Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: sZ1OoXGNsd0ur3uhUFvKVDzzFQycvxjmir+zeUGbdFE=
Subject key identifier: 81:24:03:84:D6:65:1F:87:5E:48:B6:C0:1D:6B:DE:89:D4:EC:69:42
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 01A0C556FF18B7F8A06ACE0164AA8365A15A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 19:00:07 +0000
Manifest this update: Mon 21 Sep 2026 19:00:07 +0000
Manifest next update: Tue 22 Sep 2026 19:00:07 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: ULwyf8U/QP4K4yHm6f93DphatM2ZWcRPPrRCCsS+aSo=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:56:ff:18:b7:f8:a0:6a:ce:01:64:aa:83:65:a1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Sep 21 19:00:07 2026 GMT
Not After : Sep 22 19:00:07 2026 GMT
Subject: CN=81240384d6651f875e48b6c01d6bde89d4ec6942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:37:66:b1:d4:c2:f7:0b:7d:cd:32:5a:c8:
65:b2:37:d2:42:51:0f:43:55:bc:76:27:94:30:86:
96:d9:45:b5:bd:29:2a:9e:0e:4b:4b:cc:84:04:52:
4d:c9:d3:1b:35:24:00:ae:67:2f:92:dc:b3:08:aa:
0d:2b:6b:64:b3:7d:92:8e:3a:55:7e:60:67:79:7e:
86:1f:38:79:84:ed:23:9e:fa:08:53:8c:15:a1:fe:
c8:a5:3e:ad:c9:14:6f:e7:08:28:81:ac:a3:cf:d8:
fe:d7:63:3c:55:9b:6b:bd:77:79:92:33:de:ef:47:
75:ea:37:61:cc:bc:4d:77:48:e7:41:3a:4f:e1:8d:
a2:bc:8b:18:b2:56:ba:f1:7c:da:df:84:18:ee:05:
a9:38:35:3e:ad:bd:73:68:f4:39:40:44:18:b2:be:
9d:07:fb:ea:98:83:16:e2:3c:72:6b:41:6c:da:3f:
89:e2:05:7e:70:be:f6:a9:7d:32:07:11:33:41:e2:
53:fc:cd:fe:43:28:c9:94:de:f2:78:2b:7a:21:11:
c0:ab:26:f9:b2:95:01:04:8d:93:03:cd:3a:60:90:
64:4a:08:bd:ae:61:94:cc:7b:58:9d:d6:ec:1a:be:
6e:d8:93:5d:95:1b:c1:55:28:f1:72:4a:8f:f6:11:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:24:03:84:D6:65:1F:87:5E:48:B6:C0:1D:6B:DE:89:D4:EC:69:42
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c2:f0:69:c3:26:56:28:a7:c7:6f:b1:15:9c:71:ab:cc:17:
37:15:47:43:e2:8e:93:0e:ed:3b:dd:51:52:a0:00:b9:0b:ac:
82:e1:0a:75:3b:ad:bf:6f:cc:ba:99:8c:ce:9e:f9:f9:18:21:
dd:17:62:3e:76:76:56:57:cf:b9:e6:cb:59:9a:f8:02:bb:29:
d4:91:70:5b:75:3b:a2:d5:1f:09:c1:f6:1b:ed:a1:74:bb:d8:
72:9e:45:92:06:48:0f:8d:11:fc:91:51:2e:91:27:2c:24:f7:
5f:fa:c7:db:b0:fb:df:24:a9:e0:df:18:36:5c:52:93:37:f7:
70:50:38:2c:5c:dd:5d:f1:72:c1:45:dc:5f:de:32:56:6b:50:
2e:2a:d3:ba:28:22:39:63:dc:c2:2a:3e:80:b6:aa:f1:b3:b6:
5b:67:4e:d3:c5:f6:d4:39:ef:56:01:75:dd:95:02:dd:c7:45:
2f:c8:37:1c:79:a4:db:a8:ae:b2:48:98:b8:f8:d2:fa:1b:51:
52:0e:6b:25:2c:4b:10:0e:f8:67:95:60:4e:0b:e9:18:e7:78:
a3:91:b9:fc:9c:14:67:1b:db:35:ed:cf:af:41:ae:9c:53:96:
04:e0:d1:06:7b:91:00:fb:71:c4:47:e7:44:1a:ae:ef:72:94:
47:66:55:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:34:01 2026 by rpki-client