Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: aiY+67Sj3e+gFIt1+15bFNyfUiOPyzTDXk1Hkk6M5C8=
Subject key identifier: 81:29:5A:D8:32:08:9A:6A:B2:18:84:9F:1A:9C:E9:02:63:2A:7F:C6
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019E1D22CD63D64914E88806F956E775B8C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 17:01:20 +0000
Manifest this update: Tue 12 May 2026 17:01:20 +0000
Manifest next update: Wed 13 May 2026 17:01:20 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: S57jjIkNSXX7PsN2nZzXDyK4JVF9TeId4OYGCggWAxQ=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:cd:63:d6:49:14:e8:88:06:f9:56:e7:75:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: May 12 17:01:20 2026 GMT
Not After : May 13 17:01:20 2026 GMT
Subject: CN=81295ad832089a6ab218849f1a9ce902632a7fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:c7:d4:6f:68:33:2a:2b:18:17:55:fa:e5:
63:89:cb:1d:e7:9e:bc:80:95:f3:00:26:5f:38:0a:
bd:b3:c1:a0:c9:73:db:80:2e:2e:14:33:e1:bd:1d:
40:b9:5b:9e:22:e7:90:f5:3e:0b:c0:d3:19:f2:aa:
46:04:c6:24:0c:c7:6c:36:51:53:4e:76:dd:0d:52:
bb:91:c9:b6:6d:28:b1:be:ec:ec:2c:d8:0e:e2:95:
ef:28:59:2b:92:5b:25:c7:d5:bc:f4:a6:de:60:1f:
2f:fd:54:cf:ec:1c:fa:3d:9c:3a:5e:e0:16:4c:45:
82:14:5f:00:74:c0:b3:97:80:ef:c1:c3:b7:8b:2f:
cf:2b:6a:0d:57:32:06:38:62:5a:9d:8d:74:2f:07:
d7:3b:17:43:8f:5f:85:95:9b:a3:88:22:53:6e:b7:
cf:51:c5:0c:52:b5:e9:0e:2e:0c:20:4e:50:7a:34:
85:d5:0b:6a:72:c9:9c:b3:05:94:f4:f7:73:e9:4c:
49:93:50:e1:cd:a6:5a:9f:c1:a0:34:7d:8a:5f:13:
55:6e:81:56:dd:42:d0:39:cf:df:82:8f:00:e8:13:
86:78:6e:14:55:c1:f6:2e:87:e6:ba:5d:55:0f:86:
54:df:da:9f:e1:5b:99:ae:8a:b7:1a:2f:16:c9:76:
46:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:5A:D8:32:08:9A:6A:B2:18:84:9F:1A:9C:E9:02:63:2A:7F:C6
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e2:a7:99:67:41:e5:cc:2b:f6:e1:9f:08:83:fc:39:7f:26:
52:99:f4:f2:60:be:5b:a3:35:03:1a:3b:35:8d:f5:da:dc:33:
8e:e7:b2:d1:61:9c:49:cd:30:60:8a:92:dd:20:e4:9b:58:7f:
1c:9b:6b:c3:45:9f:6a:a8:b8:7a:d3:a3:11:88:71:5b:4d:fe:
a1:93:10:07:0d:b8:e9:94:0e:b1:37:04:d4:be:9c:56:b4:13:
01:b2:2d:f4:4d:2f:e9:28:8e:3e:17:d0:54:ad:fe:ad:49:66:
07:d5:2d:ef:7f:07:31:a2:13:7a:73:f8:8d:11:fa:98:95:ba:
da:ca:7a:54:5e:8f:36:0b:78:1e:c9:14:25:2c:bc:14:6d:8b:
de:4f:38:cf:6e:6d:c9:79:94:f1:b8:c6:3f:d7:9a:e7:22:dc:
e8:e2:e6:88:14:e9:e8:13:22:06:20:ff:b0:f7:5d:c9:0d:a3:
4c:6e:4b:17:0b:55:90:93:e6:f6:26:6b:dc:ae:28:1c:3a:20:
9f:7a:9a:be:16:ab:b3:12:3f:6a:75:22:83:90:9e:79:da:c1:
ba:99:a3:56:5f:47:2b:17:22:3a:af:37:e0:4e:05:3f:4d:7a:
b9:a2:51:8c:41:64:73:05:e1:21:bf:d2:76:72:eb:d9:60:0d:
4c:e9:ef:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:10 2026 by rpki-client