
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json)
Hash identifier: 4US3inreRdtUBYPGRbovnwQiK49Evrlg5oqjKXtrzFk=
Subject key identifier: 98:C7:57:86:03:C7:09:07:A9:4C:BA:CA:D0:72:63:62:FB:39:27:CF
Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b
Certificate serial: 01A001DCAE701B4B263EEC52AE3D781229BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
Manifest number: 0D17
Signing time: Fri 14 Aug 2026 20:00:34 +0000
Manifest this update: Fri 14 Aug 2026 20:00:34 +0000
Manifest next update: Sat 15 Aug 2026 20:00:34 +0000
Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: wdFRGcPFyz//WUMMzedWNcJxVRQTmTWArTp0xsgTo8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ae:70:1b:4b:26:3e:ec:52:ae:3d:78:12:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b
Validity
Not Before: Aug 14 20:00:34 2026 GMT
Not After : Aug 15 20:00:34 2026 GMT
Subject: CN=98c7578603c70907a94cbacad0726362fb3927cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3b:a2:7f:b4:a7:d7:9e:43:be:4a:6a:9d:ee:
6c:d2:05:84:d1:99:8a:e3:13:a5:58:14:61:70:7f:
d3:06:95:56:9c:99:b1:7a:69:c7:ab:eb:14:e1:80:
41:05:4b:ae:09:fc:66:34:7e:57:88:e4:e6:f1:1b:
d8:8f:a4:5c:60:58:2c:8f:ae:bf:ef:93:28:a3:e2:
55:6f:4f:fa:7f:e8:29:be:7c:88:8f:01:0e:8a:77:
56:06:74:de:7b:8b:67:dd:90:66:a8:79:1d:4e:5c:
fa:c3:01:fc:5b:18:e0:c9:88:f5:3d:fd:2e:3c:12:
db:11:a8:0c:f6:1c:0e:b1:f9:ae:ca:d2:89:32:7f:
ae:34:30:dd:2e:ca:46:75:ce:69:e3:e1:59:14:ca:
94:48:17:a0:91:9f:45:1d:89:56:6d:cc:57:a9:53:
19:78:16:62:82:a9:9d:22:b1:c5:d8:cb:a1:c7:95:
32:d7:65:3d:e5:f8:7c:e9:77:bb:e6:c0:28:dc:4c:
e6:22:4d:f8:2c:a5:62:08:d2:b8:b4:fb:47:bd:e0:
af:a3:af:dd:69:1e:9a:ad:ef:ca:97:21:8d:20:84:
70:6d:4a:38:bc:18:a6:7f:48:c4:7b:8b:ea:7f:44:
33:ca:4b:61:e3:97:9c:47:ca:b9:d9:df:00:21:eb:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:57:86:03:C7:09:07:A9:4C:BA:CA:D0:72:63:62:FB:39:27:CF
X509v3 Authority Key Identifier:
keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:1d:0f:8a:38:8f:8f:1f:c3:dd:67:31:88:3a:db:9c:91:
ec:9e:eb:6f:74:f5:ab:13:6c:4f:90:1b:a2:a7:0a:5e:e2:67:
b7:4e:90:14:85:a9:08:63:2b:42:c7:ba:8a:1d:9e:53:d1:ec:
41:53:0f:5a:7d:25:17:94:f7:63:5f:09:b0:ef:d7:d1:b9:be:
91:73:3c:7e:6e:d3:98:da:99:15:1b:79:e1:89:6e:42:6d:88:
1b:32:42:f6:a4:1a:d2:7b:6c:b4:88:4a:a6:7a:0f:e0:46:fc:
fd:dd:69:81:bb:60:fb:df:82:f3:9e:4b:9c:56:94:04:7e:27:
d2:a6:4b:41:65:7b:2e:fd:a9:47:80:e8:53:66:cd:70:49:3b:
a2:76:b3:4b:63:5e:15:2e:f2:5b:34:60:f7:94:bd:6e:60:6e:
94:14:97:16:04:d6:a0:68:12:b8:26:e0:f7:0f:eb:a1:2b:e5:
f3:cd:7f:6e:55:3c:fc:97:c6:48:47:ff:a8:8f:c0:7d:ac:32:
d8:24:3c:fe:b3:1b:18:02:b9:16:91:ba:7b:58:e8:57:3b:23:
b6:a1:90:1f:66:f8:b0:64:e9:21:f3:0f:d1:a4:36:0b:b8:4c:
73:70:10:b6:8f:54:95:c6:07:d8:16:f2:22:f8:47:0a:c7:0f:
60:1a:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:30 2026 by rpki-client