Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: XCyXM8BpOO7bWf/S3kzXYtZYj8HEcFxIlAvto0jCQZg=
Subject key identifier: D1:B3:0D:77:08:35:B8:FA:C2:4D:DB:67:AC:46:8B:40:CC:E8:1D:C2
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019D3865BB051076D5780BB0CD2CDE9611CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 07:01:24 +0000
Manifest this update: Sun 29 Mar 2026 07:01:24 +0000
Manifest next update: Mon 30 Mar 2026 07:01:24 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: 6b1M7mtbB3Ux+VySdaKYObHmYHf0lHRav+Y5jfda5Cw=)
2: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
3: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (hash: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:bb:05:10:76:d5:78:0b:b0:cd:2c:de:96:11:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Mar 29 07:01:24 2026 GMT
Not After : Mar 30 07:01:24 2026 GMT
Subject: CN=d1b30d770835b8fac24ddb67ac468b40cce81dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:c3:13:43:d1:c4:c3:15:9a:57:df:35:5d:
b6:c3:60:08:d1:ad:c1:ea:ad:5b:3f:70:03:60:95:
86:12:31:5a:c8:6c:88:9d:20:51:41:76:12:67:25:
a8:76:58:84:f7:af:a2:11:98:6b:e4:8c:b5:72:eb:
21:42:5d:12:91:c3:3c:36:42:f7:6a:89:fb:e4:3f:
0f:b1:67:32:82:af:4f:c2:da:a3:e8:e7:e3:e3:cd:
a7:34:fb:e0:a1:bd:c4:32:3b:61:b9:67:8b:5c:c6:
99:9d:bd:f5:a3:f2:77:ef:bc:bc:f2:95:51:bd:17:
e2:51:3e:39:33:1c:28:a7:9a:36:08:e0:b2:2f:09:
59:26:ca:ea:39:72:51:15:0a:36:0c:5d:b1:ab:c1:
44:0b:fc:f4:84:30:78:df:d3:a4:ee:ea:37:54:4a:
7b:dc:6c:7b:5a:29:d7:67:9d:c4:fe:f3:55:85:d7:
25:36:21:7d:da:b2:a6:84:87:8e:34:ef:b9:7e:5b:
05:db:a7:53:9d:8c:da:7d:04:62:47:f9:97:ea:dd:
bc:75:28:8d:cc:93:82:85:2d:a8:62:53:64:d0:4e:
fb:54:05:bc:fb:de:2a:5f:8f:c2:0a:02:57:f8:41:
bf:fb:4a:e0:71:b1:6c:6c:01:ce:28:85:2a:91:08:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B3:0D:77:08:35:B8:FA:C2:4D:DB:67:AC:46:8B:40:CC:E8:1D:C2
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9f:06:bd:05:70:cc:29:db:cc:d2:53:4f:49:b3:d5:79:a7:
24:c6:a2:e9:0e:45:2a:21:ee:82:01:fe:65:b6:e8:d8:5b:20:
fa:7b:d8:60:02:c2:d4:0c:fb:5f:6c:53:3d:0d:b6:c9:36:58:
77:de:cb:42:ac:2b:3b:b8:76:d2:ec:61:f9:f3:09:1e:c7:ea:
4a:da:68:ac:ba:70:87:d8:ad:2b:a0:ed:3c:63:4b:56:7f:44:
25:38:d3:4c:34:ef:45:09:12:12:f3:dd:79:0c:43:b9:d2:f0:
31:a9:d3:6b:70:98:54:17:d2:8c:5d:91:ec:f8:11:b8:65:5b:
8a:cb:c7:16:c5:59:56:5c:a3:f7:25:86:cc:64:5c:c2:9b:9f:
de:46:fb:9a:7b:ad:dc:18:a7:3b:a2:e6:01:fa:a3:1d:07:0c:
85:a6:24:89:4e:1f:ec:24:27:55:f8:5a:b3:4c:b4:88:02:77:
8a:65:e8:75:30:d9:4f:0e:29:02:cc:ed:b0:d6:d0:d4:35:03:
cf:39:0d:ea:a2:d8:e4:72:66:58:61:fa:7c:33:cf:f4:af:7d:
bd:69:4d:22:16:ff:f1:b6:9f:28:72:99:f1:68:27:f1:d9:c2:
54:ca:43:7a:d9:e2:af:10:53:0d:f1:5c:7f:83:1e:3e:38:58:
0a:19:ff:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:02 2026 by rpki-client