Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier: jqdaCySJ/4HijpqwgSHEH0D24pUxFX6gjDgD6lMtdcc=
Subject key identifier: 04:BF:A9:68:BA:54:82:EE:E1:29:14:44:85:24:C2:DF:3D:B2:E8:0C
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial: 019D38D3438E0E9330F4964E4D41B151D5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number: 0DC4
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: SNTmPpKj0HT/LwBhV3o5c0IP2rloZv6lqPhQYnAwM1E=)
2: Uklboo3tG2E8bmpaNpWg7iBT500.roa (hash: 3bdk4yfdkJQ/C4ZvETpkPR6Yh1F2fFWoUHJ2qwV5MwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:43:8e:0e:93:30:f4:96:4e:4d:41:b1:51:d5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=04bfa968ba5482eee12914448524c2df3db2e80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:55:ed:bc:b8:6f:f7:bb:10:a7:e4:49:5d:fc:
1d:f6:b1:3c:14:83:4a:46:43:15:c8:b1:0a:f0:15:
ff:e2:4c:74:38:b8:44:20:87:8f:28:1c:f5:57:39:
e2:4c:86:3c:d2:95:88:89:a7:42:52:b8:0b:dd:0e:
44:e7:4d:2b:64:de:16:2c:18:b8:b7:a2:7c:aa:81:
05:b3:7a:39:d0:46:9a:42:41:8e:5b:29:08:84:f3:
41:e3:0e:f3:0f:be:da:1a:0f:6e:76:31:e3:21:cc:
5c:55:aa:7c:0e:c3:b6:b6:cd:8a:40:2d:13:fa:bd:
ad:c0:23:4f:aa:c6:08:97:5a:87:7d:c9:32:20:ed:
2b:fa:c2:ee:50:d3:24:cf:f9:24:a3:20:c2:88:70:
09:dc:6e:8e:9e:66:db:dd:35:32:fc:0a:bb:eb:98:
de:c5:db:34:52:85:22:fe:50:52:79:7e:12:e6:5c:
9d:c6:fa:0f:c7:4f:18:6e:eb:cd:de:c1:08:4a:22:
50:8d:f1:83:0a:65:f8:87:e2:f1:eb:6a:cb:69:87:
67:d5:82:96:56:35:a6:42:f5:ac:57:8e:ee:3a:40:
f6:fe:ce:2d:28:22:f9:02:51:41:85:f7:05:44:c9:
63:6c:f1:db:69:10:cf:e7:a8:fd:dd:2d:f1:33:2e:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:A9:68:BA:54:82:EE:E1:29:14:44:85:24:C2:DF:3D:B2:E8:0C
X509v3 Authority Key Identifier:
keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:53:a4:b7:1b:27:e7:18:ce:67:51:99:e6:b1:58:d4:12:
8b:f1:dd:82:f6:f0:8c:3c:24:64:47:ef:06:f7:e3:45:a1:72:
7c:fa:ae:74:58:b9:c3:21:97:09:67:2c:9b:a3:d7:42:c8:9b:
fe:52:18:84:a4:37:c5:5b:b2:db:2e:d0:b1:9b:6d:55:6b:4e:
2d:c7:cd:17:c1:0b:c7:ba:7b:1a:31:b8:30:51:b4:51:50:9d:
22:f8:66:a1:86:3e:84:1c:04:98:04:3f:60:df:11:d7:8a:66:
f1:8e:9e:bf:75:73:f8:f3:93:d1:e3:cd:52:2c:a9:0a:29:14:
f8:e0:8a:51:cb:09:18:47:78:a2:38:00:08:b3:c8:25:30:90:
ed:8b:f1:42:f7:c3:4a:c5:7e:54:df:fa:57:f3:ae:1a:47:3a:
3e:16:34:8d:42:50:12:86:c0:db:65:ca:0f:e6:71:ac:56:f3:
03:cc:6c:77:71:02:4c:fc:53:2e:ea:15:01:a7:02:ea:0c:4b:
64:4c:38:ae:53:d3:73:b8:1e:4e:40:a2:36:ec:e9:d8:93:b0:
41:d9:3b:b4:3a:1b:37:43:cf:3f:31:33:fb:b8:4a:c1:35:21:
24:60:56:77:d1:41:70:8a:11:13:9a:bd:0d:62:68:7f:91:76:
ba:fe:f1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:40 2026 by rpki-client