a:5e:70:4f:93:1c:
45:59:45:03:5c:d0:22:6d:b6:ae:cc:7f:4f:07:dc:74:8f:2a:
4f:b6:78:7d:10:95:4e:92:a6:98:e8:e8:c0:ca:d0:ec:1d:ad:
22:e8:bf:35:ce:58:eb:b8:01:fd:d1:3c:59:e0:53:e3:7d:1f:
f0:12:ab:9b:36:e1:e2:88:fe:e3:fa:1c:5c:f1:9f:59:66:6c:
fa:f5:c2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:24 2026 by rpki-client