Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: ODyrJRa54Hu8l5yVBtfj+P9f02FnanwzJb6rcEjLdqU=
Subject key identifier: C2:26:48:A8:4B:E4:6F:EE:B9:33:87:40:3D:F2:91:4D:98:8E:7A:77
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019D25F14AF295503D6F7753096560D8F403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:03 +0000
Manifest this update: Wed 25 Mar 2026 17:01:03 +0000
Manifest next update: Thu 26 Mar 2026 17:01:03 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: nzEv2LI+THr+VS9dGT1WhFlILdNvyTki5vXbjJpU/Dw=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:4a:f2:95:50:3d:6f:77:53:09:65:60:d8:f4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Mar 25 17:01:03 2026 GMT
Not After : Mar 26 17:01:03 2026 GMT
Subject: CN=c22648a84be46feeb93387403df2914d988e7a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:71:01:c6:46:ce:0a:c3:04:94:af:8f:5a:86:
db:e3:e8:b0:b7:1f:e5:88:a9:5b:e0:18:a2:5b:70:
6d:1a:20:a0:ab:22:aa:bc:f1:41:ed:c4:61:c3:16:
3a:2a:f7:69:4e:9b:14:90:b1:3f:74:65:5d:48:08:
7f:8d:fc:dc:d4:24:bd:08:f5:c7:e4:84:e8:7f:8d:
e9:38:52:9b:1b:a1:63:3e:e9:06:62:94:2c:d9:f2:
c1:0c:e4:88:0a:72:2a:ef:6a:10:86:e4:87:75:f8:
8a:dd:96:79:bf:dd:48:e9:ae:0f:6d:dc:ca:1f:6f:
53:a1:f3:cb:91:ca:dd:7d:db:30:8a:a2:cb:23:0d:
ea:13:f3:b3:69:3f:af:0d:81:c1:e4:1a:10:12:f0:
12:3f:42:bd:7e:e2:ba:cc:ad:ce:72:e8:0c:e3:07:
64:80:4f:80:06:fe:80:2d:37:10:5d:db:30:a6:cb:
1b:6b:d6:6a:de:2f:5a:f7:22:85:47:c2:3d:8f:86:
4f:77:b6:95:90:53:4a:33:15:57:64:40:46:54:de:
b9:20:1e:e6:ee:7e:67:62:8f:e5:6f:b6:42:f1:ba:
ea:53:14:9e:fc:0c:dc:af:30:c1:01:b0:4d:c7:c3:
5e:92:8b:1a:ca:b2:2e:d5:87:ae:d7:e7:39:49:82:
28:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:26:48:A8:4B:E4:6F:EE:B9:33:87:40:3D:F2:91:4D:98:8E:7A:77
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:35:79:c1:0b:61:1d:a4:1e:10:64:39:3f:01:d0:c6:95:d6:
ae:9d:ff:35:0f:fd:11:9c:9a:c2:03:0c:e3:57:14:3f:a2:7b:
b3:d1:f1:2f:77:9e:dc:e0:4c:6b:8e:14:6e:0f:31:c8:4b:79:
33:ae:d9:b5:29:85:61:fc:35:67:f2:25:ed:86:cc:75:72:a0:
14:da:ce:c6:bf:5a:88:8e:71:1a:8d:71:08:03:ae:c7:d1:12:
09:3b:7c:d6:3f:ef:18:dd:ba:f5:40:d2:af:5e:7a:61:f1:96:
7a:65:72:fc:90:f3:a7:b0:05:5b:c1:5d:f7:b6:d1:de:9e:61:
d3:de:47:a3:f9:b9:12:a5:c6:98:78:31:ff:1c:e8:7b:4c:6d:
3e:f6:36:95:82:92:11:b6:7b:0a:66:f8:0a:d2:3c:6c:3c:c0:
72:f4:b7:5d:82:40:a0:6e:b9:43:72:ff:4b:f3:9c:3c:8e:82:
10:4a:a0:2e:81:23:7f:49:b0:1f:85:b2:11:bf:e7:5a:21:d1:
e7:f6:05:ec:1a:2d:eb:58:fa:d5:26:19:ee:5d:eb:c4:f8:4a:
89:44:71:ce:e1:68:50:d2:44:78:32:0f:5f:e6:de:21:75:ef:
9a:54:6a:34:d1:cf:0b:69:b5:84:d4:55:1f:15:ba:70:bc:3b:
c1:b8:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:31 2026 by rpki-client