Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: EHFxYRTPjJerqSCcdKaMJKqIyeZdzLjN6ymcR83S/Pw=
Subject key identifier: 84:8A:7A:D2:93:08:0B:2B:65:B5:76:DE:10:CD:BE:43:A0:29:D5:43
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 01A11B63EBE9B305DAFF9E420A03283E5F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0D5D
Signing time: Thu 08 Oct 2026 12:01:35 +0000
Manifest this update: Thu 08 Oct 2026 12:01:35 +0000
Manifest next update: Fri 09 Oct 2026 12:01:35 +0000
Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: OBxmL8KXb7zLqZmH47+pQlQ2qeEhBnWSR4TxKh2pb9E=)
2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:eb:e9:b3:05:da:ff:9e:42:0a:03:28:3e:5f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Oct 8 12:01:35 2026 GMT
Not After : Oct 9 12:01:35 2026 GMT
Subject: CN=848a7ad293080b2b65b576de10cdbe43a029d543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:41:66:da:35:bf:d6:bd:36:1b:75:7c:6f:
5b:6d:7d:27:dc:6e:72:00:86:bc:0a:f6:a4:2d:eb:
ce:28:cf:b6:db:44:85:65:97:9d:ca:c7:55:fe:1e:
b3:65:65:3b:19:c4:af:f9:57:06:b0:b5:b1:fe:ce:
af:db:fb:c8:fa:81:6c:72:d5:04:96:c7:e8:b9:7b:
16:1d:20:61:0e:06:34:0f:e9:95:b7:c9:02:dc:76:
65:58:8c:16:97:c9:3c:33:df:5d:31:49:86:33:d2:
fd:d6:36:2a:c1:bc:61:ab:d2:95:26:9d:48:55:1c:
01:02:4b:0e:e0:f6:2b:ec:f4:37:f2:70:7c:f5:c1:
57:83:cc:76:cc:be:a8:ed:e2:66:9e:c5:c1:c2:03:
68:ee:81:64:d2:05:d4:28:37:bd:6e:d4:57:5e:53:
34:26:fe:f5:ab:7e:dc:9f:06:ac:e4:2d:6f:f7:41:
20:1c:00:86:c8:6f:89:30:27:de:4e:03:d0:6e:20:
86:5c:38:a1:55:34:e3:15:40:9a:0b:98:34:5d:0f:
69:a2:a4:12:6d:94:f2:d1:05:86:7c:49:09:fa:eb:
81:00:cf:54:ef:c2:c5:c8:37:60:8f:cb:12:16:1d:
43:c6:90:fd:9f:60:a4:90:71:96:b9:97:1d:0f:c3:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:7A:D2:93:08:0B:2B:65:B5:76:DE:10:CD:BE:43:A0:29:D5:43
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ad:5f:08:60:e1:0a:76:99:e7:b7:79:aa:92:ac:e4:f7:55:
10:e4:22:4b:b9:90:aa:a0:26:4e:dc:9c:68:f1:20:c6:b3:72:
00:e8:10:f8:f2:4d:02:cf:ce:01:7e:a3:c8:00:57:ba:f4:71:
b7:56:93:1d:4c:5b:a6:d4:71:88:43:42:c1:d8:19:83:72:dd:
ba:a9:2d:b6:90:f5:97:55:49:1b:e1:28:a7:38:58:51:ee:76:
91:4f:1a:4f:86:3b:b3:56:1d:2c:e8:2f:64:31:5b:e7:82:e1:
73:21:dd:00:51:39:6b:8c:b9:e9:1b:e2:9c:8a:e0:74:e6:49:
d5:c8:53:03:da:11:66:11:bb:bd:c4:4a:6c:c9:cd:fd:3d:b4:
40:df:20:33:6e:e4:45:5a:99:b7:dd:a8:8f:09:c9:76:1d:9f:
6c:2a:2b:88:6b:5c:fe:39:4d:55:9a:8e:43:15:34:87:34:8e:
5e:fe:6f:c2:e4:7e:d9:6f:5f:45:fa:87:cf:fc:48:e5:93:39:
57:f6:b4:41:65:1b:9f:79:52:a9:3a:b9:ec:5c:19:11:10:6f:
8a:ea:26:d1:fc:67:c2:3a:d7:bd:19:4d:1e:84:ca:fa:1c:6e:
d9:90:7b:60:64:c9:8e:9b:0b:cd:7b:7a:76:95:4c:03:ec:cc:
3e:fd:17:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEbY+vpswXa/55CCgMoPl8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5
NDJhYmQwHhcNMjYxMDA4MTIwMTM1WhcNMjYxMDA5MTIwMTM1WjAzMTEwLwYDVQQD
Eyg4NDhhN2FkMjkzMDgwYjJiNjViNTc2ZGUxMGNkYmU0M2EwMjlkNTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp5BZto1v9a9Nht1fG9bbX0n3G5y
AIa8CvakLevOKM+220SFZZedysdV/h6zZWU7GcSv+VcGsLWx/s6v2/vI+oFsctUE
lsfouXsWHSBhDgY0D+mVt8kC3HZlWIwWl8k8M99dMUmGM9L91jYqwbxhq9KVJp1I
VRwBAksO4PYr7PQ38nB89cFXg8x2zL6o7eJmnsXBwgNo7oFk0gXUKDe9btRXXlM0
Jv71q37cnwas5C1v90EgHACGyG+JMCfeTgPQbiCGXDihVTTjFUCaC5g0XQ9poqQS
bZTy0QWGfEkJ+uuBAM9U78LFyDdgj8sSFh1DxpD9n2CkkHGWuZcdD8NR8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISKetKTCAsrZbV23hDNvkOgKdVDMB8GA1UdIwQY
MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt
Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1
LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADq1fCGDh
CnaZ57d5qpKs5PdVEOQiS7mQqqAmTtycaPEgxrNyAOgQ+PJNAs/OAX6jyABXuvRx
t1aTHUxbptRxiENCwdgZg3LduqkttpD1l1VJG+EopzhYUe52kU8aT4Y7s1YdLOgv
ZDFb54LhcyHdAFE5a4y56RvinIrgdOZJ1chTA9oRZhG7vcRKbMnN/T20QN8gM27k
RVqZt92ojwnJdh2fbCoriGtc/jlNVZqOQxU0hzSOXv5vwuR+2W9fRfqHz/xI5ZM5
V/a0QWUbn3lSqTq57FwZERBviuom0fxnwjrXvRlNHoTK+hxu2ZB7YGTJjpsLzXt6
dpVMA+zMPv0X3w==
-----END CERTIFICATE-----
Generated at Thu Oct 8 16:24:45 2026 by rpki-client