Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: xhitsw3wS7WwVWo+GiE4cVJTbyhPWtocX6TdtH8ByXw=
Subject key identifier: 77:40:CE:C7:C9:26:86:A8:2B:32:10:44:ED:4C:F6:EA:3E:9C:DC:35
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 01A17CCF22A6EBEF238AF5042AA4264ADF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 10:01:51 +0000
Manifest this update: Tue 27 Oct 2026 10:01:51 +0000
Manifest next update: Wed 28 Oct 2026 10:01:51 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: oSo5s/pv3YzDXdvRxCRxLsSm37YIUIWcKTGnWzxFy6g=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:cf:22:a6:eb:ef:23:8a:f5:04:2a:a4:26:4a:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Oct 27 10:01:51 2026 GMT
Not After : Oct 28 10:01:51 2026 GMT
Subject: CN=7740cec7c92686a82b321044ed4cf6ea3e9cdc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:f1:7e:59:96:99:64:da:dc:54:9c:c6:ad:
d1:34:ab:42:e3:7c:20:40:44:50:fd:ca:c2:5f:04:
76:1c:ac:f9:1d:e1:45:39:c1:c2:0a:6c:ed:0d:41:
17:92:ab:da:7c:3a:11:34:12:30:98:eb:45:3b:60:
2f:ab:52:b8:a8:d2:b5:08:e1:31:a4:26:19:04:b2:
de:4f:14:5b:75:fe:52:7e:39:c6:29:d8:6c:aa:c1:
d1:a1:30:9e:bc:41:97:0c:40:dc:0f:9c:0d:30:6c:
c0:ba:9a:89:e6:25:3f:c0:8e:b0:23:2d:d3:5a:03:
12:54:bb:66:7f:7f:3f:a5:1a:66:59:9c:a9:04:a1:
7d:c1:ce:0a:2d:9a:ce:cc:33:9b:52:20:de:9f:57:
92:3d:e1:f9:fa:e2:49:15:b9:af:cc:8f:2e:bb:00:
7a:6c:40:46:87:67:dc:76:56:29:31:87:81:8c:55:
1d:bd:08:55:27:fe:82:22:e7:31:f1:0d:ca:4f:cc:
37:ae:b2:73:44:0b:8b:d8:d8:0d:58:d1:de:62:52:
e0:97:de:1d:c2:c4:d9:c5:04:8e:85:54:78:8b:da:
ae:86:c0:fa:6c:38:9f:f5:03:16:c0:88:44:e9:68:
27:9b:42:a5:0b:d2:2c:8f:96:1a:f2:45:38:1a:fb:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:CE:C7:C9:26:86:A8:2B:32:10:44:ED:4C:F6:EA:3E:9C:DC:35
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fa:d2:31:30:30:23:50:f9:8f:c3:30:dd:c4:52:bc:f6:dd:
c7:e9:77:6e:40:c9:b8:07:ff:9c:a7:4a:08:ab:22:ee:f1:c1:
ef:2c:23:52:5a:81:36:c2:cc:18:e5:85:0f:ca:51:8f:ca:b7:
82:13:df:ef:dc:9f:54:d7:a3:df:7a:31:9f:a7:26:82:b6:34:
c9:ae:2f:99:29:70:c1:e5:9b:b6:9e:ae:0d:eb:44:7d:7e:01:
6a:51:91:c3:3e:8d:e0:f5:36:c4:31:6d:01:ab:63:4a:33:eb:
02:ec:5d:57:09:4a:3d:57:b1:92:97:10:94:34:1d:2b:82:6f:
93:be:33:67:c4:9a:6b:41:b7:5d:a7:0c:4c:fd:9a:e7:ac:f9:
87:dc:fa:8e:78:21:ef:d7:12:e7:bd:57:99:eb:56:a2:63:eb:
8f:7a:9c:af:12:12:8f:65:64:bf:30:25:d4:22:4d:39:7e:49:
a9:fc:f2:99:6c:88:54:1c:38:40:0c:8b:14:1d:e1:29:79:c9:
09:7c:ce:28:b0:a5:ea:71:c0:99:04:84:f6:6f:0e:4b:57:40:
fa:fa:ff:e5:6a:62:c2:65:00:5d:12:9f:f1:b1:51:a3:c7:b7:
de:87:ec:ce:d5:6c:54:aa:78:ff:9b:bd:b4:6c:73:cb:a3:c6:
b0:4f:2d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:50:13 2026 by rpki-client