Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: MySPbKn+N6RvSMeHVd1iI0nrIp8xmqMThbOqOOhftA8=
Subject key identifier: A7:1C:10:21:C5:09:35:7F:A0:DA:69:A7:1E:70:2E:2D:88:75:3C:A0
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019FA93DC61A4FB227537C54FFA828C2867B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 19DC
Signing time: Tue 28 Jul 2026 15:00:25 +0000
Manifest this update: Tue 28 Jul 2026 15:00:25 +0000
Manifest next update: Wed 29 Jul 2026 15:00:25 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: WXqwdhJD8BUM7oYcuyvSlu5Vrn4lXVBFga4hgxGdicE=)
2: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (hash: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=)
3: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:c6:1a:4f:b2:27:53:7c:54:ff:a8:28:c2:86:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jul 28 15:00:25 2026 GMT
Not After : Jul 29 15:00:25 2026 GMT
Subject: CN=a71c1021c509357fa0da69a71e702e2d88753ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:46:9b:d4:63:f7:e7:92:69:03:15:d1:cc:82:
e6:5f:9a:e7:35:70:26:df:81:3f:db:fe:0c:9b:c5:
7f:38:3a:78:d5:b3:7a:b9:bf:40:97:3d:63:f7:d9:
ec:7a:93:ce:1c:7c:30:a1:6c:28:e6:ff:01:f0:80:
b7:97:99:49:20:d9:e1:56:cc:f8:47:ba:e5:7d:8d:
90:ac:33:1b:de:f1:b6:51:a6:17:f3:a2:1d:41:ba:
ac:a1:61:85:91:1e:1b:58:e5:52:57:66:3d:28:8c:
5c:82:b6:93:23:58:00:4a:b5:b0:f5:69:53:6e:c1:
bb:fd:ec:59:98:9a:43:4d:96:1c:1e:a8:72:cd:4c:
de:42:37:e7:1f:80:f1:4b:31:32:9d:f9:c0:9a:a0:
8e:59:bc:40:63:a7:a5:51:7d:db:63:dc:79:d1:c6:
a9:73:d7:4f:9f:72:c3:33:cb:d0:df:8f:db:9a:b2:
f7:0a:06:c1:ac:d5:39:fe:b4:30:13:a7:0c:56:f9:
8f:43:15:9c:fc:8b:b1:99:53:75:f4:16:8f:2d:d9:
d2:1d:4a:9d:bb:1f:f9:f3:45:49:30:a2:37:10:d5:
04:04:64:51:7c:fc:ac:84:2a:03:ef:ad:53:3c:c4:
65:3c:8d:69:d7:f2:8c:43:1e:27:89:d2:fa:c9:fa:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1C:10:21:C5:09:35:7F:A0:DA:69:A7:1E:70:2E:2D:88:75:3C:A0
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6f:d1:c0:37:4e:cd:3d:ef:37:d4:b5:ca:21:f1:0c:14:2a:
d0:89:07:58:58:31:3b:d7:c0:1d:5a:62:15:bc:ee:fd:c7:8a:
9f:39:94:87:93:69:b5:c8:05:6a:6b:ef:8d:35:3b:fd:11:95:
86:a0:df:6c:3b:df:b3:1c:03:26:29:44:73:56:0d:a6:08:0e:
cb:90:0f:81:53:ad:b7:7b:5e:9e:07:3c:89:c4:4e:e5:29:f0:
72:9f:de:8c:ce:9f:fa:37:5c:f1:81:85:6b:af:90:45:2f:b6:
59:8d:7f:f9:23:a3:41:02:fd:c8:eb:9e:f9:22:5c:58:e3:29:
70:12:94:ae:59:4f:27:c7:4c:3c:19:ce:b5:89:3e:9f:40:1d:
b0:32:3a:2f:94:22:3f:c0:df:2a:50:5e:1e:2a:e2:fc:f5:51:
10:3c:01:24:d0:10:1e:11:73:12:5e:5c:e7:15:fb:ac:e2:cc:
1d:c7:ce:ee:d8:6d:10:cf:31:bc:3a:b1:ae:19:65:ad:c1:11:
b6:05:61:d4:39:b7:73:fe:66:f4:06:37:e9:a4:2d:9e:57:45:
95:14:cf:79:83:b3:b8:84:ca:5e:37:0e:30:bb:81:33:4a:84:
f2:be:94:55:10:c1:65:d4:be:f9:cf:4b:8d:b9:31:7f:f0:1a:
bb:20:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:41 2026 by rpki-client