
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: HkvcpYhtOkNNketjNQLlbeG93q/K3Jn+t5oFdkrvE8M=
Subject key identifier: E9:60:B9:E5:FC:CC:BC:B7:1D:B9:AC:15:A3:9D:33:CF:2F:83:22:E2
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019DD42DA55EC1168383E3E4FF0CA6AC9C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1873
Signing time: Tue 28 Apr 2026 13:00:54 +0000
Manifest this update: Tue 28 Apr 2026 13:00:54 +0000
Manifest next update: Wed 29 Apr 2026 13:00:54 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: 46/M6T2pLfBi7M16uBi7MK/gJLPbppelfFP0pMEuAlA=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:2d:a5:5e:c1:16:83:83:e3:e4:ff:0c:a6:ac:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 28 13:00:54 2026 GMT
Not After : Apr 29 13:00:54 2026 GMT
Subject: CN=e960b9e5fcccbcb71db9ac15a39d33cf2f8322e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:9d:f4:cb:f7:3a:fe:cb:e7:3f:ff:76:9a:
e9:d1:a5:04:30:f0:dc:a1:57:4b:7b:11:df:8d:97:
f4:0d:ec:dc:f1:31:dd:fe:b6:ba:0f:e4:dc:68:45:
8f:f4:84:b4:de:fe:5b:9b:74:68:dc:36:9e:39:4c:
a6:86:e3:98:78:f4:01:20:45:5f:05:d2:31:56:f4:
6d:97:ae:39:fe:71:bd:52:7a:a6:27:32:bb:0f:cb:
94:e0:0b:19:ea:d2:15:0f:3c:03:2e:15:0a:32:00:
7a:cb:e0:fe:0b:14:39:06:a2:8c:36:3e:ab:b5:84:
01:20:5e:93:ba:90:9e:d9:4c:c3:4f:7e:ae:5c:cc:
10:4f:af:54:30:78:81:23:b3:84:a4:04:f8:2a:a0:
04:9a:6e:5b:0d:f7:d1:ae:b0:31:90:1d:86:82:91:
2f:f0:8b:a5:5e:5d:ce:7a:e3:e4:f6:76:80:10:68:
14:a1:38:a3:b9:9d:57:fd:01:bb:8a:99:41:d6:f0:
3e:49:f3:17:0d:e1:47:ef:66:9c:2d:51:88:9b:a8:
03:36:6a:dc:66:de:18:33:ae:21:d4:92:90:f8:62:
b6:8e:f5:b6:20:29:02:0f:2f:0f:1f:c1:55:94:75:
52:02:57:31:9d:a7:94:a6:d2:f9:b3:d4:4f:e2:d5:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:B9:E5:FC:CC:BC:B7:1D:B9:AC:15:A3:9D:33:CF:2F:83:22:E2
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:74:98:00:4e:1e:1d:75:bb:e4:a2:12:03:d9:e1:3a:5d:
bb:c0:62:5e:d3:67:67:95:52:26:62:6a:36:84:63:56:a3:56:
1b:6c:23:c6:a2:82:b6:ae:bd:98:eb:5e:22:17:c3:ea:1f:4f:
37:64:a9:86:be:a0:cb:57:2f:82:24:11:82:f5:4a:41:ae:b7:
74:be:87:14:cd:c2:3b:6a:a7:fe:0c:b0:a4:7e:f7:58:38:78:
b4:fe:06:56:e2:8a:ec:af:17:76:15:20:43:c9:77:e1:51:8d:
02:55:09:5c:a1:1d:f5:34:bb:32:ab:be:55:b2:0d:a7:73:99:
b3:50:73:a5:6b:0c:c6:81:de:be:b3:b5:05:d7:85:c6:3d:a5:
29:90:35:5b:10:fb:64:28:b8:6e:8f:a8:c3:f7:01:a8:07:5c:
bc:a1:ea:cb:67:03:ed:cc:b7:5b:f3:4d:9b:0c:c4:3b:10:75:
79:cc:ca:62:71:40:7c:b5:e8:72:27:7b:d2:6c:81:a9:94:e9:
2d:41:7d:14:ad:03:20:46:d3:78:81:50:2b:79:e5:0d:55:43:
c9:69:8e:74:33:82:eb:7a:62:6c:0c:c9:d4:7e:22:f9:a2:90:
0a:15:6b:a2:b4:74:31:8c:50:f3:f1:94:c6:3b:86:4d:53:8a:
3e:6d:d0:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3ULaVewRaDg+Pk/wymrJx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz
ODYxYTQwHhcNMjYwNDI4MTMwMDU0WhcNMjYwNDI5MTMwMDU0WjAzMTEwLwYDVQQD
EyhlOTYwYjllNWZjY2NiY2I3MWRiOWFjMTVhMzlkMzNjZjJmODMyMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Wd9Mv3Ov7L5z//dprp0aUEMPDc
oVdLexHfjZf0Dezc8THd/ra6D+TcaEWP9IS03v5bm3Ro3DaeOUymhuOYePQBIEVf
BdIxVvRtl645/nG9UnqmJzK7D8uU4AsZ6tIVDzwDLhUKMgB6y+D+CxQ5BqKMNj6r
tYQBIF6TupCe2UzDT36uXMwQT69UMHiBI7OEpAT4KqAEmm5bDffRrrAxkB2GgpEv
8IulXl3OeuPk9naAEGgUoTijuZ1X/QG7iplB1vA+SfMXDeFH72acLVGIm6gDNmrc
Zt4YM64h1JKQ+GK2jvW2ICkCDy8PH8FVlHVSAlcxnaeUptL5s9RP4tVwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlgueX8zLy3HbmsFaOdM88vgyLiMB8GA1UdIwQY
MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It
N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2
LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExJ0mABO
Hh11u+SiEgPZ4Tpdu8BiXtNnZ5VSJmJqNoRjVqNWG2wjxqKCtq69mOteIhfD6h9P
N2Sphr6gy1cvgiQRgvVKQa63dL6HFM3CO2qn/gywpH73WDh4tP4GVuKK7K8XdhUg
Q8l34VGNAlUJXKEd9TS7Mqu+VbINp3OZs1BzpWsMxoHevrO1BdeFxj2lKZA1WxD7
ZCi4bo+ow/cBqAdcvKHqy2cD7cy3W/NNmwzEOxB1eczKYnFAfLXocid70myBqZTp
LUF9FK0DIEbTeIFQK3nlDVVDyWmOdDOC63pibAzJ1H4i+aKQChVrorR0MYxQ8/GU
xjuGTVOKPm3QqQ==
-----END CERTIFICATE-----
Generated at Tue Apr 28 21:59:00 2026 by rpki-client