Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
File: C9MR-KZ36gSWjt3jRk-zMmDw3io.mft (raw, json)
Hash identifier: 7G5BiL/VdT2hK59l9vYjGQRGCySYjNJTzJ0EwQI3KXU=
Subject key identifier: 4A:E1:28:5C:8B:45:21:54:8C:37:04:8B:19:F3:EF:0A:AC:38:5F:3E
Authority key identifier: 0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
Certificate issuer: /CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Certificate serial: 01A128E8B0D08AF46DD8D0FC7E05BFBB0CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
Manifest number: 0149
Signing time: Sun 11 Oct 2026 03:01:40 +0000
Manifest this update: Sun 11 Oct 2026 03:01:40 +0000
Manifest next update: Mon 12 Oct 2026 03:01:40 +0000
Files and hashes: 1: C9MR-KZ36gSWjt3jRk-zMmDw3io.crl (hash: SsB6UfpugdFVTH4ik95MR5PFQ2gGQjJCbHfTLUZ5Ykc=)
2: IjhSeXDwvusbQcjhrnsKrkqMjMs.roa (hash: WM9UbddM+SxZstTFU66phFX+LJopIyVe8Pc+BnGorDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:b0:d0:8a:f4:6d:d8:d0:fc:7e:05:bf:bb:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd311f8a677ea04968edde3464fb33260f0de2a
Validity
Not Before: Oct 11 03:01:40 2026 GMT
Not After : Oct 12 03:01:40 2026 GMT
Subject: CN=4ae1285c8b4521548c37048b19f3ef0aac385f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:e1:1d:2d:81:78:50:23:35:da:5f:96:d0:
aa:cb:8f:ef:7b:a1:4e:e8:40:1e:11:43:ab:84:f8:
62:f9:de:8e:5d:c0:7d:d8:98:69:d1:20:6d:34:b1:
8f:f9:c1:9d:82:4b:f3:49:8f:89:8c:d9:f2:1f:14:
a1:e6:7d:bd:c9:5e:1c:50:1a:8e:de:1d:19:e9:13:
85:c6:95:72:47:d9:c2:32:e5:da:34:c8:c9:8f:ba:
bf:66:34:d1:03:69:9a:3a:ae:de:87:13:d7:45:4d:
6f:98:6f:d3:26:53:30:8b:db:69:42:64:43:bb:f4:
53:e3:70:00:6a:ed:28:77:cc:76:d6:81:17:3c:84:
8b:8e:f2:fc:70:71:7d:64:39:ff:a7:b0:62:7d:fc:
9f:4d:24:29:f6:99:4c:72:5a:d8:9a:c5:77:c1:96:
0d:07:0d:67:ea:50:e1:6e:36:2e:5d:46:d7:ef:b7:
0d:4c:87:1b:6e:dc:f8:c6:2d:bd:2a:b6:94:3e:31:
3c:13:6a:a5:39:43:79:2f:a1:4c:5d:43:46:43:1d:
92:ec:e1:91:1b:0c:f9:bd:f9:eb:83:d0:01:7e:6b:
d7:b6:2c:fb:e6:a3:28:4b:a7:a9:f6:ee:01:31:d1:
1e:9f:8b:db:98:28:da:e2:3a:7b:4b:cf:f5:5b:de:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:28:5C:8B:45:21:54:8C:37:04:8B:19:F3:EF:0A:AC:38:5F:3E
X509v3 Authority Key Identifier:
keyid:0B:D3:11:F8:A6:77:EA:04:96:8E:DD:E3:46:4F:B3:32:60:F0:DE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9MR-KZ36gSWjt3jRk-zMmDw3io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/fa5f55-00a3-4de5-8d27-c05823c436e3/1/C9MR-KZ36gSWjt3jRk-zMmDw3io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3c:bf:d1:a0:55:1d:fb:e9:d8:32:28:b4:38:c4:5d:45:13:
28:39:7c:be:b7:bb:af:d6:96:ec:3b:41:e4:e2:d8:03:3e:0b:
2c:34:e6:63:4b:d1:f2:d0:df:26:fb:ac:6b:b3:60:47:f3:fb:
7c:fc:ce:c8:5b:2f:68:43:1f:ca:8f:12:6b:33:38:08:c5:6b:
7c:c8:d9:0d:6e:8c:4a:36:eb:23:02:69:51:ca:4a:1a:c7:b9:
98:a0:00:37:e3:c6:ef:5c:d3:4b:1c:7f:a4:ec:f2:39:b2:4b:
51:77:61:2f:02:f5:be:b2:fd:54:06:9f:7f:c8:ae:01:10:3a:
5b:c3:cf:0a:0a:a2:4f:94:1c:24:3a:82:49:40:57:d0:8c:bc:
0c:fc:de:ae:07:b5:3d:fa:c2:08:05:ca:b3:63:8e:e6:51:81:
fc:9b:41:24:b5:99:9d:2b:46:90:c9:7f:68:a8:6f:b9:20:bc:
92:bd:fd:0b:44:00:e0:21:b7:b6:ba:db:7e:e8:4b:ff:5a:ab:
a9:50:fa:40:93:aa:6f:30:61:56:9b:6e:47:df:68:46:7c:10:
f3:e2:43:05:71:42:16:53:eb:2b:f9:14:35:af:3c:f6:66:8a:
6a:bc:0a:8e:14:19:e1:e5:db:b4:b4:69:cb:f6:f1:04:9f:7e:
d7:56:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:11:31 2026 by rpki-client