Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 5aeB4P4ncrG/3VFyDYTg+fxEhwtGHaEI3tgtgFWmXrY=
Subject key identifier: F6:16:4F:9E:13:88:9D:63:C1:B3:58:B8:6E:86:C8:2F:CD:97:5E:45
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01A08CE919B87E87AB25A1478E7844C870BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 20:01:21 +0000
Manifest this update: Thu 10 Sep 2026 20:01:21 +0000
Manifest next update: Fri 11 Sep 2026 20:01:21 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: cItfksZvmW/MmVEnJIR8/V+H1dHDVAEGHW1+b4QY8xA=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:19:b8:7e:87:ab:25:a1:47:8e:78:44:c8:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Sep 10 20:01:21 2026 GMT
Not After : Sep 11 20:01:21 2026 GMT
Subject: CN=f6164f9e13889d63c1b358b86e86c82fcd975e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:b2:aa:46:08:2a:09:82:9e:03:bb:95:cb:
d8:eb:23:90:89:83:78:bb:42:90:2d:de:78:32:7f:
2a:af:b0:ad:da:b8:3f:48:99:69:0a:74:53:ec:ea:
61:c4:a6:82:5e:de:ad:df:81:2c:70:e2:fc:fe:37:
43:3d:5d:3c:51:b2:28:1a:e4:79:0c:f3:c0:bc:22:
dd:7a:cb:03:0a:d2:31:8d:1a:2d:7c:45:2c:61:83:
08:93:ef:87:83:cb:12:e8:15:4c:44:3b:2d:9e:61:
ed:75:39:17:8a:73:e9:4e:36:26:26:55:e0:89:31:
3e:ad:c7:2b:9e:2d:fd:88:ee:f5:98:2a:62:3a:c1:
0d:3c:f4:76:81:9c:73:23:b4:0f:dc:50:c6:5c:b8:
e1:56:4d:0b:8d:df:dd:d0:b5:8c:e1:6f:38:f4:38:
d5:40:9a:e4:8f:86:ba:43:d0:c6:97:53:25:bb:6d:
67:16:09:96:dc:33:71:1d:a8:0b:58:c4:83:22:7b:
00:9e:25:48:f2:26:80:26:c5:26:6f:fc:d4:3a:e1:
b3:76:a0:c8:56:41:f9:74:68:0a:02:43:9c:4d:32:
64:5d:a6:94:0d:7e:21:5d:f3:88:de:22:df:ff:f1:
17:8d:80:24:0c:22:73:c0:7a:36:7b:dc:3e:57:d0:
26:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:16:4F:9E:13:88:9D:63:C1:B3:58:B8:6E:86:C8:2F:CD:97:5E:45
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a3:34:90:17:d2:37:f7:2b:1f:b0:29:1e:35:ec:a5:b6:d2:
09:ec:ef:b1:3a:a2:74:0c:ae:e2:7d:b6:e9:dd:40:02:c1:65:
98:a4:9a:81:87:be:9c:32:26:5d:f3:86:39:ac:ab:91:5a:7b:
e1:03:23:b2:bb:1f:ec:7a:bc:23:88:85:89:f7:0c:e7:2a:1d:
aa:4c:cf:54:9b:44:eb:63:47:01:75:e6:bc:0e:5b:fb:c1:da:
3a:bf:15:c7:75:2a:ff:bd:c7:21:b4:8f:ef:ab:d6:cd:31:bc:
aa:86:f7:85:e2:68:f0:49:ce:73:46:47:08:f1:f4:bb:95:70:
59:4b:03:83:2b:3b:78:76:ac:f2:77:d6:d7:df:64:e1:36:ab:
4f:b0:73:d7:fe:dd:61:41:a0:83:56:12:ff:e4:12:c8:42:6d:
d7:e6:68:11:f6:c1:b8:ba:87:ec:f1:ca:34:4b:3a:17:b8:11:
4e:02:7b:86:00:4b:47:f4:b5:4a:34:31:22:44:85:c4:58:93:
20:f9:d5:4b:9e:19:9b:22:be:d3:1d:58:00:62:52:95:3b:42:
9f:ed:55:11:cc:ae:ce:79:86:a8:01:e5:be:73:c0:8d:fb:12:
ce:d6:87:61:44:47:a2:b8:43:62:40:fe:87:ce:c6:73:d4:99:
53:72:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:45:26 2026 by rpki-client