Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: jp/IHdIHlcySPgf9FR6FAHd3Riy3F7FRuDYUJcX9BSA=
Subject key identifier: 75:71:20:A7:9E:20:58:04:1A:2C:DC:F4:16:6E:C0:E0:7B:B0:9A:06
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01A0BF8C28ACD3C996E5EAD48613ABFE684C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 19F6
Signing time: Sun 20 Sep 2026 16:00:28 +0000
Manifest this update: Sun 20 Sep 2026 16:00:28 +0000
Manifest next update: Mon 21 Sep 2026 16:00:28 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: MGPCtkli7DKdWetoFGVglCTn8r/AbqVtpDZiz/TufV8=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:28:ac:d3:c9:96:e5:ea:d4:86:13:ab:fe:68:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Sep 20 16:00:28 2026 GMT
Not After : Sep 21 16:00:28 2026 GMT
Subject: CN=757120a79e2058041a2cdcf4166ec0e07bb09a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:98:d7:16:d2:ac:92:3a:92:43:78:b1:3f:
ad:7b:6e:c0:b0:5f:e1:cd:fe:82:5d:ab:d1:63:ab:
1f:e0:f7:fd:f0:94:74:ee:82:06:d6:78:66:05:8d:
f1:19:af:78:1b:89:56:0e:4c:36:0b:50:4b:5b:74:
dd:42:5d:88:61:e6:87:87:ba:b5:8f:20:92:94:c1:
1c:ab:eb:30:07:1c:2d:95:20:87:05:bf:9b:da:7d:
05:6f:f4:0f:38:73:fc:81:03:f3:3f:9e:09:6c:df:
e3:35:3f:eb:09:cb:c2:c5:35:d1:3b:4c:29:d9:b1:
aa:e3:5f:1b:d2:09:05:c3:a3:7e:c7:de:e8:d6:d2:
af:ca:89:04:af:2e:e3:6c:4a:8b:8e:3e:8e:7a:5e:
af:3d:01:1c:d6:de:d4:0b:e1:f5:d8:76:73:94:36:
56:6b:c6:5c:e7:7d:3a:ee:61:60:78:ee:be:92:40:
68:fc:3f:26:55:fc:aa:5f:3d:18:dc:04:be:37:94:
d0:24:ec:b5:33:29:a9:c8:c2:7a:53:37:cf:7f:40:
ea:6a:a4:fc:98:ec:6b:9b:e8:72:37:f7:38:6c:be:
96:2a:4a:eb:f3:ed:0d:60:5c:30:61:53:31:17:2b:
fb:5a:61:10:79:66:40:ff:79:01:62:83:ff:d9:95:
8f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:20:A7:9E:20:58:04:1A:2C:DC:F4:16:6E:C0:E0:7B:B0:9A:06
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:58:96:a0:70:2d:d2:4e:1b:29:3d:24:ab:40:42:a9:e2:dc:
0d:22:03:44:c3:b7:53:f8:79:f1:63:57:0d:73:fb:33:2a:30:
b6:7c:4a:68:0e:fa:1c:74:07:be:ce:14:1f:96:79:71:63:c4:
fd:8c:bc:87:f9:b6:cb:b2:52:c4:6b:ef:ff:3c:43:33:b2:52:
c3:2e:7a:d5:48:9d:c5:25:77:c9:b4:94:f2:ab:5c:1d:11:ce:
6a:d3:ca:5d:b8:cf:fd:3d:5b:24:39:a7:19:0a:47:11:47:87:
43:f6:cb:74:ec:7a:79:d2:62:4f:58:2b:cd:fd:7b:18:a3:5e:
b6:da:b7:c9:d2:a7:11:0b:68:79:d7:c6:12:ec:a0:78:e6:aa:
e8:29:1c:e8:57:93:6f:e8:f2:11:70:26:f8:1f:60:94:f5:7b:
33:21:9d:49:95:56:44:0d:58:19:58:25:f9:3c:77:36:ee:e2:
0e:c6:85:bb:ef:7d:50:8d:db:12:f7:e3:f9:cf:98:64:9a:7b:
b0:01:2e:1b:20:be:bf:15:25:3d:a2:d0:c6:25:56:97:43:10:
e2:0a:68:e6:77:15:15:99:b2:a2:38:c8:c0:be:34:bb:de:4a:
6c:60:ba:50:1b:33:9b:29:e8:23:88:a1:83:85:22:07:35:f7:
26:ec:bf:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:22:25 2026 by rpki-client