Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: MDgTdSUYwliR9CIGzuXkBq9qy9MEvxCCt7DiBgU1L+M=
Subject key identifier: C7:28:50:84:C7:A1:37:70:E0:4B:EF:19:8D:EF:BF:57:DB:C3:0E:54
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019D99992809BEAFD1A622BA03E97D8392CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 04:00:44 +0000
Manifest this update: Fri 17 Apr 2026 04:00:44 +0000
Manifest next update: Sat 18 Apr 2026 04:00:44 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: 8TvNAZ6gpNQXr6cPpnmC4iMltipeRmDh4d3aIRRuiFw=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:28:09:be:af:d1:a6:22:ba:03:e9:7d:83:92:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Apr 17 04:00:44 2026 GMT
Not After : Apr 18 04:00:44 2026 GMT
Subject: CN=c7285084c7a13770e04bef198defbf57dbc30e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:09:bc:c4:88:0d:c4:00:1c:96:09:a5:e0:cb:
52:d7:f0:3e:76:72:d5:ba:73:a1:82:14:de:78:33:
be:00:e0:5e:8a:25:20:71:2d:de:d2:1f:b6:7c:50:
ea:77:9e:ca:63:60:20:a2:9a:bc:6e:27:08:44:d7:
0e:53:2d:01:4a:30:ed:80:16:aa:87:c7:d2:42:fa:
f2:9f:a4:f8:71:c2:42:86:b1:ef:cc:59:8f:14:f9:
d1:88:34:2f:17:78:24:97:6b:6a:bf:9e:a2:b4:80:
1c:34:0e:0a:a7:a3:60:7a:74:ce:c2:a8:0e:52:60:
69:09:3a:64:4c:7a:45:df:59:83:07:1c:9a:b0:ed:
9e:a4:79:16:19:32:38:cf:93:09:96:32:de:9f:08:
ba:e3:61:2d:14:cf:36:ea:46:75:c3:51:7c:a5:7d:
41:eb:b4:a0:74:e2:c9:a2:35:29:68:5c:24:f0:37:
32:e1:a5:91:42:52:f2:72:37:ef:79:d1:bb:88:11:
51:6e:19:ea:4b:b5:a0:47:ba:9a:63:1e:d8:8a:fc:
6d:4e:ab:cc:26:9a:fa:22:c2:36:2a:3d:b8:7a:7f:
c0:54:8a:9d:f9:78:6e:bb:9e:c7:99:67:97:45:38:
cd:c9:a5:47:52:06:f7:9d:c7:c8:24:f0:80:a1:89:
de:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:28:50:84:C7:A1:37:70:E0:4B:EF:19:8D:EF:BF:57:DB:C3:0E:54
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b6:1d:dd:f9:dc:4c:f3:ca:2a:f7:41:7a:79:3e:66:eb:07:
5a:b8:44:42:45:6e:50:21:b8:3a:32:21:1e:d1:29:32:82:be:
63:b7:b9:b8:d5:26:a1:f9:35:c7:9b:aa:5c:9b:25:d6:f0:e7:
a7:d5:22:a6:ac:24:88:37:73:82:50:d7:ff:b0:5b:94:ec:c8:
5c:62:ea:97:a6:5b:37:89:c0:b3:32:50:31:83:bc:3f:17:38:
20:06:b3:48:1e:63:dc:ca:fc:1f:4b:27:2d:e7:91:68:05:69:
c5:52:28:5c:92:f9:9a:0f:8d:9a:97:0f:e8:cb:e4:69:1a:ce:
23:7a:3a:d0:e9:7e:06:ba:11:e9:8d:1c:e7:48:d5:83:b0:04:
0a:02:e0:a7:5b:97:c9:72:cc:b2:7f:37:ee:1c:ed:91:3e:a3:
23:78:68:9e:5e:53:fa:c4:b1:bd:59:5f:e3:fb:ac:ef:87:5b:
99:03:31:6f:be:d2:40:aa:30:d4:f3:17:0b:26:b8:b1:0b:c6:
33:80:70:5b:f3:e0:0d:6e:eb:18:ab:a6:d3:59:4e:03:2e:84:
a9:fc:ba:b3:14:6a:19:26:02:21:c4:7f:c5:2f:3e:46:8f:a4:
79:53:ad:e3:25:7f:3a:88:15:66:13:8b:61:41:36:bd:9a:90:
a3:14:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:58:32 2026 by rpki-client