Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File: c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier: djy6N5OnXZwcWUJUPwCYeIyj3QVK/+isfQeQmbjWHSU=
Subject key identifier: AC:DE:C6:FB:D8:71:96:AF:84:E1:D1:5B:4B:67:5B:B0:E4:39:73:8F
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial: 019D371BB9AA06F43FDA65AC6C7B295F9837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number: 0CD1
Signing time: Sun 29 Mar 2026 01:00:56 +0000
Manifest this update: Sun 29 Mar 2026 01:00:56 +0000
Manifest next update: Mon 30 Mar 2026 01:00:56 +0000
Files and hashes: 1: 40EThboBSEVGFMmXd89FK4WaTNo.roa (hash: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI=)
2: XNHFS8ZMGooSizNDD-_Z2_M2bLs.roa (hash: NrqwSk7qLUhd2Ca65sK/JaxXop9TloKYfUN2lC/2ang=)
3: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: bfPn52igp1lM1FJPmI5X6x06ASldrKqYtK7ivTUy/Bg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:b9:aa:06:f4:3f:da:65:ac:6c:7b:29:5f:98:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Validity
Not Before: Mar 29 01:00:56 2026 GMT
Not After : Mar 30 01:00:56 2026 GMT
Subject: CN=acdec6fbd87196af84e1d15b4b675bb0e439738f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:03:3f:95:48:37:5a:50:26:e0:79:44:1e:96:
db:c9:07:3f:b8:50:25:d1:5a:37:80:92:4d:a6:e8:
53:e1:36:b2:90:45:1b:68:95:eb:49:64:b0:8e:25:
78:02:f6:28:77:0c:b9:47:15:54:56:23:4e:d5:59:
99:12:83:cf:42:36:27:2e:f5:6a:73:49:f5:2c:ac:
24:5f:da:84:f3:33:cc:75:a7:82:e6:3b:9b:c3:c9:
b9:0e:ec:8c:4f:48:f6:cd:35:65:1f:3a:1c:1e:21:
07:66:dd:66:16:ac:66:f1:2a:1a:a2:ac:db:a0:cd:
9a:af:07:8c:b2:5d:14:85:48:a6:01:4d:1d:cc:a9:
6c:cf:98:5d:a7:2b:ea:50:c1:a8:5d:c0:76:b6:fd:
c6:c5:22:f8:99:0e:6a:0d:40:24:83:4b:e8:ef:45:
2e:fe:6e:0d:4c:1c:c8:1d:9a:39:da:1a:65:14:d9:
b4:7f:e7:ed:88:61:58:72:d3:d8:45:bf:ca:3d:24:
d7:ab:24:70:6c:73:52:02:43:12:9d:d5:cc:77:3b:
9b:fb:4f:26:bd:e8:41:c2:a0:3e:b3:cd:cf:91:01:
1d:3e:0b:73:ed:59:44:15:dd:04:02:49:53:aa:2a:
54:21:33:44:a3:67:f6:57:f9:6a:4f:fa:0d:7d:da:
dd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DE:C6:FB:D8:71:96:AF:84:E1:D1:5B:4B:67:5B:B0:E4:39:73:8F
X509v3 Authority Key Identifier:
keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:48:6d:09:3a:a9:05:29:ba:89:07:f1:50:de:b7:3e:45:93:
1a:50:5a:fc:af:72:27:55:ff:59:79:3b:40:32:a2:d0:f4:66:
87:1a:61:21:7a:86:7a:3b:18:7b:a4:30:e2:fd:ab:fc:83:f8:
16:9f:e9:26:78:a7:a5:d3:42:33:07:06:9c:d9:f8:cc:27:70:
ce:61:a5:95:f1:62:07:84:22:01:d0:ce:99:d8:c7:a5:28:85:
5b:d4:a8:bd:28:44:8d:67:6b:e0:e1:72:80:d2:b4:a6:68:19:
64:40:db:22:67:5b:6b:e5:5a:79:92:06:38:23:03:ee:c4:44:
4c:5e:4c:87:7c:cd:ef:31:59:46:87:b7:46:a0:0f:f7:74:1e:
cf:b5:13:dc:83:51:de:a3:71:80:a5:cd:95:29:ed:1a:15:19:
28:9d:94:bb:b7:b6:30:94:9b:52:3f:46:71:50:58:07:e4:63:
4c:33:6c:61:36:14:41:df:1f:25:ae:1e:f7:dd:e6:48:8f:ae:
73:05:bb:55:7b:a8:e6:52:30:8c:5a:27:dc:22:86:79:d5:22:
1f:05:d5:fb:c7:3e:d3:a8:25:cf:b6:5a:47:53:2a:7e:cd:fc:
8f:6b:c4:e7:70:cb:8e:58:c0:56:70:88:54:2e:34:cb:c2:13:
4a:00:48:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:20 2026 by rpki-client