Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: oAOgKn15BlsQZBXduR/npN2wr606tDnkuD/X2IauUyc=
Subject key identifier: A7:F7:B7:DF:0C:2E:49:84:07:3D:3D:39:F9:C4:CF:23:10:EB:58:CA
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019D27DFF2C29A389F7F2890249DC68CC5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 162E
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: CvOTtIKf/rP5L2QV5C/wcoGJjalJgOwK8pntwDHMdKs=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f2:c2:9a:38:9f:7f:28:90:24:9d:c6:8c:c5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=a7f7b7df0c2e4984073d3d39f9c4cf2310eb58ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:0e:cb:c8:e1:83:62:29:7b:61:f0:c3:7c:
23:ba:11:95:5a:c3:34:37:a1:57:16:b6:a8:58:42:
0c:68:59:76:3d:4c:9c:c6:3a:32:f8:59:81:fe:86:
a7:5c:1a:b5:e5:f2:0b:0e:94:9c:4f:44:8e:ed:22:
21:83:c6:7e:8c:19:3d:8b:87:77:a1:4d:14:8f:dd:
af:ca:72:35:23:35:36:f0:49:49:a9:93:60:aa:81:
76:ed:f9:91:0b:e1:51:f3:fb:ea:eb:fb:20:38:31:
f2:ac:08:eb:14:8a:28:20:dd:4f:e0:ac:86:39:0c:
1b:62:ff:93:c4:2f:c4:df:2a:74:ea:62:f4:2f:a1:
d7:da:f9:09:ac:5e:dd:fd:9a:19:1a:e1:1e:cd:3d:
48:6a:4a:d1:4f:5d:60:57:d5:38:8d:3e:27:43:fd:
48:37:e1:24:46:85:e2:d2:ef:e3:f3:fe:12:c4:8c:
2d:6b:4a:86:a3:4e:5e:14:77:40:d5:ba:5b:4d:1a:
d5:51:49:75:57:53:37:2b:5b:77:66:3a:d1:32:df:
b1:63:9a:b6:97:2d:e2:f8:5e:e4:14:b6:30:e6:5b:
c3:be:1d:27:50:21:c9:43:44:2c:55:42:6b:bc:29:
27:75:df:ac:37:c0:d5:85:10:38:49:e1:eb:0f:89:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F7:B7:DF:0C:2E:49:84:07:3D:3D:39:F9:C4:CF:23:10:EB:58:CA
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:9f:19:ff:e2:b1:ee:22:c5:18:38:e0:fa:87:d4:a1:a2:bb:
bb:56:98:52:bb:0d:22:29:66:d2:2f:5f:df:98:33:06:64:42:
90:9c:2c:d2:7e:ed:76:0d:12:5d:8b:f4:49:ab:20:46:d6:3b:
80:7f:a2:c9:fa:89:53:71:30:8e:0a:73:fc:81:1e:ec:e3:5d:
fd:ec:68:89:67:d2:f9:d0:f2:99:90:e0:85:47:ff:f0:d5:c8:
c8:19:1c:af:49:ba:1e:3c:87:5b:bf:f3:12:a2:74:64:82:ed:
c2:6a:43:78:26:9c:96:cf:66:f3:40:3a:db:73:4e:a7:7d:99:
54:71:ce:c6:0d:08:d2:8a:b3:e3:d3:f6:51:4f:09:8d:d0:4e:
c2:f4:94:68:65:92:2d:bc:bc:f8:8c:f3:a5:fb:72:36:f4:e3:
0d:b9:5e:1d:5a:bc:84:9a:9b:18:2c:2c:e1:4c:e5:90:c4:81:
2d:db:8f:60:90:87:7b:ce:ee:5d:19:bd:a9:de:81:13:01:06:
84:2d:cf:83:0a:3c:3e:3a:75:f6:8c:4c:7c:bf:61:9d:c0:6f:
e8:92:96:7f:d0:c5:59:71:bb:63:e8:81:4e:64:83:8f:73:3a:
52:01:05:01:cb:74:1a:01:11:cf:8d:75:72:15:a5:05:3d:c4:
9c:be:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:14 2026 by rpki-client