Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
File: C9MR-KZ36gSWjt3jRk-zMmDw3io.mft (raw, json)
Hash identifier: 2gZS9yMVYDpwxh+HA1oOGbUJQMOOmHxqC68Xt1vFBQY=
Subject key identifier: F0:9C:2D:08:35:CF:4F:9A:D7:F2:0F:40:83:9B:E5:F9:3B:53:C3:5D
Authority key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Certificate issuer: /CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Certificate serial: 019F389714D4DB54DD80CB9F830C86F9FFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
Manifest number: 48
Signing time: Mon 06 Jul 2026 18:00:53 +0000
Manifest this update: Mon 06 Jul 2026 18:00:53 +0000
Manifest next update: Tue 07 Jul 2026 18:00:53 +0000
Files and hashes: 1: C9MR-KZ36gSWjt3jRk-zMmDw3io.crl (hash: RYQJZCdApHIuLhOWlngJGevfOPeF8GEUgFu9cXgxq0k=)
2: IjhSeXDwvusbQcjhrnsKrkqMjMs.roa (hash: WM9UbddM+SxZstTFU66phFX+LJopIyVe8Pc+BnGorDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:97:14:d4:db:54:dd:80:cb:9f:83:0c:86:f9:ff:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Validity
Not Before: Jul 6 18:00:53 2026 GMT
Not After : Jul 7 18:00:53 2026 GMT
Subject: CN=f09c2d0835cf4f9ad7f20f40839be5f93b53c35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:4b:6b:31:1a:60:e8:6f:f6:e1:7f:fc:f9:
d2:2b:95:23:13:d4:d0:3e:f8:ed:87:98:25:c8:42:
6b:9f:41:d8:49:c7:ea:1c:21:04:2b:75:3a:1f:87:
f4:4b:d5:f1:0a:a2:b5:28:9d:b0:f4:99:0c:e2:f1:
1d:68:d8:1e:60:a8:92:07:2b:49:ac:c5:ce:b5:3c:
15:32:84:b0:62:54:b3:8b:33:23:30:3b:25:c4:a1:
0c:df:35:65:2f:e4:47:7e:49:b2:4f:55:0a:1e:95:
27:80:11:a5:ad:cf:3d:6a:97:ad:47:be:9c:b3:f8:
25:0b:92:4e:b9:54:15:be:69:ef:85:b7:91:17:df:
00:7e:7c:2b:4a:3d:e6:e0:47:ad:b7:a7:9f:7b:55:
71:07:97:0b:29:47:38:c7:5c:49:01:9f:a6:77:ed:
12:26:7c:d8:2d:ef:5e:70:b4:b0:91:e1:f7:ec:47:
6e:c2:0d:de:43:ea:88:7d:00:0a:e2:a2:92:31:12:
98:61:49:cf:21:f2:f7:53:de:1f:f5:96:f0:3b:44:
0c:d2:7c:e0:30:12:37:ec:da:44:ea:9b:cc:13:18:
45:5a:3e:41:94:5b:d1:cc:bf:be:12:81:64:bf:46:
89:f9:ba:56:0b:cb:c1:5b:76:0a:ca:50:3f:b2:92:
97:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9C:2D:08:35:CF:4F:9A:D7:F2:0F:40:83:9B:E5:F9:3B:53:C3:5D
X509v3 Authority Key Identifier:
keyid:0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:5e:9c:96:9e:5e:fb:6b:bc:bc:4c:ec:40:5b:eb:75:34:16:
e5:1e:2f:b2:1e:77:4c:81:94:8e:db:f1:fd:e0:70:4a:8e:7c:
24:cd:e9:a1:10:3c:60:0f:f9:da:c6:8e:27:d1:3c:8f:85:5c:
8b:ab:48:5b:f9:67:75:71:e7:06:89:23:41:35:70:19:0e:33:
a5:ef:d2:97:ec:45:45:ad:24:95:a4:92:0c:fc:3c:a5:70:b8:
18:f4:92:73:ef:25:cd:e7:07:0c:b9:63:6a:b3:7a:44:0e:ea:
a1:fe:90:05:ff:37:81:26:1e:aa:10:63:69:78:5b:14:4a:5e:
2d:24:24:ee:36:cc:17:58:82:2b:0b:41:a1:70:2c:e6:1b:96:
4a:d4:e5:12:c5:9f:3f:19:fd:88:7d:87:e1:d1:9e:4e:bf:8d:
91:1b:0d:e7:a7:44:e6:d4:2d:f4:91:dc:db:06:d4:65:7d:ff:
45:f5:e9:73:e4:98:8f:dc:88:91:83:9d:08:01:f5:6f:c7:26:
cf:17:a8:d2:5b:76:97:0a:80:62:52:b8:bc:5d:c8:00:6d:7c:
7d:43:b5:6d:6d:43:fe:27:61:21:f9:65:07:63:64:5b:62:ab:
7d:f8:4e:3c:5c:0b:28:72:81:2b:5a:78:16:01:1d:04:ae:a9:
2c:d7:cf:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:16:52 2026 by rpki-client