Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: JgCHkQIMqxC+EaM8ERx7ziWK8K/pVgtfIH5bgFK3zDg=
Subject key identifier: E3:21:C6:24:47:EE:99:1D:39:AF:DB:9C:B8:51:3F:23:45:5F:15:19
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 01A0CCA3AE5C12F89C90DAEF05BDB343D5BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 05:01:13 +0000
Manifest this update: Wed 23 Sep 2026 05:01:13 +0000
Manifest next update: Thu 24 Sep 2026 05:01:13 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: ymI5qd5/VC+1TALgv5XH2hVWnKwfLwgLVY4dviZksY4=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:ae:5c:12:f8:9c:90:da:ef:05:bd:b3:43:d5:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: Sep 23 05:01:13 2026 GMT
Not After : Sep 24 05:01:13 2026 GMT
Subject: CN=e321c62447ee991d39afdb9cb8513f23455f1519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:47:90:bf:34:ba:ba:8a:70:fb:35:ca:79:
5f:c1:07:f1:9d:76:6d:c1:16:65:15:93:18:21:23:
1f:73:ee:c3:04:61:00:33:e7:46:1c:42:c2:b9:4a:
77:03:94:92:9e:44:c8:28:e4:8d:4f:8e:30:e0:73:
6a:a1:dc:4b:81:a3:e2:d6:4e:28:d1:88:08:6e:80:
f8:97:f2:57:39:c8:75:b4:5f:b0:71:d8:f6:e3:66:
64:71:a0:06:5e:0d:ac:14:d0:3c:8d:12:62:2f:d8:
db:c1:92:66:de:01:2c:32:71:b9:a8:ef:25:80:a1:
ef:4e:23:a5:73:79:ba:4c:b2:76:f9:81:58:ca:c4:
23:bd:a1:5c:e1:43:73:8e:1b:18:14:08:ba:7d:70:
cf:e9:d6:a0:e7:3b:a8:2c:3d:a4:b4:a4:fa:06:08:
6f:64:55:0d:15:3b:96:7f:a5:92:44:94:f2:1a:95:
5e:e8:89:7c:ea:73:2e:9f:13:60:3c:89:66:54:ae:
ae:93:bf:88:c3:06:18:6e:42:73:16:7d:a7:af:63:
2f:46:be:79:37:f8:bf:54:0e:85:43:90:1e:d5:b3:
38:cf:ef:dd:27:46:20:7c:8a:de:e4:34:e0:2c:56:
01:03:d5:c6:79:80:6d:42:70:4b:08:ca:9b:1c:2e:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:21:C6:24:47:EE:99:1D:39:AF:DB:9C:B8:51:3F:23:45:5F:15:19
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:d0:fb:c1:22:17:e6:eb:15:ee:dc:d9:76:bc:7d:77:fd:54:
fb:10:15:0d:7f:2f:f1:7a:6e:87:af:cd:85:f1:3c:94:dd:cd:
f4:79:95:dc:ae:55:ce:e8:0d:dd:4f:2c:db:a8:2f:64:3f:d4:
ed:af:a6:af:fc:57:80:1b:28:72:97:dd:e0:4f:e8:9d:61:b5:
50:bc:15:71:1c:87:c1:b6:b5:64:1b:95:b6:83:aa:ce:bc:cb:
7b:8a:ac:af:e9:31:01:d4:dc:1d:f3:94:f5:91:e7:70:db:bc:
02:ea:07:6b:7d:db:49:64:d0:4f:2e:6b:4b:01:b3:33:83:c9:
cd:a7:49:22:92:c8:e7:6e:cc:fb:df:3c:d6:ea:ad:e5:a9:a1:
2c:ff:55:79:0a:3c:00:50:53:02:40:45:89:71:e7:22:66:78:
12:8b:74:af:b3:f5:c7:9b:af:43:c9:33:af:4a:ec:63:27:5b:
5b:82:03:3f:7b:65:18:20:21:fd:2b:95:14:a4:fd:b3:5d:1b:
84:d4:07:a5:96:93:c0:bf:04:bf:1f:e4:7b:4c:af:c1:93:43:
1d:6b:61:ed:5f:3d:15:eb:36:3e:41:d2:53:ee:b4:ac:36:fd:
04:e4:9c:a8:ef:44:2f:e1:f5:be:4c:f2:62:b3:8c:bf:ca:fb:
27:f8:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:08 2026 by rpki-client