Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: dOSF0/flgsSGE6NB9Y9lEpBfwM+WunPzF/itRrQgSdw=
Subject key identifier: 7A:11:7E:22:E1:8C:02:94:DB:24:41:80:55:71:D4:37:DD:3F:EB:26
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019DCDF4D34C19740D0E558A06037DD0D496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 0189
Signing time: Mon 27 Apr 2026 08:01:07 +0000
Manifest this update: Mon 27 Apr 2026 08:01:07 +0000
Manifest next update: Tue 28 Apr 2026 08:01:07 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: gEp6rst/uDD1IeL/Csbe+/OiBP+jV/EyYhdzoZbBKR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:f4:d3:4c:19:74:0d:0e:55:8a:06:03:7d:d0:d4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Apr 27 08:01:07 2026 GMT
Not After : Apr 28 08:01:07 2026 GMT
Subject: CN=7a117e22e18c0294db2441805571d437dd3feb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:bc:f4:57:bb:19:b2:f8:44:6e:ee:50:75:
83:1b:d4:a1:86:5e:16:da:61:6e:b7:d8:57:ee:90:
04:71:d4:15:15:ae:5a:4d:95:0f:d1:85:ed:f1:2a:
35:30:c2:97:08:e9:61:b0:f9:b3:54:2a:b0:6d:cc:
2b:0d:6c:9b:89:a9:f5:29:56:84:ec:41:cb:e8:f8:
4f:fb:fa:da:5c:d2:0c:87:d7:9e:71:74:50:15:7b:
cb:07:96:98:e6:52:38:b1:7b:54:86:37:61:5f:b3:
73:d5:37:2d:c7:44:be:bf:d7:30:19:1a:53:c5:71:
d1:5d:22:f8:65:28:1a:14:d7:b8:8a:a6:73:ac:96:
6b:f5:7e:2f:63:7f:ef:53:72:15:f8:3d:b2:7d:2f:
fd:bd:bc:69:ff:de:70:fc:4f:c5:8b:df:a9:fa:05:
1f:f0:bc:31:64:ac:99:85:09:78:33:98:e3:38:c2:
c1:0a:2c:a8:3a:d1:07:7c:84:83:8d:de:6b:e3:c2:
b8:28:96:db:29:1e:a6:ee:e9:63:b3:d9:b3:7d:ba:
55:ae:3b:5c:74:1d:3b:66:04:38:5e:3a:6b:ec:f3:
ec:fe:60:e7:77:c1:f5:42:32:f4:06:e3:be:d5:59:
97:bb:66:fb:da:fe:77:46:93:71:b0:a5:ab:d7:75:
4e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:11:7E:22:E1:8C:02:94:DB:24:41:80:55:71:D4:37:DD:3F:EB:26
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7c:dd:da:60:e0:1c:fb:51:6d:d1:9e:e7:ab:a7:03:96:4d:
45:d4:fa:14:4e:4e:f0:57:ba:89:8c:a4:8b:6a:24:2c:3b:44:
aa:03:a0:c7:2c:98:b5:ff:3c:76:87:9d:04:6f:bb:93:10:65:
3a:36:0f:c6:2e:e6:ba:40:e8:0b:37:12:71:e9:af:96:7b:79:
69:07:9e:a8:95:ef:82:b0:8b:6d:46:c2:ea:6d:89:d6:83:af:
42:31:ae:fd:96:75:b7:06:ef:6b:7a:eb:2b:52:47:34:1d:ba:
67:45:34:ab:a8:33:66:f2:0b:56:8c:bf:24:4c:5d:74:33:19:
9d:8c:60:c5:a9:a0:e4:80:dc:98:9a:91:fe:5d:ba:aa:a3:92:
85:92:53:f7:4f:db:fa:3a:05:b6:df:e4:d5:31:08:75:bd:ca:
a6:50:24:a0:6c:11:e8:2b:31:fc:44:4d:50:63:59:74:30:91:
7b:55:81:aa:2e:28:13:ce:6a:44:2a:4c:97:b6:83:d9:c2:e9:
33:27:ac:5d:eb:62:61:2e:ac:13:b0:6d:d4:9e:f6:69:9f:42:
29:21:cb:e5:12:b2:6a:9d:98:df:c7:a2:00:78:33:a8:e7:82:
1d:50:b9:a9:8a:e3:d2:a3:73:d9:0a:78:38:d2:0c:b4:f9:c9:
78:64:cb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:43:48 2026 by rpki-client