Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier: 3vplu7gFXYYSQ1mkJAiVYGWEZdzZMWly6xxxNm2SOCY=
Subject key identifier: 49:DA:62:09:ED:D8:A6:C7:F2:99:7A:17:83:3C:49:0B:48:F9:DC:23
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial: 019FAA87EBE36CAC4FC7672142016AFA6D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number: 1348
Signing time: Tue 28 Jul 2026 21:01:02 +0000
Manifest this update: Tue 28 Jul 2026 21:01:02 +0000
Manifest next update: Wed 29 Jul 2026 21:01:02 +0000
Files and hashes: 1: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (hash: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4=)
2: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: yQORLYp7u2N1xbDk65P6Ls0Lbx+99qGfVDRN1YaucGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:eb:e3:6c:ac:4f:c7:67:21:42:01:6a:fa:6d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Validity
Not Before: Jul 28 21:01:02 2026 GMT
Not After : Jul 29 21:01:02 2026 GMT
Subject: CN=49da6209edd8a6c7f2997a17833c490b48f9dc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:88:6c:0f:38:3e:3b:d0:e6:18:02:a0:ab:71:
42:38:18:aa:e3:6a:09:76:d0:17:a3:78:33:3a:0b:
10:b4:45:69:c5:01:5c:37:40:9d:8e:16:b8:c0:2b:
81:81:db:e3:ff:79:8d:9c:11:4f:c9:67:1e:0c:80:
af:58:ec:e2:3a:67:4c:d0:1f:0d:22:a8:67:43:62:
de:62:cc:b4:43:2d:24:82:67:cf:fb:f7:92:3a:c4:
f2:29:2f:81:17:c9:a5:97:41:96:51:12:e7:b2:bc:
43:af:39:2c:bb:9e:e0:57:08:1a:fe:ff:dc:4d:3b:
72:65:a6:a6:a6:f6:d9:e4:89:eb:32:4d:0c:28:07:
17:eb:54:54:c1:9e:e6:44:c4:ad:af:1f:e7:d5:0d:
6d:04:05:75:98:9f:7d:cd:99:0f:b0:01:39:b1:43:
19:d5:e0:6f:2e:83:e4:ef:5b:b3:37:82:cb:9f:d9:
44:f0:2a:5d:1f:07:26:b4:7e:89:10:52:f7:49:a5:
a4:c1:3f:45:f6:cf:53:c1:76:4f:9c:1f:04:49:c2:
bc:e0:1e:51:af:de:56:63:b9:f1:3b:00:b1:13:c8:
bf:82:09:26:d6:7a:c1:b1:55:98:8e:09:82:8e:33:
79:d4:16:90:ea:71:2c:37:b1:65:c2:1f:9b:c5:ce:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DA:62:09:ED:D8:A6:C7:F2:99:7A:17:83:3C:49:0B:48:F9:DC:23
X509v3 Authority Key Identifier:
keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:92:a4:5a:fc:e8:58:20:bf:64:c6:53:97:66:45:e3:13:c5:
71:a4:c0:6e:1a:e9:d6:d3:12:df:46:d2:f4:72:7d:cb:54:d0:
9e:57:41:9c:4d:31:97:3f:1c:39:60:3c:8a:fc:7a:93:d5:a1:
13:d0:d9:aa:65:77:6e:27:a7:45:e3:56:bf:2b:7b:aa:12:d7:
44:f4:48:60:7a:3b:e4:52:f0:c9:e7:d6:05:cc:bb:a2:3c:74:
b5:f1:6c:ca:bd:39:eb:b0:5a:2c:cb:b1:e9:32:bc:3c:a0:80:
9b:b0:52:66:c6:a0:a6:2d:d6:b3:99:f3:a9:ad:4a:9c:d6:52:
b3:cc:1e:cd:47:df:0e:9e:ea:f2:1e:86:b7:6f:71:33:a5:e4:
4c:38:df:1e:bb:d8:be:23:fe:b1:15:1c:98:22:c4:ba:a4:3e:
cf:33:d4:da:6b:3f:fe:fb:8e:31:b4:39:60:90:e3:71:4d:a7:
05:f2:7b:11:ce:a9:3a:e4:3c:8b:57:ae:f7:c0:a7:d2:30:40:
4d:2f:16:ae:7f:69:d2:3b:a5:7b:68:ba:77:0a:2a:c3:66:56:
fe:f2:e3:f8:3b:36:00:6c:28:b8:74:b6:14:38:ac:14:03:c1:
6f:f7:2a:1c:7c:f3:63:33:01:54:2e:7a:2e:74:50:f5:54:c9:
5a:81:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:27:51 2026 by rpki-client