Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
File: cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft (raw, json)
Hash identifier: BoVSXyof6m3AQTS2EwhlXxNyxZHhpYJvgxc5CdPezZo=
Subject key identifier: 4B:9B:D1:15:20:F9:91:3D:3A:43:DA:15:37:AE:78:4D:51:47:4F:DE
Authority key identifier: 70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
Certificate issuer: /CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Certificate serial: 019CE66D93766EE47DB73635F2B855DA8B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
Manifest number: 0B9D
Signing time: Fri 13 Mar 2026 09:01:06 +0000
Manifest this update: Fri 13 Mar 2026 09:01:06 +0000
Manifest next update: Sat 14 Mar 2026 09:01:06 +0000
Files and hashes: 1: cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl (hash: PriAedZZTWvqfGRvPCtuJF9RbIS+aZ0WrSvWwdn9XQA=)
2: xMaO1kpAAyo6v9RGWtF6_HLkn7Q.roa (hash: N7lnmqCIb1rzPeOt4DsozBGYc4jYHtEfkvBZTc7LyV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:93:76:6e:e4:7d:b7:36:35:f2:b8:55:da:8b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70a0b5aca731ea71f26d63d23c22c123b2bb120f
Validity
Not Before: Mar 13 09:01:06 2026 GMT
Not After : Mar 14 09:01:06 2026 GMT
Subject: CN=4b9bd11520f9913d3a43da1537ae784d51474fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c3:bf:1a:48:60:ca:c7:db:33:87:41:3d:04:
21:13:fa:72:c1:e2:67:2b:f1:27:9b:56:e8:51:cb:
4a:b0:e6:37:05:36:20:30:35:02:25:1b:b9:bf:32:
bc:4d:7e:f2:d6:51:5d:bc:77:52:7f:d1:c9:d9:3b:
e1:c4:d3:53:bd:14:d2:5b:0f:88:43:82:88:f9:b5:
9c:ad:72:6d:d1:28:43:61:0d:da:6f:a3:e8:a3:b6:
78:c0:36:a8:89:c3:59:c9:42:50:d7:22:37:e3:99:
a2:d7:15:c1:a5:52:05:a9:3c:63:8f:09:0e:fa:3d:
f2:13:cc:0a:9a:47:92:6a:b5:a0:98:19:55:1c:cd:
44:7c:d7:45:86:70:eb:4d:01:24:1f:f5:a7:8d:ce:
e1:23:0b:b4:92:80:92:76:10:23:03:34:05:e6:a8:
ca:e1:17:16:6a:22:0f:c5:6f:3c:35:7a:90:6e:26:
a7:42:15:70:0a:47:8a:75:4d:fa:08:1a:d9:32:10:
8f:50:e7:f1:d5:9b:f3:6e:c7:ec:f0:5e:d6:d3:76:
75:59:14:b5:4a:ba:52:40:56:91:f7:5c:3a:5f:a3:
5b:8f:d2:61:91:23:40:19:34:94:3b:59:b3:95:88:
37:b9:4c:30:b8:c6:db:72:da:54:23:0b:8b:aa:97:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9B:D1:15:20:F9:91:3D:3A:43:DA:15:37:AE:78:4D:51:47:4F:DE
X509v3 Authority Key Identifier:
keyid:70:A0:B5:AC:A7:31:EA:71:F2:6D:63:D2:3C:22:C1:23:B2:BB:12:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cKC1rKcx6nHybWPSPCLBI7K7Eg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f649e5-a7cb-4218-93e0-43e31800df0c/1/cKC1rKcx6nHybWPSPCLBI7K7Eg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:14:15:e8:a6:8b:c5:ed:fe:97:9e:49:b4:0b:06:e6:0a:19:
f0:a6:01:75:2a:5a:93:33:b0:e7:3b:08:14:8d:bc:10:77:8f:
17:1e:6e:09:02:28:fc:e9:0a:75:1d:c9:51:61:32:93:83:8d:
a1:bb:df:63:9c:22:81:8c:04:b6:ae:99:d3:41:5a:cf:c3:01:
0a:c8:4c:0f:df:52:39:8b:f9:ed:08:69:68:67:b1:aa:6e:54:
95:87:37:df:a8:d6:a1:e3:2d:c0:2a:c0:c9:f0:8a:99:90:00:
d4:a1:db:0d:6c:3f:56:87:bd:25:e1:c7:41:bd:1d:94:bd:38:
98:7f:91:13:1e:1c:3e:21:3a:0b:6d:e0:28:91:86:ea:40:67:
46:b0:1e:8f:16:42:76:39:69:8b:c3:c5:fc:ff:13:b3:de:d4:
c0:b7:f4:22:f2:25:ed:44:97:64:d4:e5:20:ec:58:97:67:82:
ed:ea:ab:6b:a4:85:4b:3b:8e:2d:14:d8:42:9a:13:43:50:26:
87:05:a6:46:c0:29:fa:6e:27:20:5e:ee:3f:8a:5c:c3:14:7b:
57:93:81:ca:36:72:35:fc:57:24:f0:2a:a6:88:dd:83:c0:51:
07:4d:85:94:fb:1c:2b:03:54:00:86:f3:b1:9e:fd:90:c6:45:
9b:71:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:51:50 2026 by rpki-client