Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier: Fp55sysglYDzLLVPzrp4/YudcKIk3QoZ/+R3PCeY70c=
Subject key identifier: E2:14:51:0B:FE:04:F7:9F:C2:AF:E9:F4:1E:FC:40:7D:E3:15:E6:12
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial: 019DCC066D633E587420AC2B9B3EEE34CD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number: 0188
Signing time: Sun 26 Apr 2026 23:01:06 +0000
Manifest this update: Sun 26 Apr 2026 23:01:06 +0000
Manifest next update: Mon 27 Apr 2026 23:01:06 +0000
Files and hashes: 1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: kXaQpy4aGqGWc9P4nj1OpfCnXtypqPitHUbLB6ZQ+W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:06:6d:63:3e:58:74:20:ac:2b:9b:3e:ee:34:cd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Validity
Not Before: Apr 26 23:01:06 2026 GMT
Not After : Apr 27 23:01:06 2026 GMT
Subject: CN=e214510bfe04f79fc2afe9f41efc407de315e612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:df:ac:53:3e:35:7a:01:b5:60:98:2e:76:
ea:ce:30:aa:f1:28:e1:ab:b2:ef:13:b7:af:4a:79:
cd:fa:d0:12:12:7c:1c:2f:29:4b:b1:95:94:11:7b:
d1:10:ab:3e:d2:81:57:97:d7:e0:27:da:4f:1b:15:
87:1b:d7:49:8b:63:6f:78:16:08:c1:af:ee:a3:e0:
40:fa:d8:31:b5:f7:a8:eb:af:ff:b8:12:a2:31:42:
fc:c3:91:28:22:eb:9e:13:37:31:ab:b6:f5:62:29:
89:43:d7:8f:3d:67:d1:09:d9:14:ce:ca:3a:fd:2d:
12:7c:c3:90:c8:94:a4:8c:06:b6:1c:9c:3c:3a:6f:
c8:63:70:00:f1:c7:a4:da:a9:2d:1e:5b:88:8b:c6:
3d:b5:78:65:7c:aa:8a:9e:71:20:d0:3d:a1:84:30:
74:c5:51:35:5d:6d:80:a3:3d:dc:ff:03:72:63:23:
b6:1c:9c:7c:0b:84:e6:ba:dd:88:b4:41:ee:f0:00:
4e:a6:07:eb:ad:de:31:38:05:d7:cb:40:59:4f:bf:
db:05:4e:5b:c8:1d:5f:79:84:b5:4b:36:fe:6b:52:
47:bb:4f:37:35:c8:09:4f:f1:ed:0e:a5:69:20:5f:
f9:c1:4e:ce:87:05:fb:e8:be:7c:9e:ed:9b:c8:a5:
c5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:51:0B:FE:04:F7:9F:C2:AF:E9:F4:1E:FC:40:7D:E3:15:E6:12
X509v3 Authority Key Identifier:
keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:ac:61:d6:1d:65:5b:fb:73:3b:df:77:86:8f:89:da:60:
68:03:32:36:23:90:17:83:e2:af:af:16:16:64:35:b3:e4:ff:
33:f1:12:6a:e9:3e:9b:ed:ae:fb:b1:a4:4a:b0:bd:82:78:b0:
ac:04:cf:a0:eb:42:c8:38:97:76:e4:ab:93:d6:8c:b1:30:55:
be:4c:c2:c8:f6:5b:4b:6f:a4:06:a8:b6:d7:68:0c:8e:7f:0b:
26:c4:22:56:ed:14:f9:d2:db:66:29:16:bb:c0:06:6b:25:06:
55:5c:4b:c6:34:47:b4:c7:a0:b4:59:9f:17:f2:a6:c8:5d:1b:
8b:f3:1e:ef:f9:8a:cd:8b:5d:87:60:66:a1:b4:77:dd:b6:6f:
22:69:b9:31:8c:c2:ee:ae:82:07:c9:18:ec:5e:c4:5b:e4:17:
88:7e:a7:23:d5:0b:07:de:de:35:4f:b6:62:81:59:72:b7:ff:
fe:d6:fa:1b:1d:04:1f:5a:c7:ea:6d:2f:94:82:97:4c:34:36:
b4:0a:d9:c7:60:ab:c9:09:5c:2d:61:24:e1:cb:a2:22:be:9b:
11:c7:3d:93:19:2c:d7:cb:ca:28:3b:8c:39:2b:07:4a:46:09:
f2:14:fc:ea:0c:32:7a:8b:b6:86:be:bd:16:19:35:b0:67:d8:
4a:30:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:07 2026 by rpki-client