Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: ZkqGnQv9b53dk9yYAxLgZclGjQX+kh4X5N7IDBug5FU=
Subject key identifier: 0C:47:A9:2D:C6:9D:EE:D4:6E:0A:03:AF:43:DA:21:14:F2:06:48:B5
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01A0D26E4BCB2931FDC6C78F19C15BAA7404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1814
Signing time: Thu 24 Sep 2026 08:00:38 +0000
Manifest this update: Thu 24 Sep 2026 08:00:38 +0000
Manifest next update: Fri 25 Sep 2026 08:00:38 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: RB16uLGfIu3mSjTH8kpETbcjSwtecc4a6d9i6hKmJnU=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:4b:cb:29:31:fd:c6:c7:8f:19:c1:5b:aa:74:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Sep 24 08:00:38 2026 GMT
Not After : Sep 25 08:00:38 2026 GMT
Subject: CN=0c47a92dc69deed46e0a03af43da2114f20648b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:77:11:4c:6b:65:b7:24:ec:53:34:f2:56:
cd:aa:f1:f3:40:18:29:ac:53:0b:6e:4d:df:e4:3f:
60:4a:d7:b7:c3:ac:ce:8d:e0:69:40:b7:cf:e1:0a:
c7:17:6e:4d:e2:e5:08:de:3e:16:23:a6:f3:93:1d:
b1:e3:48:f7:e4:76:84:c5:57:24:e2:95:c7:6f:1e:
30:43:c6:52:b5:bd:de:97:b1:94:b6:98:13:b5:9c:
01:ef:b9:96:4c:f9:30:da:f3:da:6f:fe:0a:71:dc:
24:d4:35:08:30:2e:e4:33:e2:78:d0:49:65:8d:9f:
25:5d:64:d1:54:cf:b5:32:50:3a:ef:c1:82:58:20:
e8:79:f5:73:e6:8e:5e:e0:a8:bc:ce:fc:ce:1b:5d:
ed:d6:5c:2e:0b:65:73:28:f3:23:44:80:f4:b8:ce:
34:5b:7c:21:93:21:4a:f5:13:b1:df:38:c3:78:b3:
28:21:af:87:38:8e:2a:de:28:de:d5:ab:45:17:c7:
03:a9:d9:3c:3b:ce:0d:9f:dc:ff:42:a5:8e:50:19:
17:95:7f:d8:1a:7a:92:84:85:71:42:6e:ff:6b:9e:
34:c1:05:6c:ac:96:60:95:0a:a0:8e:41:99:ba:52:
49:cf:a1:11:9f:04:ae:0d:ff:57:a7:22:13:da:27:
75:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:47:A9:2D:C6:9D:EE:D4:6E:0A:03:AF:43:DA:21:14:F2:06:48:B5
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f7:fe:ce:05:79:60:31:85:9a:2e:e6:9a:9d:74:f4:1f:44:
6d:0d:6e:79:65:b8:0a:e0:76:ee:b4:9b:b6:52:65:da:bd:f2:
22:f3:bc:1f:a9:bc:0b:98:a5:01:74:09:d6:0e:d1:6a:23:a0:
ce:40:e8:c4:37:87:df:1a:0e:76:5d:42:be:7d:01:48:20:dc:
e4:6b:50:34:43:7d:25:d4:eb:00:bd:65:60:0f:18:e8:b3:ff:
90:84:bd:6a:a9:f2:b6:7d:f7:ea:7f:2f:1b:c1:29:b9:b3:33:
1f:d3:08:89:8c:36:12:2f:44:3f:cc:23:87:b9:07:1d:8a:b0:
26:6a:2a:70:c2:32:43:c3:9c:88:09:47:47:67:f9:8b:61:d6:
cb:da:b1:2f:32:6f:12:33:c2:b6:2a:8e:78:af:53:d6:d3:c5:
d9:78:fa:f3:c3:36:33:2a:b5:92:f1:df:af:74:9e:ae:45:fd:
d4:6b:ef:39:61:51:5d:e2:7f:12:79:33:a0:9c:09:3d:6e:1b:
4f:95:1f:6a:ac:49:76:f0:f0:9d:af:a0:d2:99:0e:1e:26:5c:
f0:b0:3f:76:ff:f4:97:0b:9f:4c:30:44:86:d8:9d:b1:83:c7:
27:70:6b:4e:3e:b0:5f:9d:22:36:13:f8:5f:a1:29:c9:45:a4:
e2:fd:7e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:39:18 2026 by rpki-client