Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: BmiUbkBn6uTH8HmLMDXX8/8CGgejlYA2SJQeuSoUgHo=
Subject key identifier: 1F:1D:BE:05:7E:A0:BD:52:D6:57:BB:D6:70:09:E4:83:98:A8:53:AC
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019FFDC96B63387AFDBFCF64F545718545E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 01:01:03 +0000
Manifest this update: Fri 14 Aug 2026 01:01:03 +0000
Manifest next update: Sat 15 Aug 2026 01:01:03 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: yrfKafPZcnGR8AUz14BH5fI9TgVwAhLG0vZLtAUfia4=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:c9:6b:63:38:7a:fd:bf:cf:64:f5:45:71:85:45:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Aug 14 01:01:03 2026 GMT
Not After : Aug 15 01:01:03 2026 GMT
Subject: CN=1f1dbe057ea0bd52d657bbd67009e48398a853ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a9:97:a2:38:0d:79:7c:a5:bb:d4:4d:21:32:
fc:ec:c3:a1:bc:a2:32:b8:b4:c1:b8:4e:f6:69:65:
eb:ba:24:19:93:50:2d:20:d2:4c:7b:96:b4:a7:86:
ec:ae:e9:03:4d:d7:28:3f:4f:7d:aa:5c:59:ff:4d:
9b:3e:e4:26:f2:0a:f0:1e:a8:e4:10:aa:30:a5:04:
1e:b7:28:f1:08:d1:d9:db:1f:53:ee:94:05:75:70:
70:a1:1c:e6:c1:d6:79:19:0a:c1:63:b8:a3:29:b3:
a3:4b:0a:63:c5:84:2a:42:c6:8a:f2:7d:ea:18:77:
70:bb:49:ac:63:e7:14:37:28:cc:a1:11:4c:51:a4:
72:61:37:a2:c3:d8:62:c2:36:d3:bc:f5:67:61:50:
87:39:1d:75:c2:8d:9b:8c:ba:cc:38:2a:25:89:88:
f3:1b:a1:a5:29:0d:d3:30:1c:54:82:f5:f8:1b:99:
08:2b:f3:9c:97:6f:af:69:76:2f:14:81:be:c6:f3:
f0:7e:cd:f3:c5:c9:e5:4c:31:68:aa:30:47:23:26:
48:b1:6d:15:34:56:99:80:84:a3:30:33:eb:8b:09:
f3:9e:b1:b6:15:aa:dd:78:66:ae:ee:4b:25:9f:b4:
ae:81:f2:22:d2:56:04:03:67:e7:8c:a6:e5:03:46:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1D:BE:05:7E:A0:BD:52:D6:57:BB:D6:70:09:E4:83:98:A8:53:AC
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:33:07:68:30:e3:7c:3f:a6:ff:be:d8:40:fe:05:48:ec:e9:
61:c6:11:1f:2c:33:56:59:df:55:8e:22:89:da:77:d1:95:75:
67:a5:71:62:5b:05:a5:09:2a:ef:da:17:25:aa:79:71:45:a8:
d2:e0:94:78:d2:07:04:f4:99:93:17:15:80:5c:49:98:1a:fe:
29:4d:13:f1:a1:fa:72:cb:c4:d1:11:b2:e6:14:71:2e:ff:a8:
3d:b8:65:b2:04:d9:3f:a3:36:29:7f:f3:7a:60:58:15:4d:b1:
e5:4b:25:9a:db:91:75:30:8c:e2:88:23:a3:40:7d:06:5c:b1:
e4:ad:c4:fe:97:8d:73:00:ab:ae:1a:30:db:8a:b7:96:b4:48:
67:5a:4e:9a:d8:fb:b9:36:cf:4c:57:27:fe:70:33:cf:72:4f:
59:c8:f1:cc:d7:fd:e2:ac:22:ca:af:ca:e3:fd:58:59:4a:39:
65:15:6e:21:96:54:d4:7c:8d:4a:8e:be:19:06:cb:21:3d:05:
d6:05:38:99:63:38:65:7f:20:2b:d7:b4:2a:d8:93:e6:6f:37:
a9:64:c1:8e:a0:50:b3:4b:ad:0c:a7:39:45:49:5a:9e:14:81:
20:02:5e:da:ba:58:59:c2:05:c3:83:20:e8:78:59:24:b8:60:
12:27:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:41:29 2026 by rpki-client