Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: MGS43DZpujM9O8mFjrD29Fn+tbsvHUH1AciE/hc5NTE=
Subject key identifier: A8:96:08:3D:B0:9B:CA:F0:F1:27:F0:E2:3B:28:84:3C:96:2D:92:2F
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019D28F219AE6C968D93559F450959A8C089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 07:00:48 +0000
Manifest this update: Thu 26 Mar 2026 07:00:48 +0000
Manifest next update: Fri 27 Mar 2026 07:00:48 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: kbWLMjhglTNBjvpNBSGns6Zap4z6FgefeAq1/bqwY3g=)
2: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
3: UyCV5qcRCLQ5doQBF4zOCazHOB8.roa (hash: FE6P7OspYYWrHf7w/CILjtdjVfVvvvnjVFJC9iwTuSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:19:ae:6c:96:8d:93:55:9f:45:09:59:a8:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Mar 26 07:00:48 2026 GMT
Not After : Mar 27 07:00:48 2026 GMT
Subject: CN=a896083db09bcaf0f127f0e23b28843c962d922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:62:f4:71:93:01:1e:a9:a9:36:5c:60:97:f7:
26:a2:ce:35:85:c7:2d:b7:23:6d:fc:68:a6:36:8e:
1f:c6:f8:4c:12:68:85:06:8e:b8:9c:fb:51:e4:b2:
78:3e:79:fb:4a:fd:95:15:d2:87:04:b3:ca:54:26:
41:6e:07:30:5f:f7:02:a7:f8:5c:8b:fe:eb:81:7d:
12:76:d4:4e:12:45:54:2d:82:ee:73:77:9d:78:10:
fa:b6:3f:78:51:69:d6:90:71:c6:2e:9d:56:af:d5:
59:cb:e3:6d:32:73:67:ae:05:f5:58:bc:84:1a:9c:
a3:d4:fd:93:02:b5:70:63:a1:4c:be:ed:76:32:cd:
2f:e4:20:10:57:94:b8:96:55:33:cd:1a:ee:55:01:
e9:ae:79:a5:db:3c:01:5d:e7:9b:fb:db:aa:8c:7a:
0c:e4:9c:22:74:64:2e:0b:b5:de:22:f5:c7:bf:ec:
24:4e:74:cb:ae:47:5a:9b:4e:ed:8c:85:52:c7:84:
5f:c7:9a:b9:f1:71:bc:8a:4f:de:19:01:11:d0:8c:
04:97:1b:07:a4:df:2f:d9:39:41:51:5d:06:cf:35:
9e:0c:fd:70:09:f5:82:79:86:43:8a:59:1a:76:59:
84:c3:42:cb:32:11:90:a7:e9:ad:ce:7e:f2:62:81:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:08:3D:B0:9B:CA:F0:F1:27:F0:E2:3B:28:84:3C:96:2D:92:2F
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4d:4c:b2:91:54:11:07:5b:de:43:b4:94:24:e1:7b:da:f7:
b3:e8:5b:c1:b7:12:ad:0f:41:10:c9:af:c2:83:e8:99:1c:04:
96:06:7f:3f:6e:10:2b:db:0c:2d:97:84:76:5d:64:62:69:11:
0d:d4:c7:0a:87:51:5c:84:ba:21:04:a5:40:c8:95:e3:49:8f:
13:38:52:a5:47:75:a4:50:e5:21:11:2b:5e:75:21:e5:f6:0f:
b1:ec:69:53:81:66:ff:97:f2:44:f4:fd:a2:e5:13:e8:44:7c:
f6:6b:e7:1f:d0:bd:f9:fd:78:3c:69:4f:9c:cb:28:8a:48:01:
e4:f8:80:80:04:36:15:eb:1e:85:f2:21:1b:7a:83:0d:36:8f:
e6:8c:83:b1:b5:fe:79:f8:4f:43:e3:e3:47:12:56:b5:71:ea:
98:b0:cf:fb:e7:15:ad:54:ac:dc:c3:af:71:ed:94:fa:5f:ed:
5c:d9:c7:e2:58:38:98:62:fd:44:af:96:b3:6e:1d:46:4b:90:
9b:e0:a9:96:73:83:3f:a4:3c:a3:e5:3c:8b:54:f4:89:4c:e7:
65:19:94:fc:2b:bd:6d:b4:b4:0a:f6:3c:f9:ad:a0:63:a9:52:
9e:61:d7:43:05:ba:25:58:30:a5:8f:cf:21:27:db:60:b2:97:
5d:04:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:36:12 2026 by rpki-client