
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: cdH5B64RzJIc+xWDRrVPqDqZmR2487KjwlF0Y2RuJEc=
Subject key identifier: A2:75:9A:0C:CA:D0:A4:91:D5:A7:8D:46:68:B2:E5:37:C1:55:B6:83
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019FFBA547750896BDCD236987BF2F90ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0CC8
Signing time: Thu 13 Aug 2026 15:02:20 +0000
Manifest this update: Thu 13 Aug 2026 15:02:20 +0000
Manifest next update: Fri 14 Aug 2026 15:02:20 +0000
Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: TKJVE078a66yo9V92G70t4Edmau990YupW4Rojc7SY0=)
2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a5:47:75:08:96:bd:cd:23:69:87:bf:2f:90:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: Aug 13 15:02:20 2026 GMT
Not After : Aug 14 15:02:20 2026 GMT
Subject: CN=a2759a0ccad0a491d5a78d4668b2e537c155b683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:6e:cd:05:ac:3d:a2:b4:c6:ee:16:c9:53:
46:2f:3e:81:18:45:8f:1a:be:99:55:ab:b1:55:80:
21:72:4a:ff:17:0d:bf:ef:24:c2:ea:d7:8e:56:12:
b3:55:cf:3f:e5:fc:94:9e:17:d9:bc:f8:c4:df:67:
d7:fc:c9:af:2a:c3:f0:20:92:83:6e:6d:19:c0:dd:
4b:aa:e8:86:a2:43:b9:25:e3:4b:e1:a7:0c:47:aa:
38:e5:00:7c:13:49:42:30:42:a4:40:9d:b7:28:49:
dd:f4:fa:6e:7b:f1:56:5d:5f:2b:53:de:3c:6e:02:
99:14:3b:77:08:98:87:a7:24:2e:7e:b0:a2:51:e6:
a4:df:70:cb:7a:92:c1:99:a0:61:74:02:e9:3b:e7:
c4:2d:99:0b:e0:c3:37:38:f2:4c:7f:94:e2:ca:6f:
aa:ef:9a:39:8c:cd:50:4c:59:f9:21:f2:7f:96:df:
48:ee:85:30:ff:07:6a:f9:5d:b4:0d:0b:03:1b:45:
70:65:01:72:5a:2b:f7:67:71:74:12:ae:e9:a6:6a:
ee:6c:d1:55:d7:fd:a7:95:95:34:ef:bb:d7:04:e9:
fb:53:a7:6e:4f:28:60:8a:fb:72:07:b0:8b:4d:b4:
3d:16:c1:d1:d4:3d:a9:b8:ec:0d:22:f8:5c:84:d8:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:75:9A:0C:CA:D0:A4:91:D5:A7:8D:46:68:B2:E5:37:C1:55:B6:83
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:25:68:53:74:1d:76:81:db:a6:e1:0c:46:0e:69:ed:69:7c:
a7:f1:ce:e7:48:1b:89:00:f2:b3:99:a9:08:10:34:09:8d:65:
56:db:ba:10:a4:21:e1:90:87:91:c6:d3:1d:63:68:1f:92:7d:
94:65:46:25:d4:1d:e2:a6:6d:08:b5:d7:ac:0e:82:45:53:49:
54:32:23:4c:71:1f:ac:92:ad:a7:ef:62:dd:76:6c:d2:d9:fe:
db:58:2e:98:6b:3f:39:b8:59:fb:16:78:df:59:91:92:46:59:
45:df:d6:8e:ef:6f:ce:c4:a6:64:2f:7e:cb:90:09:e7:7b:3e:
ba:c0:61:69:c6:fa:fe:e9:af:5f:a1:3f:89:3b:77:dc:12:f3:
e3:5f:e8:da:e6:38:1d:cd:ff:dc:fa:46:d6:a4:48:af:f8:d3:
e3:98:dc:46:58:14:7d:37:cd:85:55:a0:34:5c:19:22:f9:cf:
35:38:fd:a1:24:4e:7c:e9:f1:01:5e:2e:d6:32:a9:8f:71:ef:
ec:2f:6b:a3:4f:d3:c2:a1:f4:08:72:4f:60:25:8b:c9:93:93:
59:c1:99:37:3c:62:1d:b2:e2:93:35:d6:b3:71:74:18:04:8f:
46:50:b8:ec:d1:bf:e1:d9:c9:52:d3:d7:e0:84:53:53:b0:be:
67:3a:23:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:15:53 2026 by rpki-client