Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
File: 94bCd_bKgIr9ygVnP0tsJXOXTj4.mft (raw, json)
Hash identifier: 2m37o3deCYSTAVhWxxjO/R9Jar2SUHursCniYO5QDkg=
Subject key identifier: 9A:BC:FC:C4:DC:BB:06:DA:B2:93:91:1D:DC:DE:9F:88:21:51:91:97
Authority key identifier: F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
Certificate issuer: /CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Certificate serial: 01A0016EE5D745B4A52FBE4251CD6EDFA83F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
Manifest number: 1993
Signing time: Fri 14 Aug 2026 18:00:40 +0000
Manifest this update: Fri 14 Aug 2026 18:00:40 +0000
Manifest next update: Sat 15 Aug 2026 18:00:40 +0000
Files and hashes: 1: 94bCd_bKgIr9ygVnP0tsJXOXTj4.crl (hash: d5iGcwmLn2czTLDBC9k04KPp8vI61FGpeDzXpMLDmAY=)
2: yat_VFBsRL2vXjBQHXCl5CuZLXk.roa (hash: AeN/Vtg1z//ZrqzG5NqKqgHUFWw8uKLPlQFadvjnPx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:e5:d7:45:b4:a5:2f:be:42:51:cd:6e:df:a8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f786c277f6ca808afdca05673f4b6c2573974e3e
Validity
Not Before: Aug 14 18:00:40 2026 GMT
Not After : Aug 15 18:00:40 2026 GMT
Subject: CN=9abcfcc4dcbb06dab293911ddcde9f8821519197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:a9:47:db:58:b1:bf:e4:a5:52:e2:b7:bb:
c3:90:fe:e6:e1:c5:f8:96:9b:d3:23:78:5e:7d:1e:
73:f1:d3:6b:f6:f9:d0:29:b0:e8:0d:46:71:c7:44:
28:9e:af:86:d7:f3:41:a7:e3:87:45:05:4c:be:e1:
72:e3:3b:83:4d:48:da:de:ae:99:95:09:68:80:8c:
c9:f6:a8:58:9b:47:68:ee:fb:e1:df:95:96:ad:2d:
ba:13:2c:b3:0d:e7:d9:7c:d2:7a:33:50:51:24:d0:
88:1e:95:bd:62:7d:1d:cd:2f:76:cd:01:28:52:89:
d9:bf:9c:00:06:c6:4f:bd:73:2d:58:3f:5a:68:0f:
9c:49:23:5d:e2:7d:71:34:3a:cb:0b:75:c3:df:59:
cd:64:a2:3b:b7:d5:e7:be:28:95:d7:88:0d:0b:db:
96:84:1c:19:74:09:25:b7:8c:aa:5a:bc:ea:ed:f5:
54:a3:75:04:12:24:7f:80:0f:a3:eb:20:02:23:a4:
2a:89:b4:11:63:f0:83:21:48:26:b4:1f:39:37:c3:
df:cd:b1:6a:92:28:d7:31:63:9e:03:1d:44:e1:0b:
fb:5d:8f:6d:59:89:36:43:15:ff:92:45:f9:15:bb:
78:b8:34:f8:a0:2b:6f:f2:e2:34:7c:20:ff:35:93:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:FC:C4:DC:BB:06:DA:B2:93:91:1D:DC:DE:9F:88:21:51:91:97
X509v3 Authority Key Identifier:
keyid:F7:86:C2:77:F6:CA:80:8A:FD:CA:05:67:3F:4B:6C:25:73:97:4E:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94bCd_bKgIr9ygVnP0tsJXOXTj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/627d4a-1e07-4e0c-89fd-fca2453434c9/1/94bCd_bKgIr9ygVnP0tsJXOXTj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:25:37:9f:9f:9d:1f:af:d5:9f:f9:2e:a5:24:a1:58:57:f7:
e0:23:87:b9:89:61:6c:de:4d:e2:7b:e6:b3:4f:d7:d4:ad:63:
67:c0:eb:12:6e:7c:ef:c4:b3:6e:92:24:08:08:a0:bc:11:5e:
87:07:71:7f:73:fe:c8:f1:9d:9c:53:9b:d5:9c:bc:32:92:78:
5b:b7:76:a9:5a:8b:81:b2:47:0b:d0:25:20:07:b4:f3:06:39:
67:cf:48:af:df:aa:dd:2b:3e:25:1b:e3:47:36:53:b0:eb:8a:
ef:49:a3:54:d9:f4:b3:f3:d4:1a:d6:62:dd:e2:5e:88:5b:e9:
a1:59:04:15:55:ec:04:6b:2f:ce:67:74:44:82:d7:c9:0e:03:
8f:b0:fe:5c:fb:3c:ac:d5:59:20:20:d5:a4:b9:af:8c:6d:77:
7c:ea:1b:2a:b6:60:9b:b2:e6:6f:90:4f:29:dc:cf:9c:57:f0:
b1:64:ca:fd:45:09:b5:04:a6:fe:4f:f1:52:3d:ff:79:af:79:
9a:74:06:a6:e3:d8:a5:19:c1:f2:41:32:31:60:59:44:d8:b5:
68:27:67:12:11:32:3b:94:cc:87:48:61:e9:f9:cf:bf:d4:ed:
4a:37:e9:7c:42:0a:b1:70:1a:34:92:5e:cd:b2:f2:2d:d2:22:
0c:07:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:27 2026 by rpki-client