Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: 4dlt5mGzJ0u55pO56kSsiILbsjX9jYDIT0/9Q7571FY=
Subject key identifier: 5E:04:52:77:0D:2D:2E:3E:E4:4F:A8:36:EB:65:8E:72:D1:CB:7A:99
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019D25F1A575EE3350C25B7F31B9B44351BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: 7c8Li2CPlwMxZdiMNXTuexaqOSZEdPV0lLnj9978zuw=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a5:75:ee:33:50:c2:5b:7f:31:b9:b4:43:51:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=5e0452770d2d2e3ee44fa836eb658e72d1cb7a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:22:8b:3e:ef:65:a1:99:ae:a6:06:3b:fe:
f3:7b:c2:e8:85:57:f4:40:19:f9:fd:d2:04:c4:cc:
31:0d:7a:f4:ab:35:45:f1:e3:3b:ec:a0:aa:8c:fb:
85:5d:ec:49:2b:cb:3c:b2:1b:9f:40:99:21:af:3f:
07:11:6f:cc:88:2a:f3:9d:bc:78:7e:e9:0f:85:2f:
4d:a4:b8:4f:48:4c:cc:f9:0b:28:67:b2:ab:73:1d:
17:e9:a1:43:6d:1e:33:a9:c4:15:39:fd:de:c6:a0:
c3:34:68:eb:b2:a9:92:71:95:87:1b:19:77:3d:a4:
11:41:4d:b8:3e:f2:8e:5f:59:72:c6:fa:34:55:c2:
5b:4a:db:87:9e:3e:a0:f8:6a:c7:55:2e:6f:1e:73:
0f:b3:ac:04:1d:a6:c8:6c:cf:4e:eb:a8:e5:44:f8:
8d:0c:2b:43:73:23:d2:f0:a0:99:82:98:1e:3c:7e:
7e:e2:bf:1f:2e:70:3a:b3:23:60:dd:46:7b:40:ce:
01:71:8d:73:bd:33:f2:d3:bd:22:10:fa:c9:3a:a4:
19:95:f6:c1:22:0e:d3:a9:ae:37:f1:36:30:80:93:
73:7f:da:0a:7e:80:cb:44:cc:5b:63:ca:e4:d9:20:
cc:93:be:83:85:ba:54:f8:54:ad:dc:39:5f:49:8a:
ba:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:04:52:77:0D:2D:2E:3E:E4:4F:A8:36:EB:65:8E:72:D1:CB:7A:99
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e8:65:5c:19:dc:f5:4a:87:e9:24:ba:ce:5c:17:12:a9:7a:
e7:7a:7d:7e:7f:46:f1:a4:4f:61:5a:93:d1:49:c2:99:79:0f:
07:11:bb:84:e9:6f:a5:85:81:c3:da:57:3b:8b:04:75:77:71:
1c:6c:34:62:e1:63:19:27:3f:43:8f:fe:7b:e5:8c:2f:2e:2d:
db:c5:25:fc:d0:82:fe:8c:6d:f4:b2:2d:50:77:08:10:ad:0c:
5a:02:d0:a7:2b:e0:e7:a8:70:b9:2b:eb:51:20:fe:92:a3:da:
4b:05:ce:1f:20:4b:5f:10:15:93:31:dc:b5:ca:f6:86:55:02:
e9:d9:d7:ba:9f:c3:64:fb:f8:9e:ea:8c:dd:54:3b:73:bc:48:
28:2c:49:1a:db:32:69:d9:1e:a6:55:62:19:cd:c0:4a:de:49:
6f:0a:f6:1b:2a:e8:8c:74:45:ca:71:0f:fe:1b:32:3b:32:0a:
c8:a7:05:4a:7e:1f:26:24:da:c3:f0:b7:a8:d9:72:07:86:b0:
ab:9d:06:ae:00:83:50:cb:06:10:2e:84:79:d4:9e:ee:9e:60:
b1:8a:c5:e2:c8:f2:c9:6e:ef:5d:63:25:f7:a2:d8:ff:89:49:
86:86:2e:7f:dc:be:c4:d4:ae:4a:6a:2f:ac:16:51:79:ee:80:
b5:5d:97:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:22 2026 by rpki-client