Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: UkF+dupZkWMuG1razE+Joy1QP/gREIT3T/H54dVD9+Y=
Subject key identifier: 47:CD:01:54:78:11:49:55:48:10:4D:80:43:F5:4E:E0:15:44:41:BF
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019D984F9F840B356EE021AEC5488AAF2A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1854
Signing time: Thu 16 Apr 2026 22:00:47 +0000
Manifest this update: Thu 16 Apr 2026 22:00:47 +0000
Manifest next update: Fri 17 Apr 2026 22:00:47 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: ToUfD/mN+A/l742SIWoFiGSi78TAq67zsy9keyZPuNI=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9f:84:0b:35:6e:e0:21:ae:c5:48:8a:af:2a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 16 22:00:47 2026 GMT
Not After : Apr 17 22:00:47 2026 GMT
Subject: CN=47cd01547811495548104d8043f54ee0154441bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:98:e9:13:dc:f7:c3:1b:9a:e4:d3:59:50:
be:a1:9a:b6:b2:69:17:0d:63:38:33:3b:6b:d8:0e:
56:48:48:fa:36:ef:ff:17:ba:e2:15:06:49:ae:eb:
40:e3:66:0e:0c:c2:fc:07:5f:0a:81:2c:70:72:bb:
8a:82:87:a6:89:b2:68:cc:3a:c9:05:22:55:fd:46:
35:c3:cf:8e:4c:b2:4f:c9:28:1f:b6:37:99:b0:4f:
03:bb:a9:ec:48:ac:4c:c2:66:d8:8e:69:cb:05:19:
bf:95:eb:7c:79:33:5f:45:2b:b6:2c:d9:98:ae:8c:
03:fa:81:25:f3:79:94:a1:bf:1d:d0:b9:ff:0c:83:
c0:5b:17:61:14:9c:69:48:21:0a:bf:a7:6e:20:06:
dd:80:14:d8:89:94:7a:b5:01:38:63:b7:46:a4:f9:
53:26:bf:e0:09:f3:1c:1f:d4:cf:de:19:d5:05:b0:
b1:99:d3:f7:06:a2:a9:49:e2:84:5a:de:dc:d8:e7:
ee:83:79:6a:e6:d5:1f:99:24:75:2c:cd:1c:ce:64:
fb:b7:40:ed:5a:fb:cc:f6:6e:00:bb:4f:cd:7c:54:
0b:d6:bd:a4:4e:20:ec:c8:87:4f:77:33:61:45:b1:
1f:9f:f8:5e:89:1f:52:6d:c7:09:ec:aa:5b:e5:34:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CD:01:54:78:11:49:55:48:10:4D:80:43:F5:4E:E0:15:44:41:BF
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c0:fd:77:2e:c8:10:49:3a:63:64:2a:15:9d:78:40:85:14:
d9:f4:43:d4:43:da:b9:2f:7e:16:2e:8a:84:13:21:39:86:a6:
94:da:6a:47:51:01:f0:ef:98:c2:65:c1:3d:e0:61:36:88:b2:
69:46:d0:dd:17:c9:69:e9:13:26:d3:dc:de:32:60:37:01:c8:
79:85:e6:9d:c7:d5:79:27:b3:21:36:ff:5f:e4:19:83:3c:cd:
ce:2b:76:58:49:8e:24:da:9e:52:bb:cb:82:2d:b3:f7:a2:60:
38:d3:48:c1:67:6d:11:07:ca:6c:bc:e4:2f:b9:e7:f7:f6:e5:
38:d6:79:1e:fc:a2:fc:cf:77:b2:3e:e0:dc:de:15:ac:19:59:
7e:9e:86:d9:13:57:4b:66:ab:ab:a3:be:b5:49:32:7d:f8:14:
2a:50:85:b9:d1:7b:d4:41:86:87:d9:74:ba:b9:52:f7:ac:0b:
38:80:61:2b:1f:a6:a3:78:3c:3b:ab:7d:c7:d0:a2:e5:64:21:
17:8c:da:d7:88:87:1e:44:3e:98:18:46:56:d2:a7:1e:98:7f:
e7:9c:c3:53:3e:5a:6a:5d:5b:e2:9f:bb:65:4f:41:fd:49:91:
2a:f4:f2:9a:06:65:50:e6:a6:1b:f8:53:e8:5b:81:23:68:a0:
ea:7e:57:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:08:45 2026 by rpki-client