
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
File: 9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft (raw, json)
Hash identifier: GGyEKXRKCNqdzYLawIFgGIdiklDddqZ0etBKXnzZxDM=
Subject key identifier: B8:B7:F6:1B:5A:00:09:85:4A:5D:C1:E3:6F:7B:9B:7D:AB:80:B6:4B
Authority key identifier: F5:93:15:BF:5C:5A:38:ED:48:A8:B2:65:4B:AC:D1:5E:C6:76:49:B5
Certificate issuer: /CN=f59315bf5c5a38ed48a8b2654bacd15ec67649b5
Certificate serial: 01A0412AFD6F0E4D0142934464342671E6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:11 +0000
Manifest this update: Thu 27 Aug 2026 03:02:11 +0000
Manifest next update: Fri 28 Aug 2026 03:02:11 +0000
Files and hashes: 1: 9A3OlY5RVtIFwtO7WI6eXK4tHgI.roa (hash: EiKfGC2WJXQAmYJmkMrTLU9ck5ZhlvrZW0WhXxUuwYg=)
2: 9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl (hash: 5aO3qMFlZgazB46BmX3oH3eCMA8MScSF6QzFAgCXIr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:fd:6f:0e:4d:01:42:93:44:64:34:26:71:e6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59315bf5c5a38ed48a8b2654bacd15ec67649b5
Validity
Not Before: Aug 27 03:02:11 2026 GMT
Not After : Aug 28 03:02:11 2026 GMT
Subject: CN=b8b7f61b5a0009854a5dc1e36f7b9b7dab80b64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:c6:bd:8e:db:2c:3f:c2:12:11:27:c3:08:
db:cc:fc:56:e4:ff:15:0b:78:18:75:19:2f:a7:94:
5f:7a:02:82:0d:b3:1f:41:7b:02:e9:4c:e9:f4:c8:
a7:e7:ab:af:c0:7f:1c:65:28:65:b8:d0:68:10:4a:
69:b5:27:33:f5:1e:80:39:64:1a:7d:f3:d5:ae:9b:
af:e2:f9:8b:63:89:11:d2:f0:2f:a5:bc:81:5e:88:
15:c6:0b:49:df:82:87:96:04:60:e1:e2:61:d3:c4:
ee:68:5d:17:8d:c3:bd:99:d6:c5:0f:4b:14:0a:68:
03:27:d3:5d:01:61:ea:fa:cf:5b:70:eb:c2:df:ef:
ee:86:5f:a3:51:2f:bb:bf:47:fd:6e:6b:91:40:9b:
0c:b9:09:15:d1:22:65:dc:3a:f6:00:65:37:d4:98:
4b:0b:4f:9b:ee:f7:18:cb:46:cf:56:20:66:21:4a:
0b:70:73:27:0c:d2:ad:9e:4e:31:40:f1:19:68:15:
31:c1:83:05:a5:8d:7b:f3:c2:b2:0f:37:8b:33:dd:
43:de:02:a3:e1:ab:63:ae:a0:85:80:40:af:ff:15:
d1:1f:c8:da:e1:24:5d:7c:f4:d0:56:9d:d2:96:8f:
eb:5c:e6:4d:ae:94:53:7f:65:d5:2d:fe:dc:4e:34:
a5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:F6:1B:5A:00:09:85:4A:5D:C1:E3:6F:7B:9B:7D:AB:80:B6:4B
X509v3 Authority Key Identifier:
keyid:F5:93:15:BF:5C:5A:38:ED:48:A8:B2:65:4B:AC:D1:5E:C6:76:49:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2472a9-ff66-4dcf-ac82-30e540d5d3a7/1/9ZMVv1xaOO1IqLJlS6zRXsZ2SbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:19:79:74:f8:87:ac:03:72:b7:27:59:df:0a:83:b7:23:11:
9d:57:fd:31:5e:95:d9:6a:9d:79:1a:77:e2:48:ef:a3:dd:c5:
66:dd:62:da:e3:48:22:b6:b9:b6:68:02:c9:7d:57:08:c1:26:
d6:72:af:cb:b9:a3:d1:bd:2e:d4:88:9b:d1:f2:4d:c3:37:03:
f0:67:94:8e:a9:23:ab:56:57:47:f2:01:63:4f:51:d7:a2:47:
57:81:6f:7a:d8:fd:a1:cd:b2:d4:5d:d9:33:a0:6d:1b:85:5b:
c7:a2:da:9f:67:38:3a:d6:e5:e5:ba:09:28:06:d2:47:38:74:
66:1c:f2:f1:c9:f1:b6:b4:43:f4:bf:9d:78:8e:40:9d:f1:60:
69:72:ea:87:63:a8:dc:f3:31:01:1d:97:9c:04:08:1f:a2:a1:
24:02:3c:f9:0c:9a:02:3a:d1:da:1a:0c:b2:3e:8d:e6:d7:e5:
9b:06:22:0d:d8:d9:52:2f:cf:c6:56:9a:04:ba:3c:b1:3b:4f:
37:dc:02:a7:aa:76:a7:47:80:13:75:ed:20:70:6f:f1:59:a2:
6a:de:a9:59:86:4d:f1:94:38:91:54:40:d3:15:2f:2a:61:b2:
80:03:e0:51:c4:99:3d:a1:92:98:0b:0b:27:68:f1:72:df:05:
f8:2d:4a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:34 2026 by rpki-client