Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: nDk3EejAa0hYXH9deSMrEdv+XG+BPcESPbV79f94prw=
Subject key identifier: 00:9F:55:00:7C:59:4A:A8:E0:6E:4F:4F:20:13:CF:F8:DD:D9:53:44
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 01A00025D18F7CEFFABE05F722E7E80F2A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1A09
Signing time: Fri 14 Aug 2026 12:01:13 +0000
Manifest this update: Fri 14 Aug 2026 12:01:13 +0000
Manifest next update: Sat 15 Aug 2026 12:01:13 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: Dzgi2muaya70wEB0zzLLcwIrFidD9IrB4LlD24zQfxU=)
2: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (hash: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=)
3: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:d1:8f:7c:ef:fa:be:05:f7:22:e7:e8:0f:2a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Aug 14 12:01:13 2026 GMT
Not After : Aug 15 12:01:13 2026 GMT
Subject: CN=009f55007c594aa8e06e4f4f2013cff8ddd95344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:37:b8:7a:73:07:30:e9:14:93:d4:d6:16:
73:cd:c9:8c:b0:22:a8:b5:1f:0f:5e:0d:84:a6:68:
e2:42:d7:85:72:df:ca:ae:b7:61:9d:ca:91:8a:6b:
14:9f:3e:da:c7:02:f8:2e:67:2d:ee:42:3f:f2:7c:
ac:f2:8d:37:d1:ea:2c:a3:45:30:81:75:26:98:ab:
86:1e:c8:49:5a:ef:7c:f1:68:4b:b2:20:60:7c:53:
fe:1e:af:10:c7:bb:5f:00:f5:a3:28:0c:37:e7:ae:
7a:cf:04:21:7f:27:ed:96:4c:80:5e:f1:15:78:cb:
3a:3a:85:e9:9f:2d:cd:b3:c8:ad:3d:ff:9d:65:6b:
e4:04:f6:4e:e4:af:e0:9f:3e:95:f6:0b:c0:9f:d2:
fd:68:8b:08:5b:75:93:ca:84:a2:e7:2e:5b:4d:f9:
80:00:fc:a2:bb:fd:66:f8:3f:a7:bf:1b:66:2d:fd:
9b:4b:65:b2:95:00:54:7c:35:8c:9e:8b:80:a1:50:
6f:9e:3f:b1:c0:ee:70:40:88:01:fb:5d:da:0b:79:
fc:8c:44:11:01:aa:dc:42:32:47:3d:aa:55:c8:0a:
62:e1:90:e7:f3:9f:08:42:65:4b:fe:c1:21:a8:d1:
77:10:a7:42:5d:6d:d7:d3:c8:40:84:ce:57:b4:78:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:55:00:7C:59:4A:A8:E0:6E:4F:4F:20:13:CF:F8:DD:D9:53:44
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:14:2a:cd:d4:c7:68:b2:59:3e:de:43:29:64:76:3c:25:92:
07:9e:ca:c6:40:b1:cd:d9:24:b6:18:f3:56:24:b5:54:26:c3:
5a:28:86:a0:11:14:bb:92:50:3f:32:4b:ba:cf:17:df:c7:3f:
d6:66:47:e3:89:69:24:be:bd:b5:d3:17:3b:88:15:69:d4:07:
bc:1a:d2:8d:06:e1:f6:e0:81:fb:4a:2f:6d:35:1e:97:41:ed:
21:4a:43:a4:9a:0a:eb:b8:de:71:a8:e2:51:e1:bb:ce:20:31:
5f:cf:12:45:83:9b:ce:66:4a:73:a2:70:77:60:70:3f:17:2a:
da:4b:39:37:c6:be:fd:25:20:f5:7b:c5:5c:e1:24:ae:9b:74:
e8:49:94:16:8c:76:e7:59:a1:76:22:a8:8c:b0:07:d4:57:62:
2d:f9:ad:8f:b8:b4:d1:5a:69:5e:cd:ff:6f:e7:15:12:55:d5:
64:69:45:72:52:ec:e5:22:b2:11:1d:1b:55:18:19:bd:8e:77:
db:8a:6a:44:ff:45:9e:de:26:3c:a9:a7:42:73:bc:4b:f6:7a:
d4:01:24:4f:18:3d:d1:99:88:e0:e4:30:01:80:fc:a5:5e:30:
38:6b:56:73:2f:fd:7e:23:2f:c1:18:dc:02:c2:35:ae:1d:c7:
b1:ba:6f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:58 2026 by rpki-client