Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: GQBKbGnliQ1H/BCqDwQcvlUV98+YVDB5+YNnr7ff2Qg=
Subject key identifier: BC:C0:B3:AD:D9:EA:A3:1A:3F:B5:5A:FA:6C:89:78:75:68:8B:E7:50
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019FAC76025DF499006FBCA338B5B9BA357D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0C9F
Signing time: Wed 29 Jul 2026 06:00:42 +0000
Manifest this update: Wed 29 Jul 2026 06:00:42 +0000
Manifest next update: Thu 30 Jul 2026 06:00:42 +0000
Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: q+TExMonpzxtQIeJdr7Ib6knQYomkHpHcPvpXr9HEo8=)
2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:02:5d:f4:99:00:6f:bc:a3:38:b5:b9:ba:35:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Jul 29 06:00:42 2026 GMT
Not After : Jul 30 06:00:42 2026 GMT
Subject: CN=bcc0b3add9eaa31a3fb55afa6c897875688be750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:19:c5:de:a7:b3:6b:3f:df:75:44:da:53:
c9:e7:fd:1d:36:e4:6f:04:0c:bc:ef:8f:20:a8:34:
b8:5e:b5:fb:fc:62:35:d2:29:fe:9f:57:bc:5b:a7:
b7:94:6a:42:00:8e:0d:ea:1f:90:ad:7b:21:83:f4:
3c:6d:9a:b9:fa:7a:a8:6b:fd:7f:e6:39:c0:fc:d8:
15:bb:75:34:4d:f2:0c:16:3d:51:12:54:cf:f8:40:
a0:96:fd:7a:ff:c8:c6:5e:1e:d2:de:7d:3f:10:2f:
0e:32:f5:7a:85:fb:01:01:3a:b4:d6:4b:ed:06:94:
c0:ae:ae:2a:83:f0:39:b0:da:eb:64:1b:83:ef:5c:
0a:57:77:7d:6d:a9:09:1f:e6:44:6c:80:db:f5:c2:
87:b2:f3:8c:f5:88:0c:f1:74:20:84:12:85:d9:3d:
a5:f4:70:5b:82:5f:58:a0:4c:35:12:53:c7:39:04:
cb:bf:72:9d:90:ab:2c:52:66:cf:23:a1:30:06:34:
83:e4:59:29:42:68:fc:8f:82:e9:52:fd:b6:9c:50:
ab:09:71:56:1a:15:54:f0:49:a9:b5:4f:84:4a:1e:
49:63:76:81:46:36:70:02:23:e8:e4:2a:66:92:dd:
c8:e4:01:81:a2:54:d7:08:d8:20:93:fc:61:23:6b:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C0:B3:AD:D9:EA:A3:1A:3F:B5:5A:FA:6C:89:78:75:68:8B:E7:50
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ce:f0:f1:2a:ad:f8:58:fb:dd:e8:01:1c:28:a9:47:69:55:
29:44:38:6d:72:35:c3:b9:9d:e8:8d:5d:cb:9e:96:e3:9f:bc:
7f:70:13:5a:34:53:ad:6c:ad:49:ae:1a:51:9e:3a:08:b3:5d:
00:ff:58:51:0f:fa:7c:55:d7:2e:08:88:9f:f9:cc:bf:18:05:
17:72:14:93:0b:7d:6a:29:68:2e:59:98:b9:75:64:cc:16:45:
99:95:ac:b1:98:4a:51:56:87:d7:86:4e:01:94:2e:a4:9c:4c:
97:3c:79:8d:0f:79:65:d2:9b:f4:88:31:9c:b2:1c:c9:e6:14:
a5:84:45:88:84:06:94:ce:66:55:a2:2e:e1:d4:dd:73:c7:a8:
2b:8e:63:7f:ba:de:b9:78:e0:d8:56:ad:78:6b:da:96:23:5c:
90:0d:29:aa:33:1a:d3:cd:fc:4e:1d:95:ef:9c:bc:bf:d2:62:
e2:31:75:b0:92:c3:02:ce:6c:ff:9a:b0:54:d4:72:d6:73:eb:
18:62:ff:e7:75:f8:b4:20:87:92:75:01:39:e8:b7:b4:51:c1:
13:7c:c6:1d:c5:89:1f:d7:9a:ec:d2:8b:8f:4d:81:9b:21:5d:
33:04:59:fc:e9:44:95:46:8a:ae:cd:fb:57:8e:8c:33:b6:c4:
4f:3e:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:11:15 2026 by rpki-client