Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: 81V6RiNTCL1oweqVx65YEhsfgkUwvkMGGumRJgjglfs=
Subject key identifier: E3:44:62:1A:5B:A0:51:20:CB:9D:F3:57:8E:A4:8D:57:F3:7E:4D:0D
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01A05B2018EC5031C2F87CB9C436B253123E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 19C2
Signing time: Tue 01 Sep 2026 04:00:25 +0000
Manifest this update: Tue 01 Sep 2026 04:00:25 +0000
Manifest next update: Wed 02 Sep 2026 04:00:25 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: Cqj+WDrfHOdwb58cbwT7/pRu4py5o50C+Hic8NN9oFA=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:20:18:ec:50:31:c2:f8:7c:b9:c4:36:b2:53:12:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Sep 1 04:00:25 2026 GMT
Not After : Sep 2 04:00:25 2026 GMT
Subject: CN=e344621a5ba05120cb9df3578ea48d57f37e4d0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fd:51:0f:38:ed:d5:c0:08:52:cc:40:d4:0b:
4a:6b:b2:b6:26:f0:7d:58:a0:d1:63:85:91:ff:1a:
0d:95:bd:55:e3:4a:7e:fe:27:5a:2b:60:fe:23:6e:
63:cc:03:e8:b9:7c:06:b7:b4:7d:b4:7b:0e:f6:f2:
f3:c0:61:9a:3a:2f:84:f1:46:a2:1f:10:64:3a:b8:
32:2e:2b:29:ed:58:ee:0c:a5:66:ea:a0:7b:38:ae:
bf:bc:d3:9b:ed:c5:54:a3:c1:75:e7:0e:8d:f4:0b:
8e:38:79:0e:ba:0c:bf:2b:19:b2:38:63:cc:19:51:
dd:55:8d:a6:f4:25:48:ab:f9:39:86:06:c0:ca:90:
e7:db:f4:c9:21:cc:7f:84:5a:5d:38:2b:0a:90:e7:
df:0c:a5:1c:2f:bb:63:be:d4:00:9f:79:9b:4b:99:
ee:33:e7:14:98:05:8d:7b:dd:c3:78:ef:66:11:54:
71:dd:fc:1f:b1:f5:9e:eb:f1:75:d1:af:ec:4b:a2:
38:7f:72:9f:20:79:32:eb:7b:02:66:f0:1f:90:54:
fa:e5:9a:00:df:d5:30:7f:f9:f3:81:ad:7e:f4:31:
56:b5:2d:15:90:67:06:ba:66:ea:b1:a5:37:1b:94:
13:81:6f:21:70:20:cf:23:83:bc:cc:cf:f9:f0:18:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:62:1A:5B:A0:51:20:CB:9D:F3:57:8E:A4:8D:57:F3:7E:4D:0D
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d8:7e:6a:7b:59:4c:1e:fc:82:86:5a:24:c0:6e:cb:27:54:
aa:95:9a:21:f1:36:8a:0c:38:c0:45:79:96:33:c5:7d:43:ed:
42:f8:57:70:fc:2d:6a:78:23:d2:e0:dc:30:5d:a5:64:32:8f:
eb:2e:77:59:76:53:ba:40:90:bb:e6:49:2b:61:46:c1:2c:87:
54:13:76:64:19:dc:96:11:62:23:6a:c6:2e:5b:80:68:c8:0a:
b7:b2:48:f7:b9:7b:1d:0e:f0:20:ad:34:70:41:e2:08:61:4e:
f5:29:ef:3c:76:92:12:dd:49:6b:3c:23:28:19:ea:1c:17:07:
bd:08:2b:52:85:11:14:2d:b1:88:b7:33:c1:ea:f0:23:db:22:
95:ac:bd:2d:78:c7:d5:94:f2:fe:9c:21:1b:0d:3f:92:4e:0d:
3f:88:a9:d8:0c:0e:8d:90:08:90:2e:51:0f:ae:05:3f:7a:10:
d9:14:0b:1d:eb:56:85:c0:53:e4:3d:74:c3:d7:2b:67:c8:7e:
71:1d:14:a7:de:aa:1e:fc:b3:52:ce:df:65:c2:07:f7:77:b2:
9d:e8:72:06:c0:c4:6e:3e:7c:f2:d0:75:4f:b3:75:b8:f0:f9:
53:62:5b:95:b4:88:3d:15:a9:15:3f:e5:bc:a1:2b:a5:c4:08:
59:b3:34:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 09:44:56 2026 by rpki-client