Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: 5maDsrBs9y1dVJf+mP/hsGVm0Nt3HX25kyEwXOxjyn8=
Subject key identifier: 96:D0:09:69:BF:A8:7B:35:55:76:9F:7E:CB:B2:F7:73:C2:41:A5:FF
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019D98F53A23814960794E7521AEC60CAF88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 01:01:41 +0000
Manifest this update: Fri 17 Apr 2026 01:01:41 +0000
Manifest next update: Sat 18 Apr 2026 01:01:41 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: 5jeKm1Z2dbNVC2cPHbNriNOv5j19Ov11qkLVSLQyDp0=)
2: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
3: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (hash: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:3a:23:81:49:60:79:4e:75:21:ae:c6:0c:af:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Apr 17 01:01:41 2026 GMT
Not After : Apr 18 01:01:41 2026 GMT
Subject: CN=96d00969bfa87b3555769f7ecbb2f773c241a5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:bc:94:df:cd:30:8d:45:b9:73:40:3a:4a:
31:dc:50:d2:79:21:4e:f6:a5:c3:e6:49:9e:2b:40:
68:35:b0:50:ce:19:99:9f:5e:74:82:38:04:3b:cd:
49:d8:24:a4:68:66:d5:74:78:fe:8d:1a:2d:52:4c:
22:c5:e6:5f:b2:bb:cb:77:53:26:1a:b8:2d:79:cf:
95:dc:d3:8d:ab:26:97:de:eb:84:bc:75:09:10:91:
85:40:9c:d1:9c:5a:8c:6d:9e:40:d2:7d:20:a0:42:
7c:6f:18:bf:2c:3f:64:af:5f:cf:b4:79:cb:71:67:
fc:aa:59:08:c5:d7:ab:10:ab:49:43:6b:d5:5c:b9:
b1:69:83:7a:1e:bd:e8:45:08:80:8a:7e:0a:b9:15:
f5:18:ff:8c:29:45:1c:3e:9e:8f:e1:79:36:15:0c:
56:11:65:34:00:84:86:0c:7e:75:b3:82:2c:4a:57:
b5:0a:b0:bc:9f:0a:78:46:7e:92:c2:38:fc:b4:29:
d7:9d:af:9d:4e:9a:cd:93:da:1d:f9:9c:2a:80:92:
de:9a:40:d5:3e:73:94:c7:73:0e:72:8a:5b:8d:04:
37:5a:d6:85:84:47:f9:a5:7e:2f:2b:38:52:21:68:
3c:7c:d8:f4:8d:68:9d:9c:2e:38:de:5b:68:98:e2:
9a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D0:09:69:BF:A8:7B:35:55:76:9F:7E:CB:B2:F7:73:C2:41:A5:FF
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5b:55:8f:45:49:97:d4:95:17:04:e7:8c:48:1f:67:ca:63:
05:34:bc:48:0d:24:4f:ef:57:73:0c:c0:71:4a:6a:ba:05:60:
7f:40:5c:b1:b5:2f:a1:5a:60:69:7a:85:ba:26:61:8f:39:ad:
d9:91:b1:03:51:c8:e5:b5:bc:ce:a3:56:bd:74:e1:c6:05:a8:
c2:d1:62:6d:2d:cb:a3:62:a9:73:11:fb:97:27:82:8c:51:c5:
f3:4f:19:2e:59:35:7d:bb:fb:b8:a8:69:6a:46:b9:cf:f1:03:
17:b1:bb:de:ba:32:bf:18:fc:2f:8b:10:64:03:36:6e:84:7d:
50:9e:f9:3f:98:7e:76:10:37:2a:5e:28:69:18:37:42:50:17:
67:6b:1a:bc:e8:c1:9f:0c:63:e5:cb:d4:05:88:02:0f:48:07:
e5:41:5d:da:f5:05:f5:3f:b1:9e:b0:6e:b5:c7:b1:47:23:d1:
71:5f:f7:9b:8a:76:10:5c:dc:9e:6b:06:8b:b7:65:72:96:80:
a1:38:5d:a9:d9:b1:5c:85:d4:40:3a:4f:71:64:85:25:f7:64:
99:53:e1:e0:af:23:5f:04:6f:0e:af:ec:87:72:11:b7:06:f9:
cd:64:74:b9:b1:f9:79:0e:d8:fd:8a:cb:9e:08:ee:09:7e:5c:
8c:0e:97:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:03 2026 by rpki-client