Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: EAzU3PdcI2w62iDauorzWeMwbAwEeQZpwAqMVMDL6fE=
Subject key identifier: 7A:C8:4B:C1:18:5E:16:DF:5B:DA:31:DF:C0:88:6A:4C:E7:07:00:F4
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019DD163D992D420A73B4766521AC1E42BC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0BA9
Signing time: Tue 28 Apr 2026 00:01:15 +0000
Manifest this update: Tue 28 Apr 2026 00:01:15 +0000
Manifest next update: Wed 29 Apr 2026 00:01:15 +0000
Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: Jmp9yg0ChQ2ndD0Orl8HH/TGHahTjlNyJf09utikgIc=)
2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:63:d9:92:d4:20:a7:3b:47:66:52:1a:c1:e4:2b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Apr 28 00:01:15 2026 GMT
Not After : Apr 29 00:01:15 2026 GMT
Subject: CN=7ac84bc1185e16df5bda31dfc0886a4ce70700f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:59:dd:96:a4:5f:20:dc:60:2b:d9:ae:cd:d6:
20:c0:07:24:24:54:8e:3e:91:dc:d0:2a:b6:2d:2d:
e0:4f:d6:fe:42:cf:4c:59:dc:c2:66:b5:84:3f:af:
99:23:3e:c4:45:d9:e6:42:ad:93:c8:7e:ba:11:8d:
e5:23:63:49:97:96:cd:6c:d7:aa:48:a6:b6:ed:7e:
10:e7:84:63:30:01:38:67:a1:17:60:46:5b:14:3c:
bd:82:92:26:44:46:68:41:a5:a5:c5:57:77:32:c9:
5d:1b:6a:2d:b7:40:52:2d:f1:f7:18:60:ce:99:de:
5c:14:23:f7:04:22:63:69:24:1c:9c:46:a0:91:bc:
7f:2c:c4:e7:8d:3a:2e:3e:b2:f5:e9:72:fc:ef:d9:
6c:67:ea:64:bd:79:21:b5:a1:ff:76:37:5f:86:ac:
8d:49:63:b1:10:56:cb:03:c7:b1:03:18:07:85:48:
16:d3:6c:73:f1:db:bb:fe:ac:9f:49:6d:5b:d7:9c:
89:7e:25:3b:e6:b7:51:de:bb:5c:1c:9c:de:41:aa:
18:7c:ab:95:32:8f:05:7a:4a:15:f5:f3:ab:15:1b:
e2:3c:fe:90:03:27:fc:09:e2:ae:30:f7:59:c9:65:
d9:ee:4e:9c:e9:82:1e:b6:65:10:7c:ca:da:b0:46:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C8:4B:C1:18:5E:16:DF:5B:DA:31:DF:C0:88:6A:4C:E7:07:00:F4
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:13:a7:fd:48:a0:12:8a:fc:f0:51:ea:15:41:85:dc:45:09:
b4:f0:99:c5:ed:80:d0:47:2a:7f:05:2f:11:1c:dc:4a:d5:aa:
f4:90:83:7f:05:fb:a0:9c:b2:f6:7f:8d:49:fb:df:7f:57:25:
76:aa:a7:3c:fb:80:66:3b:46:e0:8c:6e:bb:43:eb:cc:0b:18:
0e:62:7f:d2:80:39:f8:3a:93:33:99:a0:46:c0:c0:b9:53:45:
44:56:1e:7d:e6:c6:ca:9a:f2:2a:c6:77:6f:50:15:5b:ba:80:
8c:f5:c4:ab:3a:86:73:88:3f:60:83:90:09:d4:db:df:f2:4f:
fe:48:a8:0f:81:9d:cf:0a:1a:d1:e6:b7:67:bf:35:27:fc:8b:
44:ca:4a:9d:df:47:5d:4a:22:8f:b2:dd:31:0d:0b:e0:97:34:
bd:34:b6:5b:77:93:58:2e:29:34:bd:0d:ae:69:19:85:ea:5a:
b5:42:01:b9:67:0f:31:ea:b5:7e:74:12:23:1d:19:3a:2e:d9:
e8:84:54:47:02:fb:2b:40:e0:df:2f:f8:12:55:73:df:2e:75:
b4:d5:37:cb:e8:d0:b5:ae:0d:8f:87:b2:15:2b:48:0b:b7:4d:
3e:fe:3c:ec:2b:5f:29:fb:35:6a:85:58:52:11:0a:38:b1:5a:
31:2c:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 05:10:37 2026 by rpki-client