Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: hr2R8D+JN+iyoWlRekY5hWrGdAZK34rOdF2HzgvuvCs=
Subject key identifier: A1:A6:CD:89:5D:61:0B:B2:8D:75:40:1D:E7:AA:AA:2A:BA:95:36:64
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019FA14DD47102578DB1241CDDA1200E6CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 027B
Signing time: Mon 27 Jul 2026 02:00:59 +0000
Manifest this update: Mon 27 Jul 2026 02:00:59 +0000
Manifest next update: Tue 28 Jul 2026 02:00:59 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: Ul6nljk7l06+bvkj+neVTLFwCKkG3//Y3ObzPfPb7Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:d4:71:02:57:8d:b1:24:1c:dd:a1:20:0e:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Jul 27 02:00:59 2026 GMT
Not After : Jul 28 02:00:59 2026 GMT
Subject: CN=a1a6cd895d610bb28d75401de7aaaa2aba953664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:86:38:41:ec:27:35:d0:b5:db:a2:b3:51:
2a:28:4b:e5:ba:e2:62:ea:a6:e9:6e:fb:af:db:c6:
d8:86:e2:fc:2b:38:a9:1d:3a:37:e7:e1:f5:be:a4:
c9:fd:e7:cf:ba:d8:29:4f:16:d4:2d:da:02:08:ca:
90:2e:d6:0f:b0:70:46:2e:43:1b:67:21:e9:f7:1b:
e3:8d:a1:a9:0d:40:1a:9d:19:ca:fa:0f:3f:84:df:
5a:34:22:1d:ce:52:d4:b2:00:46:e8:ed:71:78:76:
4b:ed:99:23:cc:f2:15:91:72:dd:52:1d:9d:ea:31:
a4:79:d3:e0:11:1a:ce:4e:cb:47:d5:55:28:54:2c:
82:bd:77:7d:ba:31:45:db:ed:1d:81:e8:8a:81:cd:
9d:d3:a5:25:9b:08:0d:d8:83:9c:c5:2a:cb:9f:ca:
c8:e8:1a:5d:70:22:d1:12:72:4a:b9:69:de:f3:88:
18:ef:bb:bd:57:85:58:21:07:6f:46:39:a4:80:67:
c4:b4:89:32:1a:d2:ef:fd:68:18:d4:85:09:96:f1:
f3:66:45:62:4d:34:ca:c0:b9:cd:b3:77:86:e5:89:
7a:d9:2b:be:7e:1d:93:bd:06:f3:ee:31:6e:d8:00:
04:89:dd:a5:7a:a2:89:76:f1:4d:db:e3:f6:55:13:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A6:CD:89:5D:61:0B:B2:8D:75:40:1D:E7:AA:AA:2A:BA:95:36:64
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ef:19:52:1e:64:cc:7b:04:b3:21:c4:7a:a7:eb:b4:81:89:
cf:10:dc:9a:c6:76:b9:2e:7a:f8:cf:91:b6:ab:2d:e8:74:78:
da:99:33:4a:80:22:d2:c6:7b:99:38:a4:a4:2f:00:5b:0d:36:
d1:93:cc:67:f2:f1:a1:fd:39:7b:06:aa:e5:d8:bd:13:98:04:
2a:94:0b:82:be:a6:aa:96:79:29:ac:0b:4b:ca:de:fa:e1:17:
94:97:6a:8b:78:37:35:a3:d9:25:54:14:e0:af:e8:c8:55:42:
46:a7:a3:a3:68:47:30:d9:9e:71:99:ad:e1:05:52:4d:e0:50:
6b:e1:15:7c:71:13:71:eb:32:61:58:3a:31:60:af:86:07:9b:
44:52:29:87:98:91:1b:97:7d:7b:ec:2a:98:9f:99:b1:0c:a5:
c3:b8:0a:77:66:48:cb:29:1a:d5:62:70:a1:91:70:c2:09:3e:
76:70:0e:ac:f0:68:6d:32:d3:69:e1:b4:d7:1f:1d:d7:a0:b7:
6a:99:d1:f8:ea:b7:04:e9:ef:ff:63:b6:25:b9:8e:0f:43:c7:
dc:9e:4c:ce:c1:0c:4f:2c:65:92:12:09:fc:fc:2e:c4:63:41:
e4:35:30:c7:12:ca:22:22:76:bb:68:dc:1f:07:7e:04:8b:fb:
63:19:2e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:10:49 2026 by rpki-client