Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: Ru1LxE9fNqr/XewhgWe7IkFwy32lrYotp8VOFCLBKGc=
Subject key identifier: 1B:A5:B7:AA:D7:BF:86:26:62:78:F8:F1:64:F5:E0:F4:60:D0:24:C5
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 01A13F0278F599B3123252FC7CA5FEDCBBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 10:01:28 +0000
Manifest this update: Thu 15 Oct 2026 10:01:28 +0000
Manifest next update: Fri 16 Oct 2026 10:01:28 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: iDUmYBJN6TQOuWMxN8ZIhTtneIyge2GmbAN1C7WNfqI=)
2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:78:f5:99:b3:12:32:52:fc:7c:a5:fe:dc:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Oct 15 10:01:28 2026 GMT
Not After : Oct 16 10:01:28 2026 GMT
Subject: CN=1ba5b7aad7bf86266278f8f164f5e0f460d024c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:10:aa:9e:fd:d0:75:a7:e7:78:b8:c8:01:
a3:ff:e8:be:f7:a9:36:dc:75:76:a4:91:5b:35:41:
87:bf:4a:dc:e1:6d:b8:e1:a3:8c:e0:b6:1c:ad:34:
22:2e:1f:d4:b1:ea:82:f2:4c:80:b7:c1:f1:71:fa:
07:b6:38:fc:a4:5e:06:18:c5:61:2f:19:fd:6e:df:
4e:0c:ea:41:b7:f7:b8:cb:cd:6f:6a:47:89:b0:40:
da:af:83:22:8b:cb:63:d7:a1:22:08:cd:19:e4:d4:
5a:21:33:2a:0d:c6:16:3a:ee:18:c2:18:71:94:fb:
43:d3:69:19:45:8e:66:e2:24:b5:65:6c:fc:68:e9:
dc:54:c4:fe:25:40:a7:b2:64:71:18:d8:16:52:1c:
63:d7:95:47:40:c3:4d:8e:ed:2b:26:47:6e:72:49:
f4:b1:46:51:9e:86:be:c6:0f:52:e2:f5:94:06:8f:
43:0a:c6:53:88:93:e3:91:ff:0b:09:35:e3:eb:57:
4c:39:58:ee:e9:47:d8:9b:8d:4e:e6:9e:59:65:32:
dd:b6:a3:1e:27:ad:62:fc:15:03:dc:fd:81:35:ac:
fa:46:f1:9a:da:ad:25:ce:5c:6f:db:dc:69:c5:33:
c0:ac:80:50:74:58:92:9c:41:8d:ea:82:ab:b4:d5:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A5:B7:AA:D7:BF:86:26:62:78:F8:F1:64:F5:E0:F4:60:D0:24:C5
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:04:c8:0e:10:57:d7:57:05:2e:0b:f2:19:64:bb:07:25:cc:
2c:f7:6d:d5:63:62:d3:48:aa:3b:3a:44:8f:8d:5b:d2:45:12:
94:e1:77:9c:44:b2:76:86:e4:a5:38:98:43:85:be:63:f2:33:
31:27:72:72:a1:74:cc:5b:65:61:1e:24:cd:0b:b2:ea:54:c3:
e1:f2:34:cd:e0:79:af:91:04:c4:ba:a5:08:b7:10:d6:3b:45:
f6:2b:22:7c:63:6d:a1:f7:57:6e:8f:4a:4c:1a:cd:e5:2d:13:
5d:fe:62:9e:c3:d7:d3:55:3b:b0:9e:42:4a:f5:76:7d:8a:b5:
f7:ae:6d:8d:6a:11:22:47:e1:46:bd:e0:a3:b4:37:53:62:1a:
17:c7:bb:36:ab:95:dd:92:4a:a9:9a:0c:d0:35:05:fe:70:fb:
28:30:30:dc:4a:df:15:88:d8:3d:0c:e3:f0:ce:6f:88:dc:75:
80:81:c7:81:d6:10:03:1c:e2:e4:85:1f:59:d4:68:77:f0:8b:
2a:1f:3c:3e:a2:e5:61:09:95:a3:8f:27:81:36:a3:ae:02:d4:
0a:44:4f:7e:ab:64:62:3f:98:7e:cb:c9:88:6e:40:b6:af:13:
0b:cc:c9:dd:7e:a2:6c:15:41:97:18:d2:99:10:14:98:e9:d5:
7b:1a:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:47 2026 by rpki-client