Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: aVNTv9geitPy2H5QcHqSwn+lUnzUA3mV0QepGMLUsao=
Subject key identifier: 35:BF:AA:A1:6F:BB:9B:D3:EC:F0:EA:04:0B:D7:B9:79:C4:5A:3B:5C
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019EBF5AC1483CF1C8BED017354F9474D56C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 05:00:56 +0000
Manifest this update: Sat 13 Jun 2026 05:00:56 +0000
Manifest next update: Sun 14 Jun 2026 05:00:56 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: HyYCY76lq+BUfr403xSuuj/vj7FTU4WROocahdbhMRM=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:c1:48:3c:f1:c8:be:d0:17:35:4f:94:74:d5:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jun 13 05:00:56 2026 GMT
Not After : Jun 14 05:00:56 2026 GMT
Subject: CN=35bfaaa16fbb9bd3ecf0ea040bd7b979c45a3b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:44:e6:c7:24:68:fb:8b:e9:2d:dd:d4:ed:
fc:0e:ad:88:8e:bb:e7:c1:39:0e:e0:df:20:b9:a9:
02:ea:a6:7e:e4:8b:a9:02:42:90:89:61:53:d3:39:
ce:66:39:19:5c:3b:44:61:22:01:2a:93:a8:0c:f4:
e4:60:71:bd:59:46:e3:29:4b:d8:07:43:38:94:7b:
b5:3d:87:bb:83:37:e9:93:fc:a9:95:75:6f:a2:93:
a1:9e:62:9a:82:f4:64:0e:21:03:02:b0:32:c6:a0:
0c:d3:1f:1c:22:88:c1:35:71:88:0d:8d:b9:64:2d:
d9:65:34:1c:46:b6:92:69:20:c3:44:ee:2e:45:fd:
a2:c0:02:66:66:31:eb:bb:3c:3c:00:55:dc:c6:79:
1b:00:80:9d:f2:a8:92:58:e7:c2:04:e8:2c:f6:06:
39:6c:5a:bb:d6:7f:a8:18:58:5a:82:33:5b:b8:11:
23:3f:22:3b:0c:99:a5:54:37:46:ff:d1:5a:ca:be:
c3:22:de:94:43:76:20:af:c7:f5:8a:cb:23:21:9a:
28:9a:14:48:24:94:83:5a:65:83:3d:b2:40:82:3a:
cd:fd:27:17:47:d6:87:eb:5c:b3:f4:f0:ed:28:51:
59:38:ee:07:6a:4b:2e:4b:15:01:35:12:d0:00:68:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BF:AA:A1:6F:BB:9B:D3:EC:F0:EA:04:0B:D7:B9:79:C4:5A:3B:5C
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7b:f1:72:0b:eb:7c:3d:63:ce:a6:76:c6:2f:b3:33:2b:0b:
2c:f2:84:c8:a8:ff:c8:03:07:b7:c1:9f:0f:83:e8:87:69:05:
44:25:e1:45:d2:a2:9f:e8:52:cb:54:5a:92:eb:69:38:0d:0b:
7c:46:d6:56:70:6c:09:91:eb:f4:02:57:8e:0b:1e:8f:c6:56:
df:28:a8:95:5f:3f:66:62:28:54:97:63:fb:24:cc:f7:6b:71:
41:9e:0a:8f:d1:2e:de:cc:30:9c:c3:b7:40:ac:10:c7:4f:8d:
c2:78:82:bb:a9:86:78:b5:0b:d7:ea:1c:67:15:ba:ef:6c:8a:
78:16:d2:9d:64:98:69:32:51:1e:ec:54:2b:ae:94:f5:94:a1:
8b:2b:ed:2e:50:cf:69:b7:4e:63:d9:64:d1:83:8d:7f:fb:16:
0d:a7:96:55:a2:63:42:96:0f:ce:b7:b7:be:c9:5b:77:46:7e:
53:dc:b4:75:fa:64:df:e9:ed:cf:cc:99:87:86:2c:71:47:e0:
95:78:6a:99:a1:f9:92:ef:f6:a6:bd:e5:37:f2:56:66:39:5e:
b4:5b:d2:21:9e:66:41:49:80:c8:bb:47:f7:57:73:41:b2:12:
20:ab:81:a9:b1:b1:60:ac:79:c2:73:c6:8b:7e:ce:50:35:9d:
37:9f:6b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:04 2026 by rpki-client