Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json)
Hash identifier: yLc+eYEX25cbuWVZJ7tvPv7KIaMLQpSgfcXihIPYeDg=
Subject key identifier: E8:C0:95:05:F9:09:1F:F0:61:91:97:AB:C2:8C:98:55:10:3E:90:DF
Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Certificate serial: 019D3941350C37FADDB133ED64B4507BA06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
Manifest number: 1889
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: PVXQzdNbQEFeuzFFiWV6yA4zyzYtCbSAObCb89hPpiU=)
2: jOykBhJC42A0W5WnNWHQ6Ui_HAI.roa (hash: p6WX3Hu0x5KT7vdzzBlcWjdetobjNczy8S7l0BXnNGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:35:0c:37:fa:dd:b1:33:ed:64:b4:50:7b:a0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=e8c09505f9091ff0619197abc28c9855103e90df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:91:dd:53:c4:fd:5b:1a:f9:00:4f:27:d2:
11:33:84:83:f6:67:a4:7d:e6:f5:8c:2b:b1:68:c7:
59:23:d3:32:e8:fe:fc:ef:90:1b:98:34:6e:1f:de:
3f:52:e2:14:18:fc:bb:00:5c:63:b0:00:7a:09:da:
0a:f0:46:29:e4:f6:7b:25:ba:cb:78:36:7b:60:e4:
86:56:17:38:ab:e3:a5:9c:4f:6b:cf:80:28:1b:06:
41:21:85:e5:67:4d:85:4b:99:ca:db:79:d5:d4:bf:
2d:a4:44:bc:56:64:ed:a5:98:ef:68:6f:cf:e1:b4:
38:61:a6:9e:61:34:11:c1:77:21:ae:dc:7b:69:3e:
25:65:62:1e:e9:fd:6d:97:30:d2:ad:9f:9a:b1:b1:
2b:b2:bf:60:57:8f:b5:1d:48:54:43:cd:84:ed:99:
ff:57:bf:ad:95:7b:e6:b3:6b:05:f8:00:c7:c2:5e:
8d:52:8b:92:fc:bc:81:a1:d3:9d:f9:9d:e8:4b:f8:
e4:43:f5:30:82:ed:a3:d5:9b:98:50:9b:0f:71:ec:
67:42:65:9a:ab:17:50:29:90:5f:db:92:21:fc:0d:
fc:b1:4b:53:8d:4f:7b:d9:e2:13:3e:aa:70:45:b2:
90:f7:4a:b5:7e:f9:96:b5:d1:a8:81:31:ce:3d:98:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C0:95:05:F9:09:1F:F0:61:91:97:AB:C2:8C:98:55:10:3E:90:DF
X509v3 Authority Key Identifier:
keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:37:93:be:b5:1d:6d:d1:c3:63:48:3d:3a:31:e3:12:bb:
ce:6c:80:5d:6a:ae:38:24:c4:d8:80:0b:9c:5a:82:75:29:38:
a8:93:15:72:a1:74:ce:62:c2:2e:e8:42:2e:2b:1f:5d:82:0e:
60:91:8d:1b:d6:2f:2f:07:bd:27:2a:88:3b:ff:04:3d:ae:be:
a1:b6:65:53:45:e9:fc:7a:0b:5b:8a:1c:8c:64:f5:ed:9c:06:
c2:94:e1:df:fe:ad:6a:5c:b7:e2:8d:99:ad:60:71:bd:73:43:
25:9b:10:38:5c:d9:c4:ea:57:47:61:71:a8:dd:e7:e2:75:b1:
e8:5a:c4:4e:35:9d:fb:59:9f:fa:75:d4:f8:c1:81:f1:f8:37:
a1:f2:d6:70:7a:ce:03:f9:f3:de:6c:76:c8:f1:ba:3d:0e:98:
6c:27:ac:fb:b0:06:73:dd:cc:7d:f1:9d:f3:fc:d2:13:7a:fb:
11:29:93:b0:67:48:a3:ba:37:60:ff:8f:a2:25:c5:75:e6:df:
ea:0d:0e:0d:c5:4f:83:d7:a5:2c:b7:a1:54:01:bc:9c:ca:22:
51:7d:54:50:1f:eb:c7:f5:41:c9:2b:07:a3:8d:57:46:2c:f8:
41:61:d3:d6:8d:6a:e2:f6:b5:10:da:25:49:ae:26:57:c0:80:
de:47:6a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:43 2026 by rpki-client