Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: +/kjRr09m7ef1o8fF/+5BD0yJfZDZCdQYmM64Gg8bkM=
Subject key identifier: C7:45:70:E0:7B:DB:EB:A5:CD:86:F9:5A:A1:EB:64:11:28:5D:10:34
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019EB7A0B7F4436E7A98E1D7BDFBF65B4721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 0202
Signing time: Thu 11 Jun 2026 17:00:23 +0000
Manifest this update: Thu 11 Jun 2026 17:00:23 +0000
Manifest next update: Fri 12 Jun 2026 17:00:23 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: pddu1x1TIBoebZ3LxPSodArWFCj3n5tKOkyeskX1YWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:b7:f4:43:6e:7a:98:e1:d7:bd:fb:f6:5b:47:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Jun 11 17:00:23 2026 GMT
Not After : Jun 12 17:00:23 2026 GMT
Subject: CN=c74570e07bdbeba5cd86f95aa1eb6411285d1034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:d6:fc:67:56:df:7d:8d:3b:f2:93:a0:57:
c7:47:d5:f9:fb:b7:3f:0a:63:30:be:0f:dc:82:c3:
77:57:2f:99:0c:af:83:46:29:7c:d5:25:43:27:79:
1b:06:0b:3c:a7:4c:68:04:55:37:9d:a8:ae:41:2a:
1a:d4:5a:72:cf:d8:35:2a:19:60:68:ed:61:f4:4c:
df:75:02:27:e5:41:4f:a8:7e:ca:17:0f:a5:5c:7d:
b7:75:6e:cf:e3:13:02:25:99:42:2c:d4:44:f0:89:
71:b9:3d:cc:e8:65:b8:df:5b:5d:a4:37:bb:33:ba:
04:78:2c:d2:93:85:b1:8c:87:0c:13:18:08:28:91:
94:f7:50:76:b7:9e:7f:85:74:1e:c2:f6:e0:91:77:
3d:88:12:86:a3:78:b9:8d:45:f6:23:2c:88:d3:71:
d3:b8:4b:1c:0f:8e:73:2c:d7:de:4f:58:5e:83:b3:
81:75:46:b4:f7:a3:34:05:2d:12:28:0d:3b:ee:53:
e0:10:2b:9a:23:ab:03:83:cd:58:ae:5b:ca:98:47:
bd:0b:e3:06:39:bb:08:75:2d:a2:70:3e:9b:76:a0:
94:f1:10:36:6d:27:3f:08:06:e3:1a:f6:cd:a7:1b:
95:ce:27:0b:f5:ee:7e:d2:45:2d:4b:19:f7:47:c1:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:45:70:E0:7B:DB:EB:A5:CD:86:F9:5A:A1:EB:64:11:28:5D:10:34
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:8c:38:10:f7:92:15:c2:17:a4:1d:39:31:ad:62:17:3f:46:
07:dd:bd:3f:61:94:3f:c5:0c:00:dd:db:44:b1:e2:96:55:79:
45:b9:39:eb:95:83:8f:63:14:6e:ba:4d:a4:c2:bb:0c:76:e3:
bf:0c:84:1c:bf:29:fd:8e:48:ef:7b:f0:c0:31:0c:98:d6:76:
fb:ae:c2:b0:7d:3d:c8:a9:05:9c:3f:df:c8:2b:e5:92:fd:1b:
0e:0c:c8:2d:c2:40:27:98:06:93:c5:c3:c1:53:f7:69:7f:3d:
e0:63:fc:65:52:c5:26:00:99:90:ef:d9:4c:ae:c4:0b:e0:95:
58:68:85:98:1b:e2:38:7d:89:28:be:5a:f4:cb:92:4a:16:58:
77:c9:8c:29:c5:b4:cf:d8:22:5a:3d:5a:7e:21:b6:db:59:9f:
e6:b2:37:27:5c:a7:6b:33:1a:17:d2:91:37:4d:f2:ad:68:0c:
77:12:cb:0e:91:11:c6:c8:2f:2c:0a:60:fc:16:ea:6b:c1:74:
77:2b:79:e4:66:7f:5c:92:45:b7:09:b9:f0:92:cf:a6:25:43:
e4:4a:bf:d3:c4:26:1a:a7:79:0c:1a:1d:50:ce:4b:ae:6a:e1:
42:72:a9:f1:c8:38:6b:b8:c4:bc:b5:03:74:26:6e:19:7c:69:
db:20:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:24 2026 by rpki-client