Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
File: C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft (raw, json)
Hash identifier: HD5AFCyVqwvsKI60hcbjJ3/iGZWNbAtRyLPhcWRBFU8=
Subject key identifier: 61:33:0A:B2:01:72:1B:72:B8:2C:52:B3:47:F8:43:06:3B:EA:0E:C5
Authority key identifier: 0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
Certificate issuer: /CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Certificate serial: 019FA2293C556B56DED5D60535C1EDD3BE0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
Manifest number: 4A
Signing time: Mon 27 Jul 2026 06:00:39 +0000
Manifest this update: Mon 27 Jul 2026 06:00:39 +0000
Manifest next update: Tue 28 Jul 2026 06:00:39 +0000
Files and hashes: 1: C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl (hash: rCU2u2XW/Iht7nClFrMXHESYgpgmzwBi2rDIjSTT2N0=)
2: UB6Z4RxbSymmwyF2i0zySOU1_ek.roa (hash: ocRn4kpzWMXb4ndCYHS8/37QR5foKf2xzUiC35UIK0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3c:55:6b:56:de:d5:d6:05:35:c1:ed:d3:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bdbbac793e1d688b65bdc00dd52658e20ad64fd
Validity
Not Before: Jul 27 06:00:39 2026 GMT
Not After : Jul 28 06:00:39 2026 GMT
Subject: CN=61330ab201721b72b82c52b347f843063bea0ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:f5:3e:72:7e:ed:2d:9a:a4:33:86:e4:64:
95:6f:db:e5:98:e8:4b:8f:bf:12:99:6e:4c:97:58:
44:c7:09:58:78:a8:d0:ce:dc:75:f0:8e:69:e9:42:
83:86:0f:2a:a3:64:05:0b:c5:fb:cf:2a:fd:6c:19:
3a:f9:b6:49:65:ca:cc:f1:4e:a1:f3:c0:45:56:58:
29:93:fe:2b:41:bb:4d:30:66:2c:d9:4f:71:0a:79:
f3:0d:48:ff:42:2c:02:64:0d:1b:bd:97:05:52:64:
f7:96:3b:c5:c2:44:51:3a:c5:2c:fa:c4:24:d4:95:
10:77:b2:82:97:f3:93:b3:cf:40:13:e4:97:d4:df:
7f:10:f2:59:4d:8c:41:31:90:e5:f9:85:42:a9:5d:
01:81:fb:96:70:1d:83:4d:63:dd:4a:ac:cf:17:39:
f8:36:de:a8:27:87:fd:de:f3:e9:20:a7:80:92:3a:
3a:f0:4a:3a:2b:31:ba:ef:52:39:f9:26:80:84:a4:
44:83:ea:56:8b:ce:f5:f0:f3:c4:06:aa:a3:41:45:
c4:21:2a:25:72:65:68:7a:ba:74:b2:bc:11:7c:df:
19:be:19:1e:81:bc:83:d5:18:d4:fe:6a:0a:f8:69:
48:e1:bc:27:ab:b2:43:4c:34:09:3c:0f:10:b0:de:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:0A:B2:01:72:1B:72:B8:2C:52:B3:47:F8:43:06:3B:EA:0E:C5
X509v3 Authority Key Identifier:
keyid:0B:DB:BA:C7:93:E1:D6:88:B6:5B:DC:00:DD:52:65:8E:20:AD:64:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9u6x5Ph1oi2W9wA3VJljiCtZP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4a542e-d309-470e-9f5c-8401e7550492/1/C9u6x5Ph1oi2W9wA3VJljiCtZP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3a:94:23:5b:ba:4f:9f:b0:f6:a3:ba:7e:4c:fc:65:4e:77:
67:61:bc:e5:2e:79:a0:e2:93:c6:14:5d:8b:01:72:4e:36:d4:
fe:86:0c:de:fe:05:4d:96:7c:e3:91:69:66:c2:a3:d9:b3:74:
a1:c5:77:76:0e:0b:b3:fa:d6:76:02:dd:3a:40:ed:d5:60:be:
70:9d:e0:6d:66:f1:03:e7:da:47:57:78:48:4e:21:7b:78:fd:
a0:69:ad:ab:f0:d6:37:c4:46:52:26:c7:6c:81:57:72:3a:46:
45:b6:d4:c5:74:85:95:b8:70:17:25:e7:37:b8:31:25:44:99:
18:ac:4e:4e:f0:9d:38:9e:f3:60:b0:dc:a4:f0:b4:0e:2c:ec:
0c:5f:cc:fb:bc:b9:5e:44:f7:45:85:f0:a0:6f:90:c0:2d:0f:
1f:8c:8b:d9:b2:6e:79:a2:f4:ca:10:df:e6:6b:69:62:ee:68:
3b:78:ea:d9:19:9d:e7:98:d8:d3:b0:e0:5c:bb:8b:97:cd:fd:
ef:59:df:aa:4b:0d:d0:24:fd:32:61:63:35:50:38:4d:45:80:
44:47:7a:f1:52:b9:1e:10:23:6b:63:fe:64:b3:e5:76:c1:91:
ba:d4:3b:c8:df:13:a6:36:f9:e1:79:12:ad:5b:fc:ca:4d:de:
c6:79:9f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:38 2026 by rpki-client