Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: chMZJXf1dyK2IaQJ1jmUSgni+ZSECd9DMDvbdoikS/M=
Subject key identifier: 21:87:67:F6:EC:BC:82:C3:68:A9:E8:92:0A:F0:16:FD:C1:94:9C:81
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01A1C442610E7285DA09546740A38C489710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1A7D
Signing time: Tue 10 Nov 2026 07:00:46 +0000
Manifest this update: Tue 10 Nov 2026 07:00:46 +0000
Manifest next update: Wed 11 Nov 2026 07:00:46 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: UNbSmLCwaJWakz7QUk8FeD0fnHQ7htufnuEWbLmuKWw=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:61:0e:72:85:da:09:54:67:40:a3:8c:48:97:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Nov 10 07:00:46 2026 GMT
Not After : Nov 11 07:00:46 2026 GMT
Subject: CN=218767f6ecbc82c368a9e8920af016fdc1949c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:69:8d:64:58:25:75:4f:06:ef:a3:26:c5:a1:
c8:45:6f:08:98:22:ba:e0:33:89:c5:b7:81:ed:4a:
ff:70:8d:f1:1b:b4:db:84:64:bb:78:e6:f7:dd:7b:
24:13:26:b5:dd:7d:28:2f:7e:21:e9:f7:c9:d6:d0:
64:ac:66:6b:40:78:24:cf:64:82:cb:58:64:b6:b9:
80:b1:c5:fc:52:42:0d:e0:68:87:61:37:ad:2c:1a:
bb:8a:6d:22:d9:8a:cb:e0:07:dc:db:4a:c8:c7:20:
34:ae:10:de:c4:02:97:3a:a4:b8:d0:2c:b3:5f:6f:
c3:b1:c4:ec:4b:ee:a6:f5:32:6f:8e:4c:a6:1c:6d:
77:8b:d9:c6:76:71:77:88:cb:51:78:05:6a:e2:c4:
ac:33:66:56:5d:45:1e:8e:e2:3c:43:fc:df:69:d2:
0e:8d:68:da:bb:44:71:1a:44:10:b1:25:94:7c:d0:
6c:60:b3:39:d0:05:b8:f8:08:2d:35:65:da:05:40:
0f:b7:4a:a4:20:6b:e5:e7:6a:39:ea:50:a2:c8:7e:
a3:de:01:71:0c:4f:77:94:b8:08:c8:b4:47:24:eb:
76:c6:d3:95:96:69:2b:08:76:75:bd:21:83:c8:12:
bf:90:b8:ec:c7:09:45:b1:97:d4:80:59:5c:e7:b1:
25:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:87:67:F6:EC:BC:82:C3:68:A9:E8:92:0A:F0:16:FD:C1:94:9C:81
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1b:bc:1d:9e:e7:8e:2b:3b:d0:a3:35:4e:34:10:72:51:1b:
45:39:95:b8:e3:09:e8:92:60:10:34:04:50:bd:b2:ff:02:44:
0d:df:de:5b:55:8c:b1:44:5d:0c:cb:72:ce:a6:dd:5f:06:d5:
fc:5c:5e:e9:8a:42:9b:19:7e:87:13:b5:6c:a2:d8:cc:cf:f5:
bc:b7:93:d4:29:b8:d5:ee:6c:ff:6f:77:e4:ba:2d:58:f7:5b:
94:1b:06:8c:63:aa:29:0f:cd:f3:5c:48:eb:26:1a:0d:72:9a:
f3:a4:69:68:a5:f6:91:bc:e9:4e:ad:f8:25:41:19:27:ad:ba:
ed:7e:06:20:1e:26:e0:af:6c:fd:9f:72:d8:6d:ef:e2:9f:55:
31:ab:55:ba:8e:79:fc:56:04:e0:f8:96:63:25:b5:91:29:c1:
ad:28:89:ee:4b:12:73:74:aa:f8:13:c6:8e:7a:95:df:3c:15:
49:8c:95:f4:a3:15:ca:84:47:ed:03:7a:fc:a5:dd:42:b5:a1:
28:95:e4:29:10:89:51:04:e8:97:24:4a:7b:b9:1d:76:b6:e3:
12:f0:2c:fa:91:a5:f5:d9:7a:52:f3:48:0d:ba:da:5a:81:a2:
65:6b:5e:4c:5f:1b:c5:be:2c:9b:a3:3c:5f:7b:07:0a:87:44:
87:4c:97:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 17:41:59 2026 by rpki-client