Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json)
Hash identifier: SM+ms/ZWASn8+ePqT9wbubXo2ljoQb2+ch88JS+f1Zo=
Subject key identifier: C9:64:A9:1A:68:A8:96:F6:1D:6E:3C:93:6E:98:32:D0:F8:CC:FB:AE
Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b
Certificate serial: 019F9022B7EAD1373387272943EB04797A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
Manifest number: 19CF
Signing time: Thu 23 Jul 2026 18:00:22 +0000
Manifest this update: Thu 23 Jul 2026 18:00:22 +0000
Manifest next update: Fri 24 Jul 2026 18:00:22 +0000
Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: ig4yZ8VIpKrjJlamwrx1ugc1O74jYwJPH+b2b5PbQtI=)
2: AIfGsSPAIhGTAhcJMT-43FCuJiw.roa (hash: Pu5NP+j1KvnCv1UXGo8u9ACIZ/QzV4gjTT63qqxTR/Y=)
3: E3zKZPBFhdGBxdPE1z5sUZZqWqs.roa (hash: l/y3pPw5aQeELMhZp5go4vxGzvDlJdC51uABU1/1c6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:b7:ea:d1:37:33:87:27:29:43:eb:04:79:7a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b
Validity
Not Before: Jul 23 18:00:22 2026 GMT
Not After : Jul 24 18:00:22 2026 GMT
Subject: CN=c964a91a68a896f61d6e3c936e9832d0f8ccfbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:03:f3:d3:3b:5d:f8:1d:92:80:b0:de:67:
1c:26:3d:60:65:8a:88:ab:19:34:40:4d:1e:0e:96:
27:59:f3:b0:3a:38:d3:d4:1b:57:88:7c:a2:ee:50:
46:e3:c6:da:aa:5a:00:fd:19:73:ec:e9:bc:85:47:
2a:d4:e7:8a:4b:43:bb:9f:46:28:c5:e5:a9:f9:1d:
6d:0a:6c:b1:0f:85:ad:02:f3:4d:12:35:be:c4:52:
4f:33:64:de:a1:c2:b9:26:bc:4f:fb:98:e8:77:7c:
08:04:0c:c1:9b:51:36:a1:ba:9b:76:d9:db:7f:3e:
77:ef:94:54:f7:47:bb:ac:72:fc:b3:47:14:30:be:
96:b1:7a:02:13:f8:b3:a4:63:a5:5e:32:23:93:06:
f0:c3:2a:c7:a1:49:90:8a:b4:dd:4e:41:f4:ba:a2:
e3:83:48:f2:ff:79:cd:0e:66:d4:6b:c8:65:92:74:
11:96:d9:56:cd:04:b2:55:52:99:c2:46:20:b3:f6:
41:0f:65:bc:01:2b:97:5d:3b:91:8f:75:96:de:d4:
ef:b6:6e:5f:08:db:d5:d4:d7:d6:50:a8:59:2f:6a:
ff:33:20:4e:c9:0c:f8:e6:be:61:c6:cd:a2:8d:77:
98:15:c0:4d:1f:7c:75:d2:5b:7c:56:45:f2:db:ef:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:64:A9:1A:68:A8:96:F6:1D:6E:3C:93:6E:98:32:D0:F8:CC:FB:AE
X509v3 Authority Key Identifier:
keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:39:bc:00:a0:bb:52:a3:ef:13:c4:ef:8d:fc:02:df:e0:e0:
56:de:7b:ab:b1:7f:a2:01:33:2c:1b:0c:af:a9:89:96:4a:dc:
87:fd:7e:da:e5:55:8e:9b:86:37:a8:dc:59:3c:08:b9:84:01:
e8:73:29:18:77:ea:49:84:e1:e9:e1:b4:75:ff:80:3e:a1:1e:
ff:02:ff:7a:3a:c4:7b:5d:c5:5b:f4:c7:10:11:14:a8:92:75:
74:46:3d:cc:5c:8f:07:13:fa:84:8f:9f:a9:81:5e:47:ef:db:
b8:27:b7:a7:46:83:33:90:d5:2e:28:c3:d8:66:17:d8:d5:15:
6d:78:5d:48:a3:53:0a:62:4c:75:b3:ce:db:21:a6:b4:99:fe:
f9:88:04:b1:0a:b0:d0:74:e3:82:42:3f:d2:46:9d:4d:27:4a:
e6:fd:30:25:9a:59:6a:6e:0d:24:03:80:bb:4f:27:45:d4:4a:
ef:99:c8:fc:d6:59:06:24:04:2d:07:96:62:24:9d:31:ba:ef:
f7:45:bd:b1:0b:98:6c:7f:9c:42:b3:0c:85:c9:ee:7e:5d:fc:
b7:58:bb:13:e9:16:44:c4:1b:74:e1:25:9b:5f:36:c2:71:cd:
c8:8c:ff:fa:8a:f1:a0:43:92:b5:27:53:55:54:c5:5f:cb:a0:
77:ac:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:43:52 2026 by rpki-client