Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: /ik/hZo87AyxAFlG/HOICtdASqQNKesZOdHz/isvk5o=
Subject key identifier: F1:B6:E2:41:6B:CC:CE:1D:A8:14:FB:B1:CE:4E:67:2C:A1:29:FE:EB
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019FA14D499679463991E6D844AF0FA6D314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 02:00:24 +0000
Manifest this update: Mon 27 Jul 2026 02:00:24 +0000
Manifest next update: Tue 28 Jul 2026 02:00:24 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: tKFZMbupEtc35k3p2HKKnoJ/xXpXWJohQli5G9q7Q/k=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:49:96:79:46:39:91:e6:d8:44:af:0f:a6:d3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jul 27 02:00:24 2026 GMT
Not After : Jul 28 02:00:24 2026 GMT
Subject: CN=f1b6e2416bccce1da814fbb1ce4e672ca129feeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:40:cc:65:3f:8c:a5:d9:7d:62:e1:df:af:
18:8d:cd:66:42:5e:bd:c3:c3:5e:fa:2f:88:48:51:
85:43:27:1b:ee:f2:07:2a:81:ef:86:80:32:6c:7e:
0d:ea:71:a9:55:b8:90:31:e6:2b:29:9a:c9:e9:3c:
19:f1:c7:d2:31:fe:28:42:73:c5:29:eb:a4:f4:80:
b7:f7:6b:15:39:c0:15:8d:40:08:4c:c4:02:1d:02:
7c:62:98:16:cc:d5:14:81:9d:64:b0:4a:91:34:ca:
56:00:be:a0:52:b0:d2:85:80:72:ac:98:fc:11:69:
0e:37:2e:5c:be:e0:cf:f6:fe:0e:44:50:0b:17:7f:
70:71:e9:17:21:69:19:dd:67:b8:6b:28:ae:65:4f:
9b:fc:af:20:3f:96:f4:89:e1:03:b7:64:65:75:88:
c3:75:4f:d3:52:dc:4c:f2:88:2a:3a:69:82:98:a9:
8b:d7:4f:f9:42:dd:fb:0c:e5:39:58:cf:c5:6c:30:
78:bf:71:7c:c3:ba:9e:35:08:54:24:3a:e5:b9:b3:
be:40:80:dc:ff:f7:1c:5c:21:55:12:b6:b8:03:07:
2f:69:5e:93:d0:0f:e6:68:0f:9a:25:84:c8:76:cc:
3e:97:75:23:05:a7:4f:0e:bb:30:b3:e8:b9:c9:54:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B6:E2:41:6B:CC:CE:1D:A8:14:FB:B1:CE:4E:67:2C:A1:29:FE:EB
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ac:08:07:83:1b:42:8b:a7:33:ed:0a:4e:2d:cb:02:0e:70:
3c:5c:3d:ca:e2:d9:ca:fd:57:a6:71:c8:3c:a1:39:ab:49:02:
91:4f:8b:99:8a:41:16:6a:97:3a:0d:b0:ca:cf:18:67:cd:41:
3e:ef:ea:a5:01:fd:ea:79:d5:8d:e7:5e:e4:59:17:2d:21:11:
e8:17:a6:92:c8:79:de:26:51:7e:1c:61:aa:20:46:18:ef:90:
45:e9:a3:fe:0e:06:9d:af:6e:66:52:a0:16:dc:05:2f:25:60:
7d:84:c7:b7:b9:22:c6:b5:ef:dc:4d:bd:ee:f1:7a:7a:fa:c6:
cf:a0:9d:6e:16:f1:e7:2a:89:ee:79:05:7e:3c:bf:c7:e8:5b:
09:b8:5b:29:ec:a0:aa:cb:ad:d4:e6:4f:bb:2a:e0:b5:35:81:
e7:a3:c4:6e:aa:e6:03:68:39:b3:82:3f:6d:ee:19:c5:93:e9:
bd:a7:db:eb:3a:28:6c:ce:af:f9:61:2f:f2:98:6f:1f:40:31:
9e:e4:4a:5a:b2:1e:e4:2e:ca:7c:26:61:92:d3:12:51:e5:2b:
55:37:87:7c:9c:3b:bf:bd:c6:15:9a:a7:c0:c3:32:4a:f2:fe:
44:48:e0:ed:ce:92:72:d6:98:c7:35:f8:ec:65:2a:15:10:4a:
e2:60:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:23:21 2026 by rpki-client