Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: GdtmPzbV6+fKKG2SRDDcxva9eDPjCikplW7nb0NySnI=
Subject key identifier: 90:58:CC:86:36:25:3A:8B:89:AB:40:F3:DB:E1:30:57:51:C5:B6:80
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019F8FEC8E6F5342EE48AD71E1E421A373D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 17:01:12 +0000
Manifest this update: Thu 23 Jul 2026 17:01:12 +0000
Manifest next update: Fri 24 Jul 2026 17:01:12 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: wi9ey5O7OJUsCOMeWCO+HlGMZWDVsc5iXErOszjHpow=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:8e:6f:53:42:ee:48:ad:71:e1:e4:21:a3:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Jul 23 17:01:12 2026 GMT
Not After : Jul 24 17:01:12 2026 GMT
Subject: CN=9058cc8636253a8b89ab40f3dbe1305751c5b680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:f5:a5:e9:c0:9e:4d:1e:43:8d:99:8b:92:
e2:9d:ac:67:dc:12:64:ed:f7:5d:c4:48:0c:3a:3f:
da:e8:41:93:27:b2:23:b9:43:68:8e:c0:10:2c:b5:
58:92:c7:b3:2f:cf:b4:9b:5e:31:fd:b2:0d:86:fc:
5e:6b:0c:2d:36:b8:5e:76:d0:3d:f8:1c:55:a2:98:
d4:cc:e4:89:5b:39:d0:48:a4:59:cb:8e:78:ac:42:
ec:40:b5:37:3f:c2:d3:0c:5d:9f:89:bb:bf:a7:48:
71:ac:f2:76:b9:62:17:ae:8f:3c:53:3f:23:83:58:
8b:e4:4b:19:09:ab:57:13:51:9c:8b:6e:ac:01:4a:
3d:1f:d4:9b:7b:95:ad:46:e0:df:03:08:e3:e6:16:
23:15:52:a9:13:9a:37:5d:1c:67:74:40:a6:2b:2c:
2e:13:2c:37:86:f7:88:69:a1:8e:5e:7e:66:44:bb:
39:d7:5b:ec:0e:16:6b:09:e9:c7:20:fe:0a:3f:8f:
0b:a0:cd:8d:45:cb:bc:f7:75:4f:be:6c:ca:de:f6:
fb:5c:41:2d:da:19:1d:e4:36:ce:dc:b6:d5:22:22:
55:70:c1:a7:03:66:63:89:ad:9b:42:d0:5e:75:85:
31:ee:af:b3:3f:83:e6:20:b1:e4:91:55:a8:18:bb:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:58:CC:86:36:25:3A:8B:89:AB:40:F3:DB:E1:30:57:51:C5:B6:80
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:53:58:97:c7:79:f9:41:a7:1c:a4:51:d2:4b:f2:5e:4b:df:
3b:de:84:b6:71:cd:2e:6d:01:9b:96:f1:ce:93:f2:85:8a:c3:
b9:c1:78:da:4a:b4:a7:e0:49:54:4f:fd:12:ff:99:8c:a3:0b:
33:7f:51:c5:61:b1:67:79:d0:f4:88:9f:4d:4d:76:a1:a4:86:
27:b3:fa:ab:82:1c:78:b9:c4:d6:2b:e8:87:24:c8:59:87:89:
44:20:c7:75:00:0c:ab:e5:2d:d1:d2:64:8f:6d:96:27:01:18:
54:cb:a7:1c:e6:79:8d:f0:5e:88:d4:2e:04:0f:52:af:54:8d:
19:a4:3d:17:d0:e7:4b:cc:61:b7:60:31:87:a8:eb:e8:a2:f5:
65:cf:b6:9c:c2:57:45:78:86:47:0c:cc:80:ac:dd:26:63:09:
81:e2:54:7c:50:2e:77:ca:cc:7b:6a:d6:26:12:c9:d2:48:09:
5f:8e:6b:64:fe:b8:38:ff:0a:d5:3d:13:50:0c:d6:4c:e7:16:
98:e1:2f:b7:8e:f0:c3:76:18:5e:a1:c4:5a:e6:74:63:4e:67:
a6:0a:79:c4:18:3b:56:f1:7a:40:12:18:3a:a6:a4:9a:83:8d:
4b:9c:d6:25:e4:71:d5:4e:85:9e:fa:3e:36:fd:e0:12:a0:28:
b6:fc:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:19:32 2026 by rpki-client