Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: C1RlGL6MR5FzR+DSIZWI2wjBMuz7SyoTZ6H6hkdAFZM=
Subject key identifier: 14:C1:C6:2F:45:53:1A:6F:31:75:B1:1C:BF:E1:49:8F:19:36:67:52
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019DD9F91868CC43FAEC8C79E771EAF5887A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1876
Signing time: Wed 29 Apr 2026 16:01:13 +0000
Manifest this update: Wed 29 Apr 2026 16:01:13 +0000
Manifest next update: Thu 30 Apr 2026 16:01:13 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: qDSMD+e1XgaKeyTuVETA+Z02VzGPgmXXVuICaBAIUZI=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:f9:18:68:cc:43:fa:ec:8c:79:e7:71:ea:f5:88:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 29 16:01:13 2026 GMT
Not After : Apr 30 16:01:13 2026 GMT
Subject: CN=14c1c62f45531a6f3175b11cbfe1498f19366752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:ac:1f:8b:9c:5d:40:4b:c3:98:35:66:e3:
9c:68:43:85:9a:74:07:55:3c:cc:6e:ce:d4:1b:c9:
e8:0c:fe:d0:f9:e1:3d:ec:2b:64:9c:9d:cc:33:9c:
18:02:7d:3c:1c:8b:64:ab:e9:1e:fa:68:68:82:f1:
1b:31:70:42:65:d8:cc:d7:36:74:ec:e2:67:b0:75:
2f:44:c1:75:bb:30:dd:0f:91:24:4f:1f:f7:78:b0:
83:93:dc:aa:44:9a:ed:ca:fa:2c:9e:7f:c2:ac:4d:
d4:18:1d:b6:57:d4:a6:d3:37:25:f2:1d:f2:6f:5d:
1c:11:8a:6e:59:f0:29:75:11:d3:8d:30:6f:1c:fe:
33:7f:6c:00:d0:8e:88:e3:1f:c4:5d:d8:f5:24:0a:
02:c6:52:d8:74:ea:44:0d:72:a9:85:55:7b:4f:e7:
af:7d:3c:03:1c:24:10:76:92:46:26:56:34:95:55:
12:18:91:36:7c:c8:b1:ff:50:af:08:1d:3d:71:d9:
6e:8e:73:c5:f2:e7:70:d7:38:8c:9a:3d:29:d7:35:
ed:8b:87:5f:fa:ba:db:7d:7b:97:98:7d:6b:94:7b:
e3:85:83:7e:96:d6:e6:e4:dc:64:bf:8a:b7:0a:69:
d1:52:dc:9a:55:d0:a7:43:b4:f0:90:a2:90:a2:8b:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:C6:2F:45:53:1A:6F:31:75:B1:1C:BF:E1:49:8F:19:36:67:52
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:96:ae:73:c1:4e:06:68:25:42:5c:64:02:1d:7c:94:9c:04:
c2:bf:b6:f9:20:c2:4e:76:2c:16:9c:41:ef:d5:26:ea:48:6b:
b9:75:79:3b:8a:05:9b:b7:4a:50:87:82:1e:ff:d6:38:ba:29:
cf:cd:8a:1b:ac:3f:af:34:84:40:e2:66:34:80:0f:5e:af:e6:
34:00:57:4f:3c:7e:63:e4:90:a4:51:aa:2b:4c:66:c8:ec:15:
bc:6a:ab:68:5e:36:10:64:d5:ba:b5:57:3b:33:35:cf:ef:fe:
d0:f4:3a:cb:87:4d:3c:11:27:90:bf:31:5d:fe:15:8b:78:98:
f4:ee:d6:76:04:bd:f8:46:00:66:ea:ac:54:94:cf:cd:11:fe:
3b:a1:d2:77:10:8d:5e:6c:b5:50:4a:41:76:e8:71:eb:ea:63:
0c:b2:9f:f7:7b:c2:94:af:b9:7e:ba:45:36:16:b7:a8:56:05:
be:94:de:f3:1f:8b:fd:7a:9e:c3:f1:c6:39:6e:ff:9b:96:f2:
05:da:c7:cd:33:b7:88:38:a9:5a:90:c1:59:95:23:4b:58:0b:
bd:a1:2d:7b:a2:4d:a1:a9:b7:05:70:86:32:e4:94:cf:1d:86:
35:7b:f0:34:50:ab:f4:bd:95:e0:20:61:63:40:67:4f:eb:7e:
ad:65:49:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 22:04:02 2026 by rpki-client