Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
File: tOZnwFV9jneon9L2dTh4NckpkDw.mft (raw, json)
Hash identifier: ofDjknp5ecBDUpYL3nfEepjYTL8y6E0zjOHSPOPaSSI=
Subject key identifier: 40:DA:0C:CC:D3:EC:41:3C:C4:FB:13:EF:8C:FF:6A:D3:AF:87:44:20
Authority key identifier: B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
Certificate issuer: /CN=b4e667c0557d8e77a89fd2f675387835c929903c
Certificate serial: 019CE5C92917C2A610D4A31F45432B40663C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
Manifest number: C9
Signing time: Fri 13 Mar 2026 06:01:31 +0000
Manifest this update: Fri 13 Mar 2026 06:01:31 +0000
Manifest next update: Sat 14 Mar 2026 06:01:31 +0000
Files and hashes: 1: iRgpkScl2E0qydvLYxmlqR43YT8.roa (hash: F9U+6PkpUBEG0XhufUjaRNeruVOGBXwm2wvsY4dTXhk=)
2: lj9BME9ANJ8XxD4qQD5tTVNccsk.asa (hash: SvpQzHiloco7sWEgcm+D+rsH9un12JiKM+fo6gxkVGQ=)
3: tOZnwFV9jneon9L2dTh4NckpkDw.crl (hash: RwbrgRyr3nXfdDZ2V+uEc4W2CpXPR5MoUgOqEFSuNgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:c9:29:17:c2:a6:10:d4:a3:1f:45:43:2b:40:66:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e667c0557d8e77a89fd2f675387835c929903c
Validity
Not Before: Mar 13 06:01:31 2026 GMT
Not After : Mar 14 06:01:31 2026 GMT
Subject: CN=40da0cccd3ec413cc4fb13ef8cff6ad3af874420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:cb:fe:91:ce:d9:ba:07:57:8c:64:7f:c5:
1d:10:79:c4:a6:b4:d1:ca:86:c7:0c:dc:bb:49:d9:
a3:da:d1:ff:6e:0b:b6:0b:af:41:79:ba:82:1a:c6:
3a:61:3a:59:b7:19:79:f2:d5:31:bf:88:77:39:36:
59:78:1e:9b:74:43:d3:17:0a:c7:76:32:bf:4c:ce:
87:1b:00:64:2c:b8:37:e3:70:62:9b:fc:63:99:08:
e0:b9:8a:cd:eb:f0:4d:2e:56:3b:7f:a4:f9:c1:b4:
13:a3:ed:21:04:1b:30:93:88:87:52:2e:a8:18:be:
de:7d:db:9d:a4:10:f1:76:e6:c8:f9:d8:5d:c5:c6:
ea:87:a3:08:aa:03:b2:28:70:77:b7:dd:a8:b6:6d:
55:67:84:62:4c:88:13:ed:ad:4d:fe:94:b9:84:5c:
15:18:06:a8:48:69:ec:7a:d2:0c:eb:e3:a9:8f:29:
8d:17:46:1c:90:ee:e0:df:fb:6a:a1:46:0f:45:73:
8b:fc:3b:44:24:45:db:ff:c2:c3:90:f7:24:0e:72:
4d:7b:c4:de:3b:77:b0:f2:58:54:92:96:2c:3d:84:
02:19:cd:75:eb:d2:60:36:b5:f4:9a:16:ed:2f:dd:
eb:70:01:2a:6e:52:28:b2:cf:36:4f:8b:d8:5f:23:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DA:0C:CC:D3:EC:41:3C:C4:FB:13:EF:8C:FF:6A:D3:AF:87:44:20
X509v3 Authority Key Identifier:
keyid:B4:E6:67:C0:55:7D:8E:77:A8:9F:D2:F6:75:38:78:35:C9:29:90:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOZnwFV9jneon9L2dTh4NckpkDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1c85b2-9e2b-4209-bbdc-17368868e94b/1/tOZnwFV9jneon9L2dTh4NckpkDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d9:54:7b:7c:f9:31:ba:e7:44:40:ea:c6:d6:09:01:3c:b2:
80:4f:04:22:0f:f0:8f:bb:76:f1:40:17:0e:36:a9:13:58:40:
30:8c:4a:dd:e4:17:db:be:1b:e9:ef:ba:f6:ff:e6:72:f4:a3:
f6:30:a8:b8:f2:7c:f7:39:89:ae:79:6d:ad:3a:6d:d7:17:96:
78:d9:9e:6f:08:3d:06:fa:26:2e:51:89:80:bb:6c:df:4b:98:
92:9d:13:8e:a8:98:65:5b:c5:d9:5a:3f:b7:6a:09:67:9f:97:
6e:5c:9c:ac:f0:0b:d8:07:1d:f6:bc:6a:7f:e1:a5:2a:03:cd:
fb:ab:3a:b4:3a:b0:c2:5e:3d:65:2a:48:90:31:8f:e3:1c:75:
77:9a:7f:2c:17:70:c6:16:05:50:df:ba:b0:4a:bd:a3:5b:4b:
67:a3:75:cc:f1:2c:b7:12:e1:c7:d2:1c:be:6f:fc:57:1f:43:
f4:17:14:ee:98:31:22:32:59:c4:44:39:0b:d2:67:f1:0e:23:
57:3f:fc:25:e4:70:b6:5c:df:50:ba:a8:46:45:1e:59:35:7e:
1f:3c:a3:1d:97:5b:85:37:9d:2a:70:a6:56:61:67:1a:ba:5f:
b3:1b:ce:66:f2:4f:4b:1f:97:88:95:8b:58:87:ee:7b:1e:ff:
10:f1:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:45:26 2026 by rpki-client