Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: 8mXUnXUi8JE3sEMfBRBMdQ4RqFdA2nIucSdqLuE+hnc=
Subject key identifier: 20:2E:B8:FA:CD:83:A9:32:C8:67:57:1F:79:5B:40:3E:FB:0D:8F:D4
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019F1754B0B35559B479C4DEC691E0781484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1990
Signing time: Tue 30 Jun 2026 07:00:53 +0000
Manifest this update: Tue 30 Jun 2026 07:00:53 +0000
Manifest next update: Wed 01 Jul 2026 07:00:53 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: yV8df7hWbmft5rj3PcoZ3nlV0VtV01lFzTaXeV02WE0=)
2: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
3: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (hash: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:54:b0:b3:55:59:b4:79:c4:de:c6:91:e0:78:14:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jun 30 07:00:53 2026 GMT
Not After : Jul 1 07:00:53 2026 GMT
Subject: CN=202eb8facd83a932c867571f795b403efb0d8fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1a:ab:15:4f:ef:ae:a4:f6:67:a3:87:bf:f1:
37:2d:64:25:fa:e1:eb:27:43:7b:a5:7f:8e:2a:e3:
3d:2d:3b:2c:78:07:82:72:8e:ab:9f:9b:95:47:4c:
2e:62:6a:a5:69:09:bc:a1:e8:12:db:c2:ba:a8:d3:
32:5f:fe:71:c8:f2:8e:cb:b6:48:88:ab:15:83:3a:
32:56:ea:e7:6d:dd:b1:25:2b:fd:6f:6c:63:36:55:
22:38:0d:60:c7:a6:0d:cf:b4:7d:4f:51:c4:c7:dc:
d4:15:3b:b1:d2:a1:9b:ed:6c:5c:f7:67:93:f7:2b:
9a:54:e8:97:c1:d4:c6:c5:99:a4:42:ca:bc:8f:21:
a9:02:f6:b4:ad:5f:f7:b3:0f:fa:ff:8f:50:58:26:
e2:ea:f8:37:e8:d2:d7:2e:2d:9a:95:16:31:4c:51:
82:ba:7f:23:62:b5:3f:1a:91:c2:f4:d4:f8:1b:d8:
cf:97:a1:92:e8:df:b6:32:b3:18:b1:2a:ef:56:21:
11:70:2b:d4:cc:e0:fa:74:1b:71:99:ce:b1:c9:b3:
49:ea:d2:7d:fe:f3:4c:52:07:ec:97:ef:9c:ad:f6:
ca:48:ca:a6:65:36:5d:9b:ac:3e:e3:6f:c6:21:b7:
1b:eb:9b:7a:4a:1f:8a:ed:97:ae:c9:b7:25:30:f3:
ea:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:2E:B8:FA:CD:83:A9:32:C8:67:57:1F:79:5B:40:3E:FB:0D:8F:D4
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f9:4b:7a:10:ee:b9:eb:24:d3:d9:58:af:04:b2:3d:e5:da:
c0:b6:00:9e:f6:30:c8:95:72:f5:74:fa:d3:21:ac:3b:28:c4:
d9:4c:dc:22:45:f8:52:fc:01:d4:44:36:48:9c:b1:6c:be:30:
c7:a6:40:10:d1:f6:29:c1:8d:e1:4b:92:dd:71:27:ec:f0:89:
04:69:85:50:f1:7e:21:74:5f:be:8b:89:fc:09:7a:96:51:9f:
9c:bf:0f:92:9e:09:5a:0e:0f:7f:f6:20:d8:5f:84:ae:72:7b:
2e:43:38:62:63:4c:fa:d9:d8:20:28:1b:55:a9:e3:17:b3:b1:
f2:d3:be:42:0f:b2:4b:d8:dc:df:29:5e:7d:2b:90:03:54:af:
ef:1d:e5:9e:8e:a8:8d:96:99:33:b3:19:53:66:4b:16:21:19:
91:09:5d:1f:70:4d:7d:42:57:da:d9:03:34:84:6f:4c:90:58:
f7:d5:4f:37:24:f0:8d:f3:41:b1:9a:40:82:d2:ca:6f:55:b1:
d4:bd:61:62:d3:3b:1a:18:4b:2f:85:8a:96:ff:d3:28:e3:ed:
db:d1:13:70:13:08:88:8d:9d:ae:73:e4:fe:ad:c8:10:93:7b:
81:5e:bb:c8:02:f4:46:e9:9a:44:c8:17:8a:08:d6:ec:3a:fd:
a9:81:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:16:31 2026 by rpki-client