Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: A3J+xLEJiiJ9ng2TvXmPPnSl5RVPmdybxh14YFiqYXQ=
Subject key identifier: 9A:2B:E9:C7:73:FF:84:7C:83:5C:46:B9:5A:94:FB:9C:F9:88:42:62
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019FAAF5E27F8044ECFF508677D5D51356E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 23:01:08 +0000
Manifest this update: Tue 28 Jul 2026 23:01:08 +0000
Manifest next update: Wed 29 Jul 2026 23:01:08 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: Duo0R7MJGRp2f5bhaJ3EAJ59y03uuhQWTxaP+odKZ10=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:e2:7f:80:44:ec:ff:50:86:77:d5:d5:13:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jul 28 23:01:08 2026 GMT
Not After : Jul 29 23:01:08 2026 GMT
Subject: CN=9a2be9c773ff847c835c46b95a94fb9cf9884262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:b7:48:7f:79:b1:36:c5:60:37:74:f9:d5:
a6:38:a8:e3:26:f1:d5:cf:59:be:57:e3:26:9e:e3:
ce:7c:78:f3:b4:25:ae:9a:f7:75:c2:fa:02:de:d1:
f2:a6:80:01:90:98:24:8e:88:d1:08:bb:52:a5:06:
3f:dd:0a:80:3d:6b:d7:64:89:7e:94:96:b1:72:8c:
c4:62:93:b9:c0:9c:50:05:a9:cb:fb:87:aa:5b:2d:
43:64:c6:ce:59:6f:c7:fc:e0:e3:86:22:af:23:32:
36:b9:1e:ed:8f:04:f8:e9:ae:4b:0b:40:9b:9d:7b:
8f:62:e4:de:cb:8a:30:de:bb:c5:de:9b:f8:d0:bb:
de:f8:c7:b1:b1:f1:bb:14:ea:33:cc:c8:60:7a:dd:
fb:00:13:8b:2a:8a:47:02:d3:78:6e:79:cd:01:1d:
52:28:0a:a7:77:ff:f1:47:e1:43:48:cc:19:b4:a1:
33:f7:6a:94:a9:f3:f9:10:e8:48:f5:26:f0:fb:9a:
ac:e0:8d:2c:31:d4:25:a3:11:57:45:98:f6:2f:57:
fe:a5:9d:e1:99:4e:24:79:aa:76:86:5f:cb:ed:82:
34:9d:6a:f1:23:73:e5:fd:f5:8f:17:28:11:4f:e7:
06:52:02:a4:45:14:c6:65:e8:c8:fa:cd:32:d5:b3:
ef:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2B:E9:C7:73:FF:84:7C:83:5C:46:B9:5A:94:FB:9C:F9:88:42:62
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:fa:ec:80:0d:99:2d:5a:b6:86:0c:54:b1:80:98:0f:35:39:
f2:5b:da:3b:b6:0a:a8:8b:97:a7:ea:79:5d:37:e5:90:fa:ff:
7f:ce:a2:cf:3b:d1:30:91:a6:d4:dc:8e:27:ef:16:ba:7a:9b:
42:df:f2:69:90:0c:79:f4:ad:94:1d:17:39:b1:51:75:eb:23:
27:1a:d6:13:a1:88:b7:3e:ee:c6:af:76:e8:73:d1:b2:b3:cc:
8b:70:63:37:d5:f5:61:f3:d7:0f:a8:c4:fc:ec:07:10:a1:0c:
02:4e:fa:41:d8:b6:1a:4e:b0:78:b5:28:34:be:6f:f3:00:e6:
40:9a:db:0a:91:b9:fd:57:c7:8b:75:95:41:dc:89:09:0c:77:
20:b5:20:d5:c4:82:85:09:b7:60:cd:31:09:3c:c0:29:bd:ff:
c9:c6:b8:bc:50:02:72:f3:6c:5e:a9:52:2f:a6:10:90:d9:09:
e6:a6:a4:e8:b7:13:15:78:2d:67:d3:61:12:49:49:14:b9:36:
13:12:ce:a0:21:ae:03:07:c8:a8:ba:8c:de:67:19:3e:f5:3e:
04:0e:d6:b0:a5:1b:0c:fc:46:1e:d9:5a:18:68:e0:42:09:a6:
0b:bf:85:6c:c5:c4:18:3f:1e:d4:94:be:24:a9:1d:1c:5b:55:
aa:da:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:57:35 2026 by rpki-client