
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier: WIDdgZH3djiHXctMqd48QWeKZXhn+Urkn1O6iTgv2QU=
Subject key identifier: 81:49:52:81:1E:5F:5A:5E:5E:1F:B3:35:E6:33:29:60:9B:6D:2F:B5
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial: 019DA1F78C542F64A580FA1EDA814722BE1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number: 1859
Signing time: Sat 18 Apr 2026 19:00:48 +0000
Manifest this update: Sat 18 Apr 2026 19:00:48 +0000
Manifest next update: Sun 19 Apr 2026 19:00:48 +0000
Files and hashes: 1: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: SMToGEFkS2XNWVxSnHCcbxJcroPPxIe4L0eM+016X1g=)
2: PmvPeyfuH32uVVKqSfQ5RmaGzZA.roa (hash: 9iQB+r4y8DYdCOUHJllDHq/E35qdiIubyMUUaFVIXsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:f7:8c:54:2f:64:a5:80:fa:1e:da:81:47:22:be:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
Validity
Not Before: Apr 18 19:00:48 2026 GMT
Not After : Apr 19 19:00:48 2026 GMT
Subject: CN=814952811e5f5a5e5e1fb335e63329609b6d2fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:7c:4c:b8:fb:00:34:5c:f0:10:06:98:74:
f7:8d:78:f8:01:cc:12:7c:4c:57:27:a9:f9:a9:1f:
e6:34:97:ea:ce:1c:17:81:3a:0f:b2:f6:bf:90:a5:
ce:a8:55:0a:c4:c3:56:dc:5a:d5:08:ce:48:30:26:
2d:d5:fd:8f:d4:ba:8a:e1:24:1d:62:8c:62:55:cd:
ef:fa:64:73:22:fa:64:15:03:7e:4d:0e:7f:33:65:
77:5c:d0:22:61:40:55:8c:d7:55:2d:b6:e8:a8:8c:
b7:1a:60:3e:d6:b9:28:c8:1f:91:45:b8:40:0a:7a:
be:5e:11:f7:dd:32:c6:fb:15:2a:26:f3:c8:4c:3c:
69:f6:85:d5:f3:fe:86:cf:c8:35:28:05:5b:b1:5c:
bc:c0:f8:e0:e3:26:91:d6:0f:52:e5:b5:2b:95:d5:
7a:26:37:d4:da:d0:ff:37:b0:8e:02:bb:16:b5:be:
9d:ff:09:aa:c5:fc:16:89:0e:8e:67:ee:92:c6:76:
8b:80:9b:ff:36:9f:00:dd:e4:93:d2:10:22:b5:80:
9f:1f:d6:f9:ff:d6:ae:d4:2f:f8:ba:bb:17:b7:f8:
cc:4a:dc:2f:4b:d6:50:dc:ba:da:8e:8d:a0:5e:75:
36:ad:21:c1:6a:74:4f:72:86:d2:f1:8f:da:73:cc:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:52:81:1E:5F:5A:5E:5E:1F:B3:35:E6:33:29:60:9B:6D:2F:B5
X509v3 Authority Key Identifier:
keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:dd:0c:a7:f8:96:74:e5:6f:de:8e:a9:5f:ee:3c:d4:9a:bf:
2e:39:c3:57:ac:5c:74:6d:e8:3f:0a:5b:36:18:40:46:02:10:
68:fc:f0:02:b5:1f:c3:73:d1:51:4f:98:db:e6:f7:d5:1c:cc:
f7:a3:df:e6:0b:f5:c5:5a:bb:3a:b5:bf:7c:ec:11:e3:b4:a2:
1a:1d:44:75:10:4b:39:e9:5c:4a:6f:ec:48:af:b3:90:8d:f0:
76:6a:3c:74:03:28:61:2a:c0:07:db:94:3c:8d:80:c3:52:dc:
18:95:d9:86:a8:79:f1:2f:34:29:46:3b:2c:dd:23:62:d6:f5:
b6:b2:44:32:f0:5b:0b:d9:f3:cc:bc:50:f7:09:d5:13:18:96:
d0:65:94:d4:fb:5e:03:11:cb:8c:e5:76:5d:af:ff:78:a3:2e:
51:8f:2b:30:12:55:40:ba:f1:b5:a9:a4:04:37:fe:c3:6f:8c:
77:09:5d:35:37:2e:9a:18:d4:d1:3a:ec:06:c9:96:0b:ac:e9:
ac:74:0e:69:d1:14:bd:5f:81:d4:11:cd:79:1b:e9:d8:8a:b9:
c3:0c:bc:28:37:ea:51:ad:26:74:8e:d2:7c:f6:94:37:a7:dc:
84:94:e6:a1:f3:63:2d:55:1d:6b:8b:45:9a:73:7b:37:01:61:
80:0a:57:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 20:23:42 2026 by rpki-client