Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: 2KwWDo4phj/ZJDS8JDpiV/XuZb/X+vrQcAyKvXBSk10=
Subject key identifier: 22:EA:64:6A:1A:00:A5:6A:17:39:4A:A1:BC:20:1B:A4:4E:4E:21:3F
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 01A17B163846C51EEF534CC6B89D91C874AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0688
Signing time: Tue 27 Oct 2026 02:00:16 +0000
Manifest this update: Tue 27 Oct 2026 02:00:16 +0000
Manifest next update: Wed 28 Oct 2026 02:00:16 +0000
Files and hashes: 1: EcUtNVkTOi3EHBnQtghPEHrJEZY.roa (hash: GXsobrevmwlATTbR+PgJl7ZZUb6khqpMkBW74Ix7biA=)
2: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: zg72IVur36qyBqUZedbKfKSFuWbOsmWNHyvvIwvcXzs=)
3: eEnsRD4MkS42ZQFP4tBVSY_su1Q.asa (hash: 24Fjo/JFr8frVKzI4FqGk7wyikPxymdrCMtvdm5CZvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:38:46:c5:1e:ef:53:4c:c6:b8:9d:91:c8:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Oct 27 02:00:16 2026 GMT
Not After : Oct 28 02:00:16 2026 GMT
Subject: CN=22ea646a1a00a56a17394aa1bc201ba44e4e213f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:92:96:ca:fb:a9:96:f8:97:5e:ac:34:3d:
16:cc:af:bb:8d:c5:af:e7:af:9a:60:34:55:01:c0:
5c:db:3f:36:5f:f1:36:f0:de:f0:5f:4f:fe:50:4e:
32:f1:4d:7e:a7:ff:b6:f1:04:8e:89:b3:3d:a8:32:
0d:34:c8:59:a6:4b:11:8e:75:a9:ff:2c:0c:60:73:
77:fc:f7:71:9b:0c:85:c9:e6:e9:29:0f:f3:1f:6e:
f4:cb:bc:46:c3:43:ce:1d:05:82:eb:0e:4f:25:12:
64:f9:2c:e5:c8:5e:11:aa:06:ab:ee:39:a9:c3:6b:
a6:dd:f8:a3:49:22:f7:51:f0:c9:19:ab:99:e6:cb:
e4:f8:87:d6:4d:e3:a2:74:fd:8c:22:8a:23:68:c9:
bd:5a:5e:82:fc:9a:34:54:d7:6d:7c:19:f7:4c:a3:
27:d6:0d:c6:3e:e3:41:3c:2c:ef:01:10:85:ac:6d:
a1:a6:ab:cd:62:63:61:50:b0:3b:1e:ab:8e:70:86:
44:83:a7:e6:a4:7c:cc:3b:77:ef:2d:39:25:99:f6:
7a:b5:83:5c:6f:c5:46:a8:df:ed:74:c4:51:7a:3d:
1f:08:fc:79:31:5c:cd:f8:75:43:cc:0b:e6:d0:4c:
0c:e1:c3:c8:5c:37:2f:10:53:ed:eb:b5:66:02:f2:
0c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EA:64:6A:1A:00:A5:6A:17:39:4A:A1:BC:20:1B:A4:4E:4E:21:3F
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6c:b5:18:0d:4a:c9:7f:95:3a:64:97:f0:3e:60:0b:ea:2e:
00:7e:1d:fa:82:07:2f:68:f5:fc:c2:67:92:e0:fb:20:95:11:
8f:a2:ac:82:93:3d:b8:35:00:d1:8e:27:3f:c9:64:64:56:e6:
81:d3:23:0a:07:39:b7:55:8f:5d:cf:53:10:a7:2d:2a:e2:f5:
df:cf:4c:b5:65:f0:62:e5:dc:fc:db:0f:25:32:3d:ab:02:6a:
01:49:e7:2a:ab:63:ca:bd:6e:c0:8b:3d:e7:ae:b2:6c:9a:2a:
03:74:20:c5:66:66:fc:12:ca:1f:31:57:7a:39:30:f5:54:a7:
c6:0f:21:66:51:68:30:8a:21:f7:cf:7a:68:b5:bb:29:3e:e0:
fc:e7:42:66:cb:16:2a:39:cd:bd:8b:29:bf:0b:4c:4f:b8:5a:
7d:2c:79:3a:7a:72:51:24:7e:7b:ca:54:a9:99:0d:ab:e1:0c:
d1:e7:c7:08:99:fb:d5:36:8b:67:57:4f:4f:92:37:bb:f0:af:
eb:d0:4e:c7:b3:8a:86:f1:6b:8a:cd:77:18:a8:4c:41:3c:0a:
e4:1b:d8:58:e0:55:34:96:c9:8a:aa:1a:2d:6a:3b:88:b2:35:
ea:01:46:52:b3:5f:fc:b4:f6:6f:80:fe:2f:64:13:65:17:b0:
26:87:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:58:06 2026 by rpki-client