Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
File: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft (raw, json)
Hash identifier: r6Uof10dJw5e8feszUEp9B0l0VoQqM157K1a+Se3VDA=
Subject key identifier: 96:49:CA:A6:81:64:0C:DD:FF:44:C4:3B:8F:AA:F3:C4:C2:F8:32:96
Authority key identifier: 73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
Certificate issuer: /CN=73d31367608564d8783bb242486e93d6506e7f95
Certificate serial: 019D389BE80BA90C20C24F0E8ADD14E93F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:34 +0000
Manifest this update: Sun 29 Mar 2026 08:00:34 +0000
Manifest next update: Mon 30 Mar 2026 08:00:34 +0000
Files and hashes: 1: c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl (hash: YVS+yUJNJP8PWVFUVCf0hI147ZhHflJKsE8dAb9j6z8=)
2: dclA3VMdZLtz34LpTMAR4SiwFQA.roa (hash: RzeKpzl0YEsb0N/0nKCVIMEwOnJwgDR9R3LTON1hPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e8:0b:a9:0c:20:c2:4f:0e:8a:dd:14:e9:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d31367608564d8783bb242486e93d6506e7f95
Validity
Not Before: Mar 29 08:00:34 2026 GMT
Not After : Mar 30 08:00:34 2026 GMT
Subject: CN=9649caa681640cddff44c43b8faaf3c4c2f83296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:29:8f:3d:5d:b6:9a:12:31:42:9c:f9:88:
75:f3:43:1c:51:19:a7:4e:34:24:a1:ed:e9:47:90:
cd:05:b8:af:c5:e6:24:44:9b:c6:0c:7c:80:fb:d3:
0c:6c:e6:5a:67:b1:d3:98:d0:34:21:df:8c:84:11:
47:76:05:e7:50:f7:3b:c8:1d:cd:86:7a:d5:76:85:
08:d7:a9:2e:db:ba:c1:4f:0a:0d:95:f0:71:62:ce:
b6:5d:02:20:bb:33:c9:de:b1:aa:02:08:d7:30:32:
3d:7e:9d:53:b8:b4:e8:c0:fd:4c:db:a6:c1:15:62:
f3:11:b7:1f:04:d9:66:14:af:d8:3e:94:60:9d:60:
7e:17:60:cf:37:41:87:b3:4e:a5:7e:65:7e:2d:80:
9e:09:43:43:b9:c8:9d:88:06:4f:0e:05:0b:f2:6f:
26:a9:5e:af:00:d5:a3:09:e1:b5:e3:93:44:11:b7:
a3:1e:47:cb:29:66:83:63:c8:83:73:e1:5a:e7:a6:
b6:c6:4d:90:55:ef:6b:ec:66:96:ac:37:f8:93:a2:
52:70:8f:d5:2c:d5:f6:69:1b:a8:6b:91:b4:11:af:
22:bb:6b:e9:c7:47:88:13:0f:b9:1a:30:2b:53:49:
19:62:3a:aa:09:de:a9:8d:c3:4d:bc:df:bc:4e:74:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:49:CA:A6:81:64:0C:DD:FF:44:C4:3B:8F:AA:F3:C4:C2:F8:32:96
X509v3 Authority Key Identifier:
keyid:73:D3:13:67:60:85:64:D8:78:3B:B2:42:48:6E:93:D6:50:6E:7F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/02e419-dd83-400b-b114-02c5008bcc09/1/c9MTZ2CFZNh4O7JCSG6T1lBuf5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c8:d7:7f:a2:09:0a:8c:86:9d:94:d2:e1:40:94:0d:75:d2:
f0:4f:d3:a9:c0:d8:c8:6b:0d:c2:99:5c:42:35:a3:e4:30:5e:
f1:2b:41:94:01:6f:8b:d1:03:e6:6d:f7:40:25:4a:1d:19:3a:
2b:c4:53:cc:7b:ef:ce:72:69:0d:93:1d:95:1d:1e:06:2b:22:
b2:13:28:26:1b:ba:16:3c:7f:14:a4:44:e1:34:ba:36:9d:b2:
40:44:d1:55:89:b0:ef:80:0a:ea:83:2e:ed:48:47:a4:ea:9c:
9e:df:d1:e4:c0:49:8b:2b:f7:9f:f3:1e:0e:03:91:7f:a1:44:
d7:0f:5e:3c:45:a9:5f:4f:3c:ec:67:a6:aa:ab:4e:c3:93:83:
be:80:a5:8d:4c:d2:cf:a5:e5:1a:ed:c8:cb:ae:1f:4b:a8:ff:
87:b4:85:45:55:19:9f:8a:a2:7a:36:76:ff:31:a6:a3:5e:ba:
20:a6:3e:e0:37:76:46:1a:b8:12:57:0e:4a:a6:33:7b:3b:8c:
0c:9b:d1:c9:c3:76:55:e8:73:f9:1d:14:77:d5:48:7d:12:57:
a2:ec:66:68:5e:22:ee:23:1e:92:57:9c:b3:75:8d:42:6d:3f:
52:c1:99:51:e6:04:7a:75:84:e3:12:98:0c:8a:6f:22:b2:f8:
00:05:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:37 2026 by rpki-client