Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json)
Hash identifier: 4CTHbKq75ppSZClAiki+ASBn083zp6206t208plH6h0=
Subject key identifier: 22:A8:C2:5F:8F:3A:A3:D7:01:76:F0:F5:1A:72:F1:B2:8A:A3:0D:CA
Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd
Certificate serial: 019E1CB491DAE0CDED511FCFBEB57AE6D407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
Manifest number: 0BD0
Signing time: Tue 12 May 2026 15:00:56 +0000
Manifest this update: Tue 12 May 2026 15:00:56 +0000
Manifest next update: Wed 13 May 2026 15:00:56 +0000
Files and hashes: 1: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: tPLAb9eZBgUCYXTEgsqBoBJEos31Y8tGtL4cXc4C/Lo=)
2: B87mAdd4CvquW6IizfewWsMBYIg.roa (hash: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:91:da:e0:cd:ed:51:1f:cf:be:b5:7a:e6:d4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd
Validity
Not Before: May 12 15:00:56 2026 GMT
Not After : May 13 15:00:56 2026 GMT
Subject: CN=22a8c25f8f3aa3d70176f0f51a72f1b28aa30dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:ff:37:bf:b3:e5:5d:91:01:68:df:24:93:
23:e3:a6:05:e3:d4:de:8a:34:fd:f2:a9:a7:9d:c2:
0a:50:01:53:8a:e9:7e:e6:02:cf:1f:c1:9d:14:b5:
6c:ed:41:47:03:be:58:8a:eb:64:a6:ed:a6:f0:7e:
a3:86:cb:9a:bd:f8:e9:6b:f8:0b:27:94:62:68:0f:
ea:a5:d9:5a:16:f9:e2:cf:84:c4:85:2c:c6:2c:42:
19:42:4d:76:f7:89:0b:5c:15:92:08:a6:bb:48:6b:
5d:e9:ab:a3:b2:81:ff:5a:bf:e1:3d:91:86:13:6b:
3b:65:2d:bc:ce:12:7e:d3:09:92:df:75:33:0a:67:
7a:4d:77:0c:1c:88:60:21:33:06:87:d5:6b:33:9e:
03:04:60:e9:8c:e6:4a:79:1d:bd:0f:6f:da:40:60:
b5:5e:ec:b0:1c:20:f7:b9:67:23:6e:11:40:bd:e6:
b3:03:de:f1:f1:9b:a3:03:7f:2d:ad:8b:62:dd:74:
a3:f8:46:b3:24:ed:79:bd:09:b1:44:0b:84:e9:cb:
0d:d9:55:e4:f6:fd:a1:6e:56:af:25:bc:80:33:49:
24:ed:b6:d1:a7:96:fe:8f:da:2b:b7:68:ec:6a:3c:
84:03:fe:6e:f0:5b:a4:7b:b9:e9:d6:3b:c5:66:a6:
b8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A8:C2:5F:8F:3A:A3:D7:01:76:F0:F5:1A:72:F1:B2:8A:A3:0D:CA
X509v3 Authority Key Identifier:
keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:15:25:42:9e:48:e3:98:45:91:6a:aa:da:6d:6c:64:8b:72:
01:6d:29:1a:7d:02:d2:8b:4c:84:ac:a9:34:d2:d4:50:72:2c:
a6:c4:28:79:5a:0d:9f:4b:d2:3c:0c:8b:8e:15:1d:dc:0c:85:
a4:f0:93:aa:35:84:90:dd:f1:88:64:b5:32:b9:1e:f6:93:fa:
2d:c0:5c:eb:39:7d:6e:f1:61:fc:96:b6:55:05:2d:8e:d3:d3:
c7:ec:c8:c5:33:ac:cf:9e:c7:c6:fa:00:42:53:24:df:c1:ee:
4a:95:c2:4a:5c:47:9d:2d:68:3c:9a:25:c2:30:7e:2d:1c:23:
45:5b:36:fc:b3:57:02:8f:31:a9:50:ef:00:e0:52:a2:d8:2e:
f0:74:55:49:e7:a7:97:69:f7:3d:04:81:21:81:75:45:c0:e1:
dc:34:f1:b5:3b:2c:e0:fe:1c:75:78:0c:7c:6e:0d:29:fd:c2:
6a:8c:3d:68:50:1c:51:bc:b4:85:34:ff:73:12:32:45:6e:ca:
d4:1d:bb:a4:5e:0c:c2:86:47:f1:f6:b7:fc:22:c3:6a:32:b6:
46:2b:64:97:ca:02:c2:ea:07:7d:1f:48:39:cd:6a:bc:ce:b8:
8f:b1:bc:a0:0c:80:ac:aa:a2:6b:26:99:4c:83:a2:d0:a8:d2:
73:0c:b9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:16 2026 by rpki-client