Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: AcA9HAlFlpYGwf8ctI45KUXwSfRNZqdX9WQTp6redOw=
Subject key identifier: 06:A4:BB:64:B3:70:F0:3C:61:F1:60:DA:C1:71:76:42:88:B1:F6:25
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01A1355A4F43F1217D27714ABB6590D600A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1A33
Signing time: Tue 13 Oct 2026 13:01:13 +0000
Manifest this update: Tue 13 Oct 2026 13:01:13 +0000
Manifest next update: Wed 14 Oct 2026 13:01:13 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: s9oRIKo0aG0Z9hdto48Ibccdti5oFecpmLmKgajTm7U=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:4f:43:f1:21:7d:27:71:4a:bb:65:90:d6:00:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Oct 13 13:01:13 2026 GMT
Not After : Oct 14 13:01:13 2026 GMT
Subject: CN=06a4bb64b370f03c61f160dac171764288b1f625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:f4:f8:b5:c2:9c:1c:75:d6:64:f8:f6:42:
49:1c:d8:52:e9:53:dc:9e:2b:f3:a9:cc:a2:20:dc:
85:06:1b:5b:3e:38:3c:cc:d7:7b:26:f4:8a:5a:84:
7a:fa:9f:0f:61:e0:ff:de:90:7e:a0:f3:49:8e:21:
b6:8a:e3:c9:36:fd:d9:00:c2:8f:3a:51:32:d9:43:
b8:01:93:8e:de:0a:b4:da:19:47:1c:0f:70:95:42:
c3:e5:a9:82:b7:9b:b9:bc:96:a1:65:a9:69:b7:29:
99:50:f0:10:e3:da:d9:cd:1d:4f:42:5d:11:20:a0:
f9:8a:d2:9f:dc:3c:c9:bf:2b:0a:e6:24:5b:44:15:
31:34:d6:a6:6c:08:70:30:6a:9c:19:c6:b3:e7:87:
5a:b8:c2:48:df:e7:84:aa:2f:02:9e:46:c1:b0:6c:
54:ca:20:3d:ae:4f:9f:9b:f5:8e:11:d9:ba:61:37:
b3:ee:ef:4d:d8:57:b5:58:4f:5f:a6:45:e7:c9:9c:
62:ba:ab:47:8e:b4:fd:b9:cc:84:b7:cb:74:d6:f6:
8a:c5:37:31:9b:cc:09:3b:12:21:45:1a:13:12:c8:
48:62:17:17:e1:e7:a0:c9:66:a8:1a:2c:4b:c4:04:
e9:58:9a:bc:6e:62:a0:aa:28:00:03:7f:24:53:dc:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:BB:64:B3:70:F0:3C:61:F1:60:DA:C1:71:76:42:88:B1:F6:25
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c6:fe:3d:a4:c1:81:5e:30:bd:f4:ea:a9:69:39:54:03:14:
50:1d:72:41:1d:25:88:08:e5:fe:6b:c8:70:4e:b1:5e:72:44:
3e:93:fb:2c:62:56:89:82:d3:60:dd:bb:5f:85:03:26:77:cb:
3e:79:2b:4c:21:4a:0e:3d:6c:bd:3a:e3:01:58:86:e3:3b:98:
9e:92:5d:a4:21:bb:a8:aa:67:22:dd:5a:2f:c7:4c:2a:b0:1a:
05:a7:03:41:91:8b:ba:fe:56:5a:0e:72:b5:a6:b4:16:b3:4e:
b1:9b:52:a2:8d:91:4e:90:f9:83:cb:04:de:e2:ae:2c:eb:98:
d6:3c:2e:39:d2:e4:13:8a:72:61:06:20:91:45:68:3a:41:58:
a1:05:a4:7e:43:5b:cd:eb:3d:9c:72:2b:36:7e:b9:b9:12:96:
8c:b3:36:cb:93:b8:fe:1f:92:50:28:2c:0b:20:12:b7:29:b6:
9f:30:dd:b8:4d:57:79:8c:ff:0c:c8:95:a4:16:40:5a:8d:be:
56:8c:35:b5:82:d2:1e:58:d9:92:d1:0b:ac:fe:fe:b8:7b:c4:
a8:87:15:78:20:cb:42:00:ed:53:16:d3:6b:65:6f:f6:5a:04:
4f:cd:cc:8e:9d:66:15:f0:c2:57:48:62:31:02:8d:cd:f1:53:
db:8b:c4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:46:57 2026 by rpki-client