Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
File: C9fnDABfVWqCVOexKw6z0zFNReI.mft (raw, json)
Hash identifier: 7pMAppQKenXi3E1cZrFugKNCcebhp2E3VYe8HkmdRC0=
Subject key identifier: F3:6F:02:17:4F:FE:AA:7D:16:84:77:60:7C:F8:31:F1:D7:7A:29:3F
Authority key identifier: 0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
Certificate issuer: /CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Certificate serial: 019D390A62CB6DF06C0F60D5B326CAA4E7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: C9fnDABfVWqCVOexKw6z0zFNReI.crl (hash: NxxtvmJNrtttLxSik0fk0DGSNt8VJYoijCLsqgKLkXY=)
2: dV9_aq3p8K8kgKb1hMk0ifWQtfM.roa (hash: Y2dgJ4DWPL8fkVQXpK7L7O/MdaqkPR462UIcleTQtzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:62:cb:6d:f0:6c:0f:60:d5:b3:26:ca:a4:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd7e70c005f556a8254e7b12b0eb3d3314d45e2
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=f36f02174ffeaa7d168477607cf831f1d77a293f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:67:4d:30:f2:22:41:cb:0b:2e:db:66:26:33:
17:b6:2d:0d:0a:5e:7f:02:0c:f9:d5:14:93:20:69:
8a:35:5e:db:4f:27:e3:21:0d:11:db:a7:ec:87:77:
6e:c6:29:bd:21:7e:d8:4b:a8:8c:7b:e2:77:32:5b:
12:d9:19:05:c1:ba:d9:a3:6b:48:77:dc:40:ea:20:
6b:a0:21:3e:14:e2:22:58:7b:4b:fa:46:3a:09:08:
07:fe:38:06:49:c3:0a:3c:2e:0d:d5:8c:12:26:b0:
03:b3:e3:c4:d9:1f:ee:b7:46:8a:1d:7c:a5:3e:56:
2d:a4:35:f1:75:e5:85:ad:0f:4a:f8:a5:8e:bc:bc:
e3:5e:69:2d:d0:7c:25:55:ab:a8:28:45:e5:63:16:
6f:37:41:55:ba:09:88:47:5a:de:1d:ed:04:01:98:
4c:4f:22:6b:01:12:bf:01:35:6b:09:6f:20:60:d4:
fa:41:91:33:a8:cd:48:67:4e:06:47:a3:8f:d3:3c:
06:5e:15:07:c2:7b:8e:9f:d1:ba:7e:2a:0e:9a:5a:
bd:6e:4e:a2:70:6f:3a:4d:18:42:f8:3c:81:2c:dd:
ca:6d:3a:80:6e:06:c3:08:cf:2c:b0:6b:6c:51:e4:
a9:cf:64:b2:66:56:c5:68:37:5d:8d:87:2e:cb:6b:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:02:17:4F:FE:AA:7D:16:84:77:60:7C:F8:31:F1:D7:7A:29:3F
X509v3 Authority Key Identifier:
keyid:0B:D7:E7:0C:00:5F:55:6A:82:54:E7:B1:2B:0E:B3:D3:31:4D:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9fnDABfVWqCVOexKw6z0zFNReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4cffef-9a97-4546-bddd-bb3cc7c944ad/1/C9fnDABfVWqCVOexKw6z0zFNReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:14:8f:ee:37:0d:be:25:b8:29:79:e6:19:de:cd:30:90:20:
5e:61:5f:c6:b5:2b:25:b1:d4:d4:f7:05:e1:b8:4e:83:e2:0d:
94:d1:44:40:4d:db:b5:c2:43:23:79:14:d7:59:70:26:0c:b9:
ea:38:f8:b2:f3:38:1e:5e:f8:79:14:f4:46:49:44:3e:a7:14:
d9:33:45:bb:27:4b:ed:55:c4:9f:72:35:0e:84:58:af:fe:17:
a4:59:dc:b4:e4:23:d2:5b:e0:a3:1f:e9:8b:5a:72:c9:20:db:
27:13:50:8f:09:4a:5a:8e:51:db:8d:40:3f:4a:70:39:ad:21:
77:bb:da:92:30:0c:36:76:f9:7e:29:04:7e:18:b8:0f:9e:f6:
1c:91:6a:8f:14:05:40:d7:4a:55:19:ee:5e:11:3a:b4:89:8e:
20:40:ee:9f:91:5a:db:cc:2a:c8:f9:8f:5a:a6:82:84:0b:7a:
2c:25:c2:ae:fa:0c:aa:2a:59:f1:10:22:36:43:e2:19:de:27:
2d:35:cd:e2:fe:ba:5a:84:d9:9b:70:bc:e8:8b:fe:32:0e:f8:
65:24:9b:9b:43:a7:2f:27:84:fd:35:98:0d:3d:0b:34:6e:9c:
92:97:84:f5:43:68:6f:87:6d:77:e5:d2:a8:95:80:66:7e:00:
59:27:06:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:47 2026 by rpki-client