Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: 0e7a7NYr3VCBTEq4dd0bzkBua+rrFZ/BwI8heO5Zxvc=
Subject key identifier: AE:99:CE:F3:60:9A:FC:18:54:5B:3C:1D:78:9A:87:AE:56:8E:8F:43
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019F141C77D4DCA68CE935F4CE54539F26CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 16:00:37 +0000
Manifest this update: Mon 29 Jun 2026 16:00:37 +0000
Manifest next update: Tue 30 Jun 2026 16:00:37 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: EmS5sZYaSmwUdIiejLlS3ojLky9TB0pdOCv14CY+Qsk=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:1c:77:d4:dc:a6:8c:e9:35:f4:ce:54:53:9f:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Jun 29 16:00:37 2026 GMT
Not After : Jun 30 16:00:37 2026 GMT
Subject: CN=ae99cef3609afc18545b3c1d789a87ae568e8f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:52:ee:a7:df:f2:0f:8c:78:85:23:e9:5d:
6c:7e:28:3a:95:6d:a0:ca:1d:10:37:40:27:82:a9:
6e:67:cc:61:36:2f:d6:01:2c:22:8b:08:b7:70:ed:
9d:ef:2d:31:83:fd:36:fb:9d:23:f7:3d:b0:5e:6d:
8d:ad:01:8e:1f:a8:2f:6a:48:a1:5c:ce:e2:e2:de:
c6:8a:30:64:c9:78:39:47:e4:d6:af:f3:d3:30:e5:
a0:9e:97:2d:a4:4d:86:9f:b5:b6:8d:0f:69:89:43:
78:75:f1:3b:58:69:46:d9:40:c9:ba:26:0c:6c:f8:
6f:77:39:89:b5:a4:41:8c:01:b0:5d:6f:0f:ef:1b:
5c:1d:3b:d7:52:29:64:fc:61:5f:dc:5e:ef:67:ea:
3d:be:f1:d6:05:f1:a1:52:b6:74:d1:1d:2e:fc:78:
d3:c9:9f:b5:c9:37:bc:c3:bc:4e:60:19:e2:13:8e:
ec:80:bc:de:6e:5d:30:03:9b:1a:75:1e:5e:65:7c:
3e:54:f9:7c:eb:22:88:45:ab:21:0e:3d:fe:a0:09:
24:66:80:35:fe:b0:84:f1:33:8c:59:6e:ab:1e:0c:
b2:cb:fc:6c:e7:d9:a7:7d:ac:91:54:01:54:b1:3a:
ee:37:9c:12:9d:27:f7:88:32:a3:26:9a:e7:0c:80:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:99:CE:F3:60:9A:FC:18:54:5B:3C:1D:78:9A:87:AE:56:8E:8F:43
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:4d:e2:45:7e:88:82:c5:54:c1:13:a5:05:e0:96:4b:9b:c5:
0d:c5:b8:5f:c5:78:f3:1e:46:64:61:5d:f9:8d:ad:9e:3b:d6:
68:64:3c:70:ed:85:eb:d5:de:7a:f8:e7:17:bf:4e:35:8e:49:
cb:ab:eb:75:92:d3:b3:63:85:97:2b:88:12:ea:b2:62:fe:c0:
25:38:95:23:f0:40:d7:53:e3:f1:62:7b:fb:ca:f2:ee:17:1b:
d2:58:54:a0:7d:6f:5b:e5:7d:f7:5c:86:5a:6a:1d:af:8d:e1:
81:81:34:ce:bd:5a:d0:8d:9f:df:60:16:13:ee:74:de:56:6d:
cb:91:3d:38:a6:ab:10:d9:58:20:4a:23:f7:bf:1e:6e:b0:f3:
f7:2b:92:c1:75:ef:a9:65:d1:63:aa:9b:70:cd:3a:10:90:42:
21:b3:97:1c:38:81:32:32:68:af:e5:f5:9b:8b:1f:fd:a7:f7:
09:9a:a7:da:f2:09:1b:ae:37:c3:ff:91:7e:57:36:38:e0:50:
b9:29:1a:d2:68:ee:e2:1b:6d:32:52:7c:ea:e7:ee:9a:f6:2c:
c2:c9:6b:86:94:87:83:0c:15:20:7e:95:21:13:71:04:99:66:
93:b7:70:ab:72:bc:4f:68:dc:ce:b5:62:24:77:59:a1:ff:f4:
7a:ba:01:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:35:38 2026 by rpki-client