Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: cnwP0Y8I78RNB9USgHMT1+xamH23K0ui8fk3ncemjCY=
Subject key identifier: 87:2F:0A:E2:C8:E5:61:C5:E6:D0:D2:9D:CB:E2:C8:11:55:15:44:A9
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019DDFC44C39707467FAB8EE381B3AA617FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1879
Signing time: Thu 30 Apr 2026 19:01:16 +0000
Manifest this update: Thu 30 Apr 2026 19:01:16 +0000
Manifest next update: Fri 01 May 2026 19:01:16 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: ZiUPKy4442EXBMRgmFP2Oqoi+Izw9iTz8nxqdkDs7P4=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:c4:4c:39:70:74:67:fa:b8:ee:38:1b:3a:a6:17:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 30 19:01:16 2026 GMT
Not After : May 1 19:01:16 2026 GMT
Subject: CN=872f0ae2c8e561c5e6d0d29dcbe2c811551544a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:80:44:3a:3a:ce:2a:fa:ea:f2:ea:b3:9e:bf:
90:fb:00:40:b4:53:ad:14:ac:78:fe:ea:80:70:1c:
23:0c:8f:bd:c5:66:a6:fe:6f:2e:02:c0:32:e7:55:
5a:97:fb:ff:b9:b4:8e:97:08:0f:50:fe:dc:2b:58:
25:3e:c8:b3:41:91:21:40:4d:6e:74:9d:0b:37:ce:
a7:ef:af:60:78:77:22:cf:b4:cd:cd:cf:45:4d:53:
3b:0e:4b:6f:ab:29:ff:34:f2:e6:b7:7c:81:eb:a0:
de:1d:8d:33:ea:73:19:52:01:93:24:63:53:14:44:
13:e0:af:69:aa:ab:dd:d3:6a:b1:95:29:af:70:00:
ae:22:76:1b:0b:74:25:a7:12:d4:79:70:8b:42:17:
4e:90:79:1a:5b:b0:8d:a8:ad:41:66:3c:ab:f4:99:
8d:6e:4a:75:42:80:e1:e1:61:27:8c:ff:74:44:91:
e1:8f:1e:cf:23:37:35:e6:60:6a:5d:dd:fb:5d:50:
c4:7d:89:53:fd:46:ce:69:1e:4a:22:a2:37:ef:56:
80:e5:cb:54:c6:20:da:02:f7:f5:cd:72:95:80:44:
ef:22:d9:72:df:56:fc:0b:e6:d0:84:32:83:33:78:
02:29:f6:16:8c:75:5d:32:45:35:e8:69:57:5f:62:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:2F:0A:E2:C8:E5:61:C5:E6:D0:D2:9D:CB:E2:C8:11:55:15:44:A9
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:23:a8:51:c2:7b:ca:58:c2:7a:bc:46:f0:40:2a:5e:86:11:
73:98:c2:3d:7c:30:a3:5e:f2:7d:be:08:47:64:47:0a:75:4a:
9c:58:ea:41:db:dc:3d:fd:3c:4d:ea:d8:93:70:42:cf:f7:9b:
39:a4:68:01:d3:7b:c5:34:73:db:26:9a:41:00:3b:ab:a5:28:
3e:3a:dd:d7:d2:58:60:ba:0f:2f:0c:88:ec:4a:29:c9:28:a3:
15:fb:4d:fb:6c:5d:bc:70:e7:ae:fb:8a:71:55:51:54:07:a0:
40:b3:e6:aa:ae:6e:1c:ea:8e:fe:65:98:1d:e2:9e:45:3c:09:
bb:4a:c9:1c:82:93:77:7a:c5:50:67:d6:59:87:9a:57:38:3b:
ee:8d:70:cc:32:0e:ad:a6:51:a4:4e:44:53:46:7c:f6:47:60:
3d:aa:7a:42:70:37:ef:35:26:1c:dd:c4:56:91:a0:8d:f9:12:
2f:47:c2:4d:48:f3:22:2c:6c:df:63:e1:03:a8:07:0a:c2:47:
8a:d0:65:32:f7:16:5f:b6:f5:5c:e8:a3:c4:2b:7f:50:c9:75:
fa:0c:7e:71:f2:8c:66:41:b4:06:b5:35:ef:7e:32:0d:a2:97:
e5:31:35:18:fe:e1:7b:31:d4:d3:c1:59:10:ce:8a:61:9f:70:
0e:31:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 23:41:29 2026 by rpki-client