Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier: DJNrWsLsN2R+KAOd/gv5J9fmIwoE5Rpus89zTu5/2FA=
Subject key identifier: BF:69:1A:F7:5A:F0:DF:D1:BC:D1:67:CE:20:B4:5D:E6:02:2A:91:E3
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 019CAC46FFFDED1D331F0FDEC9CC17F96CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number: 1840
Signing time: Mon 02 Mar 2026 02:00:59 +0000
Manifest this update: Mon 02 Mar 2026 02:00:59 +0000
Manifest next update: Tue 03 Mar 2026 02:00:59 +0000
Files and hashes: 1: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: C8oMCmVQmWEX+25pmTrT1gcdhFRXTE7+z5noqhPTngQ=)
2: jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa (hash: p6WX3Hu0x5KT7vdzzBlcWjdetobjNczy8S7l0BXnNGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ff:fd:ed:1d:33:1f:0f:de:c9:cc:17:f9:6c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: Mar 2 02:00:59 2026 GMT
Not After : Mar 3 02:00:59 2026 GMT
Subject: CN=bf691af75af0dfd1bcd167ce20b45de6022a91e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:e9:00:bd:be:b6:bf:a6:92:44:3d:11:23:
e2:52:2b:b9:9b:7e:92:e8:d6:03:58:0e:8f:7e:8c:
04:45:6c:2e:af:f1:d9:ef:4f:ac:a5:bf:7a:27:a8:
c8:61:49:67:e0:9b:91:7c:61:7f:82:9b:95:ff:53:
9f:34:a9:a0:37:68:cb:72:75:41:26:fe:14:34:d1:
c5:36:03:67:46:ff:8e:6f:5e:52:86:34:f5:a9:95:
a9:db:21:45:45:7c:a5:9c:2b:37:9c:9f:f6:0f:2a:
98:49:b2:33:e2:01:80:5d:0a:80:57:1c:28:6a:cd:
0f:ba:f5:b8:1c:49:4d:87:82:4c:bc:f5:90:5f:a7:
a3:97:fb:a0:21:fe:ee:c7:67:e5:7c:9d:21:1e:ec:
80:9b:e1:df:c5:e1:44:26:11:ec:88:0b:a1:ed:0f:
7d:7b:1e:16:3e:36:4b:66:3d:6d:2f:7b:90:e8:73:
24:cb:96:b6:f9:13:85:df:59:15:84:5e:c1:37:47:
89:5e:4f:2b:5a:e3:9b:97:87:8e:f8:75:1f:08:04:
fa:3b:4b:a7:57:2f:39:49:35:4e:0a:36:38:1f:61:
4f:43:74:bc:5f:97:d1:82:29:40:6b:54:9d:a4:5d:
4d:10:44:54:ec:35:6b:50:d9:cb:ee:1d:69:19:95:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:69:1A:F7:5A:F0:DF:D1:BC:D1:67:CE:20:B4:5D:E6:02:2A:91:E3
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:2e:c6:e7:c2:de:20:e2:7b:04:22:c8:b7:23:d8:86:5c:
25:e1:4e:fa:7f:c2:40:53:86:fb:7c:9e:e7:3e:54:8f:fc:ca:
b1:ba:4d:9c:30:55:6f:9b:51:8d:ed:e7:dd:bf:81:6e:7e:40:
15:d1:fd:45:e8:fc:4b:6d:e5:c0:a8:d9:92:7a:b0:aa:dd:2d:
75:3a:7b:30:7f:36:e7:bd:49:4f:f5:14:6a:42:a2:81:c2:36:
e0:81:40:cf:c7:17:e9:ae:69:65:f5:1d:62:51:45:94:85:7d:
a4:2e:28:b5:89:63:53:4e:71:db:9a:88:6f:5d:33:31:7f:55:
a9:b1:f2:82:a7:ee:2a:f0:2b:91:76:7b:68:88:0e:24:67:4a:
4b:31:f9:ed:21:fa:06:fe:bc:bd:e2:be:56:2d:bf:cd:6b:d5:
b0:ae:c2:dd:1a:97:d1:99:5f:c6:5d:ff:d7:d1:07:9d:ef:18:
2c:13:09:d9:3a:b8:a8:bd:dd:2c:b5:07:10:19:c8:4a:db:4e:
49:95:64:4c:5f:8e:6e:ee:cb:18:24:de:2f:bc:17:76:86:c0:
4c:ea:3a:07:3a:0f:a0:a5:7e:1a:0b:11:8f:07:85:65:8d:34:
56:7d:73:2f:ec:34:08:8b:3d:85:fc:98:7b:65:e1:c8:7d:98:
97:17:3f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:55:42 2026 by rpki-client