Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: /96neuPEL3uKNMSptn9zoNDBeZlU0iXENeOYpQmr7WM=
Subject key identifier: 4B:E7:3B:9E:73:D2:73:53:42:9B:3F:DA:F2:84:CB:DD:1F:0B:12:B4
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019CAC104BC13FB0A4AE42C20A6F282744C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:01:14 +0000
Manifest this update: Mon 02 Mar 2026 01:01:14 +0000
Manifest next update: Tue 03 Mar 2026 01:01:14 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: uLuQYMDnyuy/eZmoy34AEUNWCuiNR8b0oI3pup2ttLY=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:4b:c1:3f:b0:a4:ae:42:c2:0a:6f:28:27:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Mar 2 01:01:14 2026 GMT
Not After : Mar 3 01:01:14 2026 GMT
Subject: CN=4be73b9e73d27353429b3fdaf284cbdd1f0b12b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ac:25:a7:ff:74:72:1f:34:f8:53:85:fe:d5:
5d:71:db:7b:3b:c5:9e:bb:2b:a9:a1:83:9a:13:d2:
06:74:7d:73:c0:1b:69:5f:5f:3e:09:df:6c:85:1f:
14:bb:66:ef:a1:78:0c:55:c4:91:76:84:0a:f9:8a:
cd:ff:a7:9c:89:0c:a0:64:aa:d4:1e:ae:88:44:ef:
fd:9b:e4:87:8e:85:3b:a1:d3:8b:30:87:83:11:d4:
73:56:b4:d1:3e:70:70:ab:0d:3d:df:9d:76:f8:35:
67:b2:dd:11:bc:c0:59:d9:27:c6:fc:96:7f:f9:9b:
61:f7:4c:80:9b:51:58:9a:34:6c:b2:c6:b4:0c:12:
14:6d:2f:a6:09:ea:4d:14:67:59:d6:c6:01:af:71:
2e:9f:85:9f:d5:09:cf:86:bf:12:60:62:3e:f7:22:
f6:40:62:7e:0e:06:2f:73:a7:35:56:1f:b1:24:bd:
45:33:d6:47:52:2b:83:8a:77:7c:8b:8c:ef:05:7c:
40:1d:2b:ab:aa:21:41:0a:72:b2:aa:e5:6d:ff:8b:
44:d2:09:c8:5e:a2:90:f2:fb:79:d0:d9:ad:9b:16:
d6:06:dd:33:0f:89:61:7d:fb:d7:51:80:71:d1:07:
17:c2:65:b2:b8:19:c9:6f:85:1e:36:c1:94:a8:6d:
c5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E7:3B:9E:73:D2:73:53:42:9B:3F:DA:F2:84:CB:DD:1F:0B:12:B4
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:37:a6:8d:07:02:5e:fa:be:8e:3a:75:e5:7a:f8:37:cf:18:
45:b3:de:3a:c7:f6:6b:d7:7c:d9:76:76:9d:a8:52:b4:64:37:
a1:6c:25:18:35:49:4e:29:08:06:38:d6:d0:70:bd:14:1e:e0:
8a:df:5e:a8:ba:0f:53:70:50:06:ff:ca:fd:e6:4d:3c:8b:e5:
33:cb:0a:4f:fd:d7:ca:e5:72:d2:98:08:a8:b1:09:28:9f:aa:
53:a9:f7:04:e7:17:d2:dc:5b:1a:93:e3:19:70:01:57:82:67:
d5:89:94:4b:43:bb:dc:cb:b0:4d:8f:bb:22:73:2e:bb:4a:70:
11:73:8e:30:4a:18:cc:be:5f:42:c5:c1:31:a0:25:c1:5e:d3:
7b:68:c1:a8:47:9c:a8:07:06:c7:c4:c6:ac:55:cd:5c:29:4a:
40:c8:b4:b5:0b:16:af:c0:21:eb:fa:b0:77:11:53:9d:29:9b:
bc:bf:d2:07:7c:47:33:ae:e5:eb:fe:b7:a2:49:e3:ab:e2:a8:
5e:a2:b5:d3:89:0a:b7:52:e8:5a:d1:96:87:c7:0a:c7:ec:27:
87:17:4c:54:14:63:e0:c6:09:99:0d:82:4d:20:1d:f1:30:30:
c3:5a:44:96:ce:29:85:69:2f:4c:5a:be:31:64:7e:29:b2:dc:
24:ff:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:49 2026 by rpki-client