Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
File: 9WR7mt8n-vd9-AgsVVG3N1asPe8.mft (raw, json)
Hash identifier: +0/xAcoq4mf5Ng09GZJKobp2CphQZTs2XyYNptcNYRg=
Subject key identifier: 2A:96:FA:AE:84:E0:27:5D:ED:C8:18:F5:25:E4:26:83:12:D0:40:F1
Authority key identifier: F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
Certificate issuer: /CN=f5647b9adf27faf77df8082c5551b73756ac3def
Certificate serial: 019DA59D531EF142FF0AF6C67EA8DE8682B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
Manifest number: 53
Signing time: Sun 19 Apr 2026 12:00:44 +0000
Manifest this update: Sun 19 Apr 2026 12:00:44 +0000
Manifest next update: Mon 20 Apr 2026 12:00:44 +0000
Files and hashes: 1: 8L86gshlVnRWr5gdY2DjZCCezS4.asa (hash: YjYfeGlfl/t841MtUmbFSM8G4/SKtO5ZfDYqZpGqHMA=)
2: 9WR7mt8n-vd9-AgsVVG3N1asPe8.crl (hash: XklaG8C82z7S4Ncfj6yZLw1t8lneiZt/4KIhwjQ62Nk=)
3: kcx511HkgH6_p24UHLo0MXG7V-A.roa (hash: dNUOg34buyXeNE8RHao0TAiuQSfhv2tTmHDrugM/EPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:9d:53:1e:f1:42:ff:0a:f6:c6:7e:a8:de:86:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5647b9adf27faf77df8082c5551b73756ac3def
Validity
Not Before: Apr 19 12:00:44 2026 GMT
Not After : Apr 20 12:00:44 2026 GMT
Subject: CN=2a96faae84e0275dedc818f525e4268312d040f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:09:74:1c:7a:1c:36:3f:6d:19:a3:8c:5a:ee:
15:5d:f1:2e:c6:83:b2:11:8e:d1:fb:83:01:6f:a2:
6b:51:ff:32:fe:ce:f1:89:51:69:dc:25:ba:2d:10:
56:7c:77:62:f5:72:4b:01:0c:80:87:80:8c:22:45:
6c:e7:06:88:23:e6:79:7c:1d:36:f2:b7:0b:0c:db:
32:65:d6:c0:20:30:7d:93:e0:c8:84:ed:e4:33:8e:
36:8b:01:eb:7e:57:72:a0:a7:05:0e:83:18:2b:33:
23:7a:4d:33:4b:d0:ef:7d:68:82:c9:da:85:85:d8:
73:cd:7d:ef:42:f7:58:66:58:b6:e1:64:af:e1:46:
6a:1e:bc:3e:e8:3c:58:c0:fd:0e:3f:42:13:ac:f7:
e7:cf:5a:ad:48:fd:b0:f1:13:34:14:7f:b5:54:e5:
86:e9:52:4d:e7:2b:0e:14:a5:ec:16:1c:99:a3:dd:
ef:65:e3:72:2e:d6:37:cd:9a:93:31:e7:6f:53:bd:
21:5b:9b:39:f6:cc:9d:c6:8d:a7:d7:48:cb:9e:ef:
47:0b:f6:66:cc:5b:31:34:a5:d7:6c:d0:4d:68:04:
83:fc:8e:23:83:3a:bb:80:fe:2d:16:a7:f3:e4:8e:
05:6e:c0:68:3d:dc:06:88:40:43:8d:71:5d:34:0e:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:FA:AE:84:E0:27:5D:ED:C8:18:F5:25:E4:26:83:12:D0:40:F1
X509v3 Authority Key Identifier:
keyid:F5:64:7B:9A:DF:27:FA:F7:7D:F8:08:2C:55:51:B7:37:56:AC:3D:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WR7mt8n-vd9-AgsVVG3N1asPe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7daf58-14e8-47c0-a4c7-c652bc7266ef/1/9WR7mt8n-vd9-AgsVVG3N1asPe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:37:49:fa:a0:af:27:71:3b:ef:20:2f:0b:1e:b3:e7:54:e0:
75:9f:8a:a1:13:54:6f:e8:e1:06:51:17:d5:b1:32:cb:d3:8e:
19:98:fa:e3:4d:a7:0f:48:6d:43:93:b3:28:33:64:9a:37:22:
43:2e:f0:59:80:f7:09:d0:d3:b5:72:3a:8a:b6:61:2b:da:cf:
1d:c5:6c:73:97:66:a6:98:bf:54:bd:36:e7:e8:32:0d:91:e1:
b3:55:96:b0:d6:65:51:68:f6:e6:5e:8e:3a:f0:77:63:3c:64:
1c:b6:49:b4:23:f7:ce:db:21:ba:78:8f:b5:7f:95:ef:6e:b9:
92:c1:1b:40:02:81:3a:3a:a0:71:76:47:98:9a:fe:2b:54:a7:
49:01:29:f7:37:a5:37:bb:ab:55:f2:85:ef:2b:31:80:72:8c:
ff:43:18:89:59:21:18:8a:1d:77:b5:c6:b7:01:29:2f:cd:50:
48:f0:d7:46:50:f9:85:6f:5f:6e:5f:3b:85:01:63:7b:76:ff:
3a:4c:6e:f2:02:a9:c8:74:45:73:d0:16:1d:f5:11:2f:4c:26:
8d:36:cb:5e:1c:c1:ed:82:44:89:9c:2c:f8:0c:9b:70:fc:b2:
8b:e6:20:29:20:bb:22:ff:a8:6c:3f:41:33:2d:13:f2:49:fa:
3b:32:a8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:33 2026 by rpki-client