Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: s85tu/EFrc5pyVhTJeWhNTaYxy91Jp9zTMKVG2HdeLc=
Subject key identifier: 3D:92:DF:C8:A7:2D:18:10:58:DD:3B:0E:55:D7:BF:8A:08:12:F9:0C
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019EB7A130D0FCDD66CC6D213C2E016583AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 17:00:54 +0000
Manifest this update: Thu 11 Jun 2026 17:00:54 +0000
Manifest next update: Fri 12 Jun 2026 17:00:54 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: 3KheKiZG1nYtkMQgudFY/yRi4KJ4C4ChxicmG+KLr+8=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:30:d0:fc:dd:66:cc:6d:21:3c:2e:01:65:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jun 11 17:00:54 2026 GMT
Not After : Jun 12 17:00:54 2026 GMT
Subject: CN=3d92dfc8a72d181058dd3b0e55d7bf8a0812f90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:0b:cd:96:be:62:bc:d6:4b:10:8a:b9:7f:
9d:59:7d:2b:44:b7:54:6e:48:30:39:82:1c:14:9d:
8c:10:6e:23:dc:26:7c:fc:5b:7e:66:2e:7f:67:16:
47:50:1a:16:ce:d9:a8:c5:45:38:95:c9:6f:b9:db:
a7:b1:34:f6:49:ea:64:cb:96:ec:e6:58:5c:90:c4:
da:bc:09:20:14:97:d1:74:97:e1:24:80:dc:60:5c:
87:70:c1:cc:a5:08:34:85:09:43:82:82:ad:aa:05:
cb:a6:a1:dc:4c:84:a1:bf:63:b1:4c:59:da:bc:0e:
db:0f:62:39:e3:66:75:e8:2e:db:a7:cb:ed:cb:18:
3f:75:b9:44:ec:95:49:0a:20:b4:ff:84:c6:f7:bb:
5b:5f:aa:b1:64:e6:d3:d2:0c:1a:8a:10:d6:d2:31:
3c:b3:a1:c0:c3:4e:b4:83:fd:d5:9f:b3:7a:ef:1f:
fe:ea:74:46:6d:91:ea:de:78:e8:85:4a:d0:40:61:
09:81:c1:b2:9f:b6:8f:22:5e:ce:b3:90:ec:35:4c:
c2:66:ea:31:be:ad:d7:df:86:bc:c2:56:e5:01:bb:
93:ee:50:ca:8a:f5:e0:98:41:30:5c:cf:7f:86:3c:
b8:f4:b0:44:32:17:3f:36:8e:c2:65:9f:7e:7d:3c:
6d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:92:DF:C8:A7:2D:18:10:58:DD:3B:0E:55:D7:BF:8A:08:12:F9:0C
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:0b:f9:f8:97:34:59:fa:c9:6b:6e:9c:7c:38:a9:e5:a9:48:
6b:3f:15:50:6b:07:73:da:1a:07:06:c0:51:9c:6d:cf:af:cb:
12:a2:86:71:7a:62:fc:55:d7:e1:96:be:e3:49:6f:c0:97:0c:
9c:75:40:37:a9:47:05:4e:60:b4:0f:b5:38:79:c9:fe:f6:21:
88:91:3a:1f:fc:09:38:00:cf:93:3b:67:04:81:4a:78:ad:58:
40:2e:a7:52:da:dc:a0:0c:5b:c4:6d:d4:5c:7c:31:03:95:25:
9d:3f:e6:3c:a1:20:3d:0b:69:9a:60:19:e0:12:15:b9:db:d1:
0e:e3:0c:58:87:5f:69:cf:2f:27:e2:64:31:97:9a:9e:d2:82:
c5:f5:64:01:b3:f6:f8:6c:cf:9d:81:6d:ac:be:a8:5a:c8:5b:
fb:fe:f5:16:14:73:2b:d9:6b:3b:84:9a:96:15:85:ba:4b:7f:
5e:e5:bc:ac:3d:10:55:6e:72:0d:d1:c8:20:49:80:da:69:de:
a7:cb:8f:5b:a4:5a:37:aa:11:f8:59:43:e3:01:9c:33:08:ad:
f7:23:95:4a:3c:88:2e:87:62:26:e7:61:9b:40:fd:aa:c9:bf:
bb:09:71:29:5e:a8:97:9b:bb:5e:ac:02:04:85:ca:6f:1e:ad:
0e:10:85:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oTDQ/N1mzG0hPC4BZYOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1
M2E1ZTkwHhcNMjYwNjExMTcwMDU0WhcNMjYwNjEyMTcwMDU0WjAzMTEwLwYDVQQD
EygzZDkyZGZjOGE3MmQxODEwNThkZDNiMGU1NWQ3YmY4YTA4MTJmOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqioLzZa+YrzWSxCKuX+dWX0rRLdU
bkgwOYIcFJ2MEG4j3CZ8/Ft+Zi5/ZxZHUBoWztmoxUU4lclvudunsTT2Sepky5bs
5lhckMTavAkgFJfRdJfhJIDcYFyHcMHMpQg0hQlDgoKtqgXLpqHcTIShv2OxTFna
vA7bD2I542Z16C7bp8vtyxg/dblE7JVJCiC0/4TG97tbX6qxZObT0gwaihDW0jE8
s6HAw060g/3Vn7N67x/+6nRGbZHq3njohUrQQGEJgcGyn7aPIl7Os5DsNUzCZuox
vq3X34a8wlblAbuT7lDKivXgmEEwXM9/hjy49LBEMhc/No7CZZ9+fTxt6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2S38inLRgQWN07DlXXv4oIEvkMMB8GA1UdIwQY
MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt
MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz
LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiwv5+Jc0
WfrJa26cfDip5alIaz8VUGsHc9oaBwbAUZxtz6/LEqKGcXpi/FXX4Za+40lvwJcM
nHVAN6lHBU5gtA+1OHnJ/vYhiJE6H/wJOADPkztnBIFKeK1YQC6nUtrcoAxbxG3U
XHwxA5UlnT/mPKEgPQtpmmAZ4BIVudvRDuMMWIdfac8vJ+JkMZeantKCxfVkAbP2
+GzPnYFtrL6oWshb+/71FhRzK9lrO4SalhWFukt/XuW8rD0QVW5yDdHIIEmA2mne
p8uPW6RaN6oR+FlD4wGcMwit9yOVSjyILodiJudhm0D9qsm/uwlxKV6ol5u7XqwC
BIXKbx6tDhCF/Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:54 2026 by rpki-client