Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json)
Hash identifier: qmtwjXAtGX5b/7NOO64HJgQeHLjbYJlGPjGQdrqhniQ=
Subject key identifier: 13:95:30:6C:E3:67:2C:CA:CB:E8:27:23:01:90:17:63:EF:95:51:D2
Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9
Certificate serial: 019D3A53FDDD9E11556B8EE9182B098739BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
Manifest number: 0453
Signing time: Sun 29 Mar 2026 16:01:15 +0000
Manifest this update: Sun 29 Mar 2026 16:01:15 +0000
Manifest next update: Mon 30 Mar 2026 16:01:15 +0000
Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: TxqTwQ+ZqyoM2cFTftclS0YsNSPZy6hSU4plpMppwhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:fd:dd:9e:11:55:6b:8e:e9:18:2b:09:87:39:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9
Validity
Not Before: Mar 29 16:01:15 2026 GMT
Not After : Mar 30 16:01:15 2026 GMT
Subject: CN=1395306ce3672ccacbe8272301901763ef9551d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:4b:8f:49:ad:27:b9:f8:29:62:32:47:d9:
a0:b6:d7:19:65:20:ca:69:7f:4c:86:2a:a4:00:59:
02:79:a8:26:9c:ce:ef:7d:d6:d8:7a:96:de:ef:9b:
0a:02:6b:66:d0:82:e8:30:5f:18:22:ff:aa:63:65:
66:6c:75:2c:bd:f2:23:06:ca:bc:ab:d2:e1:00:ef:
8d:99:81:bf:aa:a5:fc:c6:3e:3e:2e:24:0f:89:e6:
20:ae:b4:6a:e1:0b:00:55:7c:50:e5:ae:7a:05:41:
30:81:98:08:21:80:bd:2d:37:0f:fb:c8:89:05:76:
f7:16:68:fd:d9:a8:d4:f2:06:03:ce:fb:ba:36:b4:
b8:9e:cb:dc:25:c9:c2:67:fe:b3:d6:e4:32:c7:8d:
e6:86:05:8a:b8:62:75:95:39:16:48:a9:92:05:e0:
d0:d1:62:66:6a:bc:80:f3:9d:18:0b:dc:36:d1:29:
10:d5:d6:84:c0:bb:af:f8:56:aa:3a:54:d6:45:4d:
d3:af:b6:4c:71:c1:ab:28:fb:d5:6a:b6:56:71:b8:
4b:99:2b:54:64:8b:86:11:6d:5f:0d:e0:3e:85:31:
46:7a:ee:b3:5c:de:da:50:87:09:69:5c:15:34:80:
d1:a9:17:84:60:2f:9f:56:43:34:8b:c5:b8:76:9f:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:30:6C:E3:67:2C:CA:CB:E8:27:23:01:90:17:63:EF:95:51:D2
X509v3 Authority Key Identifier:
keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:2f:81:6d:89:4d:22:e8:27:19:b9:0f:9d:56:b3:ea:95:21:
f7:0a:bc:6a:4e:ae:a1:e3:6c:5a:23:96:17:b0:03:1a:b0:6d:
5f:a7:0b:65:b9:73:ea:9f:bc:20:b5:a9:04:77:d7:cd:5c:19:
16:e1:d3:82:4b:24:71:da:1d:1d:fd:60:5b:78:6e:6b:ca:97:
39:c3:4b:28:37:68:1a:cf:a4:af:71:6a:dd:68:43:30:ed:a2:
e4:c0:4c:8f:e7:49:6d:a2:93:2d:6a:49:2d:31:bf:3a:c0:57:
79:78:cb:c2:13:0c:18:d5:c7:87:d8:96:7e:81:b8:6c:d3:ae:
2c:8f:c7:ea:2a:6b:02:59:a0:0b:e3:fd:33:2f:b1:78:64:2a:
19:75:0e:07:6c:63:7b:2d:f9:13:f9:ec:be:65:59:00:fa:ec:
02:b1:a5:4b:1e:8d:01:72:ac:f3:90:09:04:fc:c4:3d:9d:b8:
a6:e8:ff:32:c8:ee:d4:a8:f5:8b:9a:f3:bd:60:99:1f:ac:18:
7e:6b:d9:4c:d5:b6:2b:50:67:7b:c9:69:1e:36:46:80:59:eb:
ac:42:34:f6:bf:5b:5a:bb:f7:1b:83:8f:a9:54:83:ad:71:51:
ab:71:29:14:27:69:a1:f9:23:17:da:3b:97:7e:bd:6e:28:62:
b1:28:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:10 2026 by rpki-client