Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: u6h6a9PUY4xgsFemQBSt/uYwZ94eNkYR+DMA193SF+Y=
Subject key identifier: 91:A0:A5:5B:50:BB:25:6A:E2:FB:97:BE:B0:1E:08:01:B6:9A:26:7E
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 01A0C2C46AA87B73DA7B1B23E88783896147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1A63
Signing time: Mon 21 Sep 2026 07:00:47 +0000
Manifest this update: Mon 21 Sep 2026 07:00:47 +0000
Manifest next update: Tue 22 Sep 2026 07:00:47 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: 73fKgnczWN4zmoufKwWbX7GULVIbfOHmCLxseL9vkIk=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:6a:a8:7b:73:da:7b:1b:23:e8:87:83:89:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Sep 21 07:00:47 2026 GMT
Not After : Sep 22 07:00:47 2026 GMT
Subject: CN=91a0a55b50bb256ae2fb97beb01e0801b69a267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:7d:a0:12:85:40:ef:7f:3a:9f:d8:c1:69:
56:c6:71:88:83:cd:d3:ef:d1:5b:1e:1e:84:6c:a7:
2b:1a:b0:8f:73:3a:03:e8:04:b3:51:30:29:82:28:
6c:c4:db:f1:f5:09:26:e1:aa:53:97:c9:34:ce:f1:
8a:f1:34:84:36:63:62:fd:74:6d:f1:3a:d3:95:0a:
22:db:da:e7:34:51:ed:e9:96:f4:73:80:33:b2:42:
ff:66:b1:7a:61:43:1b:dc:4f:9f:5b:b0:83:b1:1a:
59:a2:3b:9c:69:ca:9d:c5:95:ad:71:b0:4a:8e:7f:
5f:ce:8c:e3:32:25:7f:22:c1:4a:25:ee:1a:90:53:
15:c9:bf:71:61:a6:ab:78:79:62:b9:2f:d5:9b:16:
3a:d9:29:ba:8f:2c:af:21:47:1c:d4:e8:89:af:8c:
02:f1:91:57:b3:63:65:2a:31:7c:6b:7a:0e:9e:c1:
9c:fd:04:b3:46:d2:9b:73:7e:b1:61:34:9f:9e:e5:
85:92:62:b6:fa:b6:f8:63:79:30:45:3c:c0:d8:f4:
0f:98:f1:19:8b:78:5f:e0:06:13:62:bd:2e:94:b4:
48:fb:b1:46:0f:7c:0d:5c:a0:2b:1e:7b:f6:b2:67:
05:d2:5c:94:f7:f3:9a:f6:a3:f0:6f:4e:cf:00:37:
f8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A0:A5:5B:50:BB:25:6A:E2:FB:97:BE:B0:1E:08:01:B6:9A:26:7E
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:28:d9:9e:1f:07:0d:22:65:c6:69:89:7e:6a:66:7f:c5:e1:
6b:dc:f2:f5:29:87:6a:b5:c6:37:fc:a0:7e:cf:a7:62:0f:94:
9a:6b:d0:c0:f8:32:d2:cd:46:f0:86:4c:4a:ec:cd:1c:d7:d5:
3a:29:3b:e9:53:78:ff:15:a3:05:b4:32:45:6a:89:9e:2a:52:
12:bd:9d:45:39:2f:cc:8f:2a:54:35:f9:e1:7a:43:fe:5c:61:
b3:2f:56:01:25:e1:d2:67:2e:1e:1a:7b:da:1e:94:f2:35:ed:
4f:a8:89:16:54:dd:fb:53:56:c5:ec:a2:c2:ce:34:63:30:2f:
a4:f4:37:63:14:75:85:b8:b6:0d:b6:e3:c5:65:c1:ce:7f:49:
d1:b4:9b:64:49:da:44:0e:81:2b:27:86:5d:67:c3:1d:6f:2c:
92:36:82:50:30:ad:80:b7:52:eb:eb:c6:3c:0c:94:8b:4b:f9:
fd:91:e6:30:a6:ee:62:7e:e6:55:fa:06:ab:3d:f3:0a:8c:51:
f3:6f:df:c2:b2:a8:47:dc:54:7f:17:31:e7:35:21:8e:ee:3c:
1f:cc:20:6b:c2:d3:e8:c2:5a:78:51:11:27:6f:e1:b2:54:39:
18:99:e4:35:25:55:3e:33:6b:1a:7a:b9:3e:25:45:e0:1e:c5:
d7:58:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:43 2026 by rpki-client