Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: GqaHaTrLX7zc/AcfWCukAIDiWL+bd1lu3Hat1Q22/WA=
Subject key identifier: 15:64:2D:ED:F1:8C:E8:AC:D9:C6:D5:1E:46:D2:55:50:0B:23:69:19
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01A0ED785E58162D679DE025D4DA0C0FC489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 14:01:23 +0000
Manifest this update: Tue 29 Sep 2026 14:01:23 +0000
Manifest next update: Wed 30 Sep 2026 14:01:23 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: NhceOfzSb4iJKzZJqyb8fMVUWZBTN9CLSqK8SvLbCL0=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:78:5e:58:16:2d:67:9d:e0:25:d4:da:0c:0f:c4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Sep 29 14:01:23 2026 GMT
Not After : Sep 30 14:01:23 2026 GMT
Subject: CN=15642dedf18ce8acd9c6d51e46d255500b236919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:0d:37:c8:44:71:d0:8c:8c:4a:a3:97:cb:
21:26:a0:2f:f1:9d:28:20:95:58:b0:20:ca:86:41:
ce:69:0f:96:4d:78:76:ff:e6:d2:24:78:12:49:00:
9a:2a:0a:d6:fa:fd:33:43:92:a8:a5:48:87:06:74:
f3:6f:d0:b1:48:16:1c:41:fb:fc:34:40:21:38:de:
5d:a9:d3:b7:06:76:0c:67:f5:fd:29:84:f2:12:5e:
aa:e2:4a:bd:cc:80:6e:a2:1e:00:eb:e3:5a:bd:69:
c9:51:c9:8d:9c:9d:42:0e:bd:05:30:98:0b:51:d9:
38:01:83:eb:36:cf:f5:dd:a4:b8:90:aa:ec:41:c8:
f2:0f:da:f8:8a:76:20:b4:d4:c4:57:5c:ce:61:67:
a3:45:f2:0d:fc:c2:93:51:a9:4f:b5:b3:d3:fa:ca:
c0:9b:2f:ef:1e:d6:9a:88:8c:b1:1b:ce:4e:7a:12:
7b:4e:90:58:d2:19:65:f5:d1:79:a8:0e:14:12:cd:
35:7b:20:7c:ee:09:9e:91:1d:6e:e1:c8:8a:8f:32:
19:48:47:1f:c5:8a:ac:a8:f7:61:95:47:cb:3c:0e:
7d:41:95:63:36:b9:32:bb:73:09:1b:92:1a:a8:dd:
19:8d:02:2f:e3:80:6c:59:fe:c4:67:02:ac:e9:fa:
42:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:2D:ED:F1:8C:E8:AC:D9:C6:D5:1E:46:D2:55:50:0B:23:69:19
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8a:bb:e8:4b:57:47:c8:5f:9a:bd:af:e8:29:d5:04:fa:72:
9a:eb:d8:e9:b1:d8:96:af:35:a6:41:22:f4:bc:a4:87:e3:df:
93:37:37:6f:4d:c9:14:2f:f7:93:c6:c8:96:8a:41:bf:0a:a1:
81:6f:7a:0f:30:35:fe:8d:74:99:5a:16:e3:d3:14:9a:5d:dc:
0f:b1:4d:26:b2:06:66:93:ab:74:61:a6:a2:9d:03:a3:49:39:
12:69:cc:87:49:25:a9:71:19:a3:26:9b:fc:7f:ca:b8:82:4a:
b6:fb:1a:47:b1:89:84:b9:10:f6:8d:75:c6:2e:98:b0:43:09:
cd:b6:ce:6e:8a:c5:ab:e9:10:c2:63:cc:fc:1a:48:a3:b6:1e:
6f:a6:41:d6:b1:eb:78:84:1a:93:80:c8:50:4a:f3:51:f1:7f:
ce:e9:c4:34:4d:ff:32:21:f8:dc:92:ac:3e:2d:21:94:dc:89:
e0:b5:b6:d3:dc:c0:09:a1:56:d6:66:ac:98:0f:4d:97:4e:09:
e0:38:0e:bc:aa:a3:d4:a7:6d:de:09:c4:d3:d2:23:87:ea:a9:
56:d2:ea:bc:b3:6c:c6:e4:e8:b9:0f:bc:84:52:12:13:2c:a6:
57:fc:4d:2e:37:1e:51:3e:c1:f2:89:01:4e:20:f3:b6:8e:21:
a3:2b:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:49:34 2026 by rpki-client