Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: J4ootS3zhirU40kiZ8P0tPXgnZTqraOIGT3RZgemxUs=
Subject key identifier: C5:39:EE:3E:74:CD:AB:30:EB:00:D7:B7:8B:87:F7:08:98:E9:6E:23
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019E1F10BBCD52DE416A09B786AEC5780326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 16AE
Signing time: Wed 13 May 2026 02:00:50 +0000
Manifest this update: Wed 13 May 2026 02:00:50 +0000
Manifest next update: Thu 14 May 2026 02:00:50 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: vINFsFh/SvaY0e0wl+ZRSxrsWlS9kSYDG+bKrNfcBBY=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:bb:cd:52:de:41:6a:09:b7:86:ae:c5:78:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: May 13 02:00:50 2026 GMT
Not After : May 14 02:00:50 2026 GMT
Subject: CN=c539ee3e74cdab30eb00d7b78b87f70898e96e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:57:3b:7a:52:f4:21:57:54:dd:ef:ae:ef:
ed:3c:ee:79:e1:ce:5e:00:2f:12:82:82:02:da:d2:
98:bf:2a:c3:a1:65:46:2c:bb:0f:4e:3d:bd:44:84:
2a:a3:89:47:5d:65:e5:57:6f:c7:5f:ee:4a:0a:09:
6e:26:5f:4f:a7:2b:ee:2e:b2:23:eb:c6:a9:e5:eb:
af:ac:da:56:48:74:c4:9c:ff:44:d6:c3:44:f7:2c:
a6:bb:24:b7:f1:db:d1:8d:d3:2c:6c:e6:fc:24:d0:
8c:91:b1:f1:09:05:47:9d:9c:66:52:ca:49:19:32:
4c:c1:c0:ae:cb:88:03:15:ff:a7:4e:72:97:1d:9f:
2f:c1:5c:7e:58:84:fb:5e:5d:b8:6a:8c:24:52:80:
9f:a8:01:15:50:59:f0:4e:16:7c:aa:a6:21:86:8b:
d6:ca:24:84:be:c9:43:74:d5:58:43:67:c0:6f:66:
7c:a5:b9:3b:83:2e:c2:f0:94:bb:1d:9f:39:05:c4:
89:93:b2:77:77:56:32:81:54:cb:4b:6e:a6:ed:f5:
0d:56:d3:2c:8c:04:d5:c0:b9:89:8d:ef:1a:37:ad:
3c:21:11:ea:48:c1:36:24:0d:5f:a8:58:2f:6c:b6:
79:95:45:0f:6b:d3:f0:25:40:96:a5:46:26:aa:ce:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:EE:3E:74:CD:AB:30:EB:00:D7:B7:8B:87:F7:08:98:E9:6E:23
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6e:f5:cc:b7:b7:1c:09:ee:d0:3a:fc:8d:b1:2a:66:cd:aa:
bc:33:48:bc:f8:02:5c:d4:38:ac:2a:c8:0d:a0:b7:69:bf:7a:
e1:aa:4c:ce:e9:c5:f8:1c:af:69:4a:01:87:ce:cd:e8:a0:29:
44:1b:c6:97:fe:60:ee:73:ab:df:d8:a8:5e:09:71:f6:18:c5:
83:84:2e:f5:49:8a:fc:0f:08:6d:2e:c7:1a:51:fc:97:9c:58:
32:1d:7e:25:6e:03:b7:ec:00:ef:9b:48:4a:8d:1a:35:30:80:
01:1c:d8:69:03:b0:19:40:66:a9:14:19:1d:7e:e1:85:3d:ea:
3b:0a:f8:e3:a5:ac:40:4d:02:71:cf:e7:da:04:8b:92:89:79:
c7:4b:37:a7:16:c6:e5:e6:37:7c:d7:f1:c5:f5:fb:31:d1:76:
a9:07:43:a9:af:f8:4e:82:e9:95:6b:eb:7e:99:1c:e7:48:2d:
1c:9f:2b:e4:ae:80:d9:c4:46:c3:57:98:77:b4:8a:fd:30:54:
5f:5a:88:c3:98:27:87:64:91:b7:20:1e:53:e0:21:6c:77:e8:
72:86:c9:81:de:56:44:c0:e0:a7:85:7d:87:a2:fa:4b:fe:b7:
15:c5:ce:fa:e0:d7:75:2e:d1:86:a6:65:c7:49:45:67:11:00:
14:b9:fd:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fELvNUt5Bagm3hq7FeAMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx
MDAzYzAwHhcNMjYwNTEzMDIwMDUwWhcNMjYwNTE0MDIwMDUwWjAzMTEwLwYDVQQD
EyhjNTM5ZWUzZTc0Y2RhYjMwZWIwMGQ3Yjc4Yjg3ZjcwODk4ZTk2ZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHlXO3pS9CFXVN3vru/tPO554c5e
AC8SgoIC2tKYvyrDoWVGLLsPTj29RIQqo4lHXWXlV2/HX+5KCgluJl9PpyvuLrIj
68ap5euvrNpWSHTEnP9E1sNE9yymuyS38dvRjdMsbOb8JNCMkbHxCQVHnZxmUspJ
GTJMwcCuy4gDFf+nTnKXHZ8vwVx+WIT7Xl24aowkUoCfqAEVUFnwThZ8qqYhhovW
yiSEvslDdNVYQ2fAb2Z8pbk7gy7C8JS7HZ85BcSJk7J3d1YygVTLS26m7fUNVtMs
jATVwLmJje8aN608IRHqSME2JA1fqFgvbLZ5lUUPa9PwJUCWpUYmqs5dOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMU57j50zasw6wDXt4uH9wiY6W4jMB8GA1UdIwQY
MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt
Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi
LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA271zLe3
HAnu0Dr8jbEqZs2qvDNIvPgCXNQ4rCrIDaC3ab964apMzunF+ByvaUoBh87N6KAp
RBvGl/5g7nOr39ioXglx9hjFg4Qu9UmK/A8IbS7HGlH8l5xYMh1+JW4Dt+wA75tI
So0aNTCAARzYaQOwGUBmqRQZHX7hhT3qOwr446WsQE0Ccc/n2gSLkol5x0s3pxbG
5eY3fNfxxfX7MdF2qQdDqa/4ToLplWvrfpkc50gtHJ8r5K6A2cRGw1eYd7SK/TBU
X1qIw5gnh2SRtyAeU+AhbHfocobJgd5WRMDgp4V9h6L6S/63FcXO+uDXdS7RhqZl
x0lFZxEAFLn9aA==
-----END CERTIFICATE-----
Generated at Wed May 13 04:11:39 2026 by rpki-client