Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json)
Hash identifier: mstqmmrp54mAVzGV/w6fi0w2DQ7j1BqdRA7Z9Mg4gd8=
Subject key identifier: E3:0F:F8:B8:C1:3C:4C:48:D4:34:A9:BC:D3:2B:F5:96:27:00:AD:B3
Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Certificate serial: 019E1D22E74E8F7FB960182657634DE30A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 17:01:26 +0000
Manifest this update: Tue 12 May 2026 17:01:26 +0000
Manifest next update: Wed 13 May 2026 17:01:26 +0000
Files and hashes: 1: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: pA21yn3lPclJXPia10zyIaFsW74A657sf54A+XiINqQ=)
2: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (hash: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE=)
3: PEehES5SpZnr6s-nLTRBCvh0KiA.roa (hash: KLNyhN+bpOs8kGrk8EPysrLFKdZzU9fW9CEvBaXVGAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:e7:4e:8f:7f:b9:60:18:26:57:63:4d:e3:0a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9
Validity
Not Before: May 12 17:01:26 2026 GMT
Not After : May 13 17:01:26 2026 GMT
Subject: CN=e30ff8b8c13c4c48d434a9bcd32bf5962700adb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:82:9e:21:b7:34:e2:c7:75:fb:98:41:b6:5f:
2e:79:ab:7c:ca:ac:58:99:71:bf:af:ed:30:a4:b9:
05:88:5b:e3:17:e3:e6:e5:09:e4:0d:b4:a2:4f:a5:
d9:54:47:85:23:7d:48:a0:93:09:8d:14:60:26:3d:
f6:7f:55:36:8b:57:fd:c8:60:46:d6:76:5e:b6:93:
e7:b5:eb:b1:ca:48:64:7f:6d:e9:c5:76:a1:02:51:
2d:b8:f6:7b:d8:2a:3a:e9:b5:c6:ff:2f:99:cb:94:
ed:9e:4a:df:18:ed:82:25:8a:f3:9c:77:5c:91:2b:
f4:cd:14:fe:91:5b:46:1f:0e:8d:43:29:7b:9f:f9:
31:02:15:9e:a7:e6:c8:fa:ad:6f:d3:f6:93:e7:66:
54:b1:29:a8:03:8d:91:ce:0b:cd:eb:1c:e6:8d:e2:
dc:9e:19:cb:b8:02:c8:14:d1:30:20:98:2f:34:5b:
62:7f:ed:47:16:45:3a:ee:b0:23:85:2d:e9:c4:be:
a4:b8:a7:18:88:4c:da:36:60:9d:a4:4e:16:95:ec:
cf:9d:74:89:0e:57:ba:db:f6:89:c0:de:e4:26:de:
c6:1a:d0:f3:a9:ba:cd:7d:f2:e5:80:b6:2c:8b:40:
5a:9c:1e:0f:42:16:27:46:b1:d1:b3:eb:7d:db:d2:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0F:F8:B8:C1:3C:4C:48:D4:34:A9:BC:D3:2B:F5:96:27:00:AD:B3
X509v3 Authority Key Identifier:
keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5f:71:1c:b6:20:9d:02:a1:b6:55:9e:35:6a:bc:63:6a:de:
c4:13:d9:54:fe:ea:00:be:5b:4d:70:02:b3:9c:7b:b1:a9:69:
6e:76:76:ca:91:98:a7:4b:bb:01:cf:cb:f2:51:93:ae:f8:cb:
ac:95:38:ef:e4:aa:5c:2f:31:44:e5:c9:25:c2:35:a1:1b:81:
b8:50:9e:48:d3:04:10:da:30:01:f0:6b:fa:85:11:86:67:3e:
54:0b:9a:64:90:a8:c5:b0:62:66:6a:58:4d:dd:c9:60:f2:6e:
0f:01:75:c9:16:26:b9:78:ed:75:1c:ec:56:1e:9d:71:3a:cb:
51:38:fb:3c:a3:16:14:ca:7c:b2:de:24:bf:65:fb:a3:13:d5:
fc:35:18:83:1d:fc:02:a5:b3:2f:be:06:50:90:1a:45:6b:91:
2a:f3:65:73:c7:9c:c8:73:41:4f:ee:a4:54:b0:b2:44:7b:d6:
c3:da:61:2c:fd:75:c6:b9:06:44:23:e3:2d:60:99:f2:c9:70:
dd:56:e3:06:ee:f9:e8:a9:48:3f:d5:28:75:7a:03:91:f5:a6:
30:a2:ec:08:8c:4f:c5:0e:df:ea:fb:06:79:d7:b1:88:04:4f:
16:56:9f:39:3d:3e:16:64:c8:64:97:90:b2:53:e6:47:2d:68:
3d:b1:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:37 2026 by rpki-client