Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: Z41KIKVAVEQGqt3DnDhHCRyNbfQT7F9HuOz0+gThvQk=
Subject key identifier: B8:A5:3B:A4:ED:65:B3:36:34:B7:0B:3E:CE:A4:DC:94:C4:B5:FB:AE
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019D3F79CA44C2435190B9A208DFB52C0898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1826
Signing time: Mon 30 Mar 2026 16:00:39 +0000
Manifest this update: Mon 30 Mar 2026 16:00:39 +0000
Manifest next update: Tue 31 Mar 2026 16:00:39 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: K7mVPfdXoPy0j+nSRCak0ZJc/Cq/ujicgqiuoDrWmws=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 14:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3f:79:ca:44:c2:43:51:90:b9:a2:08:df:b5:2c:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Mar 30 16:00:39 2026 GMT
Not After : Mar 31 16:00:39 2026 GMT
Subject: CN=b8a53ba4ed65b33634b70b3ecea4dc94c4b5fbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:e5:11:06:de:ec:cf:72:37:18:c0:8e:38:
84:94:42:23:c0:20:69:99:25:b4:9c:5e:e9:fd:4e:
31:4b:40:8e:b9:cf:1c:fc:63:77:09:ce:d3:4b:2f:
7b:f1:8f:be:1a:ea:d6:10:29:de:a0:a4:e7:de:a0:
a6:37:c1:7c:5f:50:2a:a5:1f:0d:79:7d:c2:0c:66:
70:cf:3c:32:b6:a3:1d:97:fa:74:90:69:ec:7f:d0:
79:59:08:4b:ad:38:70:97:dc:7c:18:03:d6:f1:8e:
14:bc:c3:96:c8:ad:7a:a9:c1:36:db:e1:12:b7:fd:
03:61:0e:1b:9d:a1:9d:63:8a:1c:40:1a:ab:2a:26:
a0:7a:02:0a:7c:16:a9:f6:14:01:41:0a:7a:54:f8:
6c:cf:4c:2a:3d:2a:c2:64:cd:1d:f1:00:fd:fa:23:
9f:76:28:9f:15:b9:51:cd:be:76:59:4b:52:75:62:
8e:1d:f2:38:06:9b:51:38:1d:d0:ec:7b:0b:df:e1:
ca:2c:dd:38:1a:d6:5e:bd:20:e1:0d:74:48:31:3e:
4d:13:14:04:eb:a6:50:53:16:9d:86:67:e4:ca:79:
df:4f:9d:8b:1b:d4:e4:a6:16:49:f3:a3:bb:f3:e8:
8f:ca:da:b2:4c:af:bb:0e:1a:64:b5:29:a1:35:01:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A5:3B:A4:ED:65:B3:36:34:B7:0B:3E:CE:A4:DC:94:C4:B5:FB:AE
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:a4:fe:ec:04:6a:08:2c:52:b6:db:5a:52:ab:63:20:a0:
4d:36:db:4c:5b:22:2f:c9:e5:4a:fa:af:b4:88:dd:a9:91:a6:
1a:03:bf:51:b9:88:dc:f3:2f:ab:06:1b:e9:8c:17:af:a8:c1:
01:7a:75:2f:af:e0:5d:54:c9:36:4c:16:3c:09:d2:d2:d4:f1:
11:7d:02:35:5e:04:c8:4e:c2:ab:cb:a9:16:74:18:e2:ed:b8:
f1:41:5e:93:4f:22:07:36:1e:e0:7d:32:d2:53:20:d0:f4:ec:
41:01:9f:42:62:cd:0f:c2:35:ce:f3:d0:79:95:c1:37:95:6b:
0b:7b:1a:3c:ff:4c:e6:75:a2:15:97:9a:90:1c:63:a8:77:d3:
ac:9f:99:7c:ca:9d:83:3f:eb:fe:2b:bc:e5:59:09:43:ec:5e:
b7:5e:cd:fb:c3:83:4e:a2:ac:2f:d9:f0:fd:71:f0:dd:3e:fe:
0f:91:50:0d:ed:98:6b:c4:5c:68:3b:dd:a3:9e:ae:19:1e:3a:
50:72:a7:42:15:86:07:4b:a4:5e:8a:b7:35:1e:a3:ce:93:ff:
e9:ec:22:2c:9c:a8:50:c5:79:ee:fa:41:4d:5e:24:44:7b:95:
65:15:17:30:90:25:e3:da:b1:44:07:31:ca:c1:43:c8:13:5d:
6f:f5:f6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:48:41 2026 by rpki-client