Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
File: C9MR-KZ36gSWjt3jRk-zMmDw3io.mft (raw, json)
Hash identifier: 9tt7vvVOMR2djk7Rychn7pdxqH0S501kXh3ZLUR9B5Y=
Subject key identifier: EA:AF:62:D7:18:8E:1A:FA:C2:8B:15:B8:E1:C0:0C:CD:DD:B5:A9:D0
Authority key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Certificate issuer: /CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Certificate serial: 01A0C47C883C7BF08C2644415FE2AE69A63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
Manifest number: 0115
Signing time: Mon 21 Sep 2026 15:01:30 +0000
Manifest this update: Mon 21 Sep 2026 15:01:30 +0000
Manifest next update: Tue 22 Sep 2026 15:01:30 +0000
Files and hashes: 1: C9MR-KZ36gSWjt3jRk-zMmDw3io.crl (hash: qw+q5zaAWmEVctS2CGiI3KQMeaPITKeixw+LYBvb9dw=)
2: IjhSeXDwvusbQcjhrnsKrkqMjMs.roa (hash: WM9UbddM+SxZstTFU66phFX+LJopIyVe8Pc+BnGorDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:88:3c:7b:f0:8c:26:44:41:5f:e2:ae:69:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Validity
Not Before: Sep 21 15:01:30 2026 GMT
Not After : Sep 22 15:01:30 2026 GMT
Subject: CN=eaaf62d7188e1afac28b15b8e1c00ccdddb5a9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:80:2a:59:db:5d:a5:ec:aa:24:ed:d3:e2:
2c:a1:5d:2b:ab:28:65:78:5d:09:ce:01:2d:9e:ce:
d9:7d:b0:b2:bc:9f:82:1c:52:40:35:bd:81:03:fd:
a1:a7:13:98:fb:90:ed:01:e5:3c:97:44:3e:50:a1:
2d:b1:4b:27:a0:71:da:d7:59:c3:44:66:01:0e:e1:
86:25:b1:68:13:b4:b9:30:23:3c:b2:64:7b:f2:cb:
ea:65:a2:c0:a5:6f:50:a0:23:7f:1f:56:75:50:5e:
6d:c1:8a:03:ad:13:61:fe:d8:bb:06:45:d1:37:4a:
d4:65:db:7e:e0:46:4c:3b:47:a4:ae:75:d9:58:68:
1b:a4:b4:01:eb:5c:c1:c1:42:06:58:44:a3:78:6a:
70:4e:c6:c1:6b:2d:d7:82:79:4d:b9:08:5e:e9:ba:
65:af:ec:30:ce:01:9e:de:02:d8:21:40:0f:2c:80:
9f:52:dd:96:74:fe:f5:a7:35:f2:82:84:47:cd:e3:
56:74:94:29:86:3f:b0:f5:55:fb:1a:67:c1:fa:63:
55:1c:7a:3a:e4:06:93:cd:0c:1e:24:ef:71:7b:b3:
61:9b:cf:e7:aa:6d:71:dd:1e:c3:ad:f1:82:db:e2:
26:8a:41:db:0e:9e:97:f0:eb:7d:17:c4:ac:6e:0a:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AF:62:D7:18:8E:1A:FA:C2:8B:15:B8:E1:C0:0C:CD:DD:B5:A9:D0
X509v3 Authority Key Identifier:
keyid:0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3a:27:62:eb:8f:22:da:9f:c9:9a:26:73:db:f4:d3:95:20:
96:35:70:83:01:55:05:f2:fa:ac:58:28:4d:05:a8:f9:b5:79:
b0:18:5e:24:10:d3:5c:1f:ff:ea:4f:8a:4a:fb:6a:27:ad:c6:
33:72:36:8a:2c:48:8c:86:9c:d3:f7:af:c6:ba:23:96:4c:38:
37:93:6e:49:78:01:2b:d0:16:e3:bb:c3:2e:fa:6b:1a:1c:4b:
da:7c:4b:66:5e:35:98:80:9d:a0:88:b8:65:5d:87:9d:10:60:
af:2f:db:40:46:6c:31:48:a2:99:cb:84:a5:43:08:e0:b6:64:
e4:23:c2:9e:9f:7c:05:12:eb:8f:9b:78:57:45:c2:c1:be:c2:
e2:5e:1a:4a:74:6f:cc:aa:f4:ea:1f:16:51:0a:69:e4:0e:f9:
32:85:cf:79:17:d0:ba:4a:ca:1c:00:27:55:b4:e4:eb:2f:07:
40:4e:79:bf:23:8c:a3:ec:e0:c2:20:a2:c7:4c:9f:22:e1:81:
16:19:6e:1a:0c:11:37:a3:37:1f:56:1a:53:9a:3e:4c:38:ca:
3f:0b:f8:5a:cd:65:fe:d5:95:3a:d0:4b:1d:ef:3e:60:d0:36:
83:85:e5:ca:42:d4:84:68:7e:66:29:cb:b1:c1:1c:63:a1:44:
18:10:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:02:07 2026 by rpki-client