Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: dkPGkCTEHSp/oTTEfmRqIK0TEq+bzsCJyg2kipkf5MM=
Subject key identifier: 16:45:9F:85:F5:B8:17:02:4F:51:15:ED:C5:CA:CB:68:46:FD:90:5A
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01A0C6D8388A819FCC857DBA08659D1E2DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 180E
Signing time: Tue 22 Sep 2026 02:00:54 +0000
Manifest this update: Tue 22 Sep 2026 02:00:54 +0000
Manifest next update: Wed 23 Sep 2026 02:00:54 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: DwekwJ+2gsk86uLo90RSeSPPHbwO0PI4mYAweRn7Yas=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:38:8a:81:9f:cc:85:7d:ba:08:65:9d:1e:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Sep 22 02:00:54 2026 GMT
Not After : Sep 23 02:00:54 2026 GMT
Subject: CN=16459f85f5b817024f5115edc5cacb6846fd905a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:72:95:ad:c8:cb:c4:3d:9a:63:7f:5f:66:dd:
e4:af:06:fd:6d:ff:39:87:12:e8:73:f4:64:9b:b0:
07:7d:ad:b6:9a:19:0c:ae:c1:05:be:07:05:38:0a:
bc:81:c6:c5:2d:f5:27:48:0a:15:c7:0f:b6:8f:43:
01:60:5d:7c:53:5b:84:e4:3c:c0:d8:c6:61:e2:09:
36:ee:2c:e9:6c:1f:f1:a8:b9:e8:6e:46:99:55:fa:
88:3a:c6:af:52:87:6b:70:79:52:68:12:87:9e:58:
9e:a1:bc:94:5a:64:ea:10:8d:3f:3f:ba:25:bc:07:
a0:4a:b6:f7:1d:ea:9e:31:ba:1c:a8:fc:21:92:59:
4e:9e:81:8d:a4:8d:9b:d8:f4:37:33:a6:ce:8e:04:
87:63:d5:e2:9d:d9:17:0c:5b:2e:1d:e1:3e:47:d3:
97:11:fd:e2:6a:fa:03:d9:a7:e2:13:11:77:d0:63:
ee:e7:3e:3a:8e:d3:8d:bf:f6:7e:1d:1c:95:66:f9:
18:55:e6:38:d8:96:b6:61:da:09:1e:31:ab:a1:a3:
4b:30:04:ba:69:9b:68:c3:bc:2e:38:e2:ab:38:26:
a6:84:d2:4b:91:63:2c:cc:6d:98:3b:34:c5:88:60:
fc:33:65:52:04:ea:b8:a9:5d:43:87:33:9a:a6:53:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:45:9F:85:F5:B8:17:02:4F:51:15:ED:C5:CA:CB:68:46:FD:90:5A
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d7:66:10:dd:cc:6e:e9:47:3b:db:93:9e:2c:18:30:42:4d:
4c:7e:cb:5b:07:70:7b:4e:9b:5f:fb:d4:35:7a:f7:c3:33:d4:
a4:73:4c:c7:64:c0:66:27:af:bd:5c:ad:f7:cb:db:9b:e5:cf:
95:f5:22:cd:78:8c:95:89:b9:27:c0:cc:10:0e:90:43:1d:8d:
ea:70:6b:8f:5d:d4:53:ac:d1:28:7a:e9:28:08:ca:e1:d6:09:
62:29:23:15:aa:8f:8d:3f:3c:1a:0d:57:fa:15:65:40:77:47:
50:32:91:94:96:5c:3f:a2:cd:6c:36:44:b9:d9:b6:8d:2d:c6:
98:aa:57:49:0a:b8:dd:e2:67:ac:3b:0f:64:e9:2c:06:91:ed:
5b:f5:4b:73:53:03:af:58:1c:c5:1c:47:d7:c9:b5:5c:40:b9:
a9:c4:01:b5:66:66:b7:18:02:4d:57:fc:0b:6b:1d:aa:a9:25:
3c:f8:35:bd:12:0b:89:fb:c4:46:ce:9d:13:42:2c:3f:09:82:
91:83:f3:35:10:e5:c9:66:82:bf:ec:ac:a2:0d:db:31:fd:d2:
10:28:b3:45:50:1e:98:2f:d1:4f:8b:92:70:81:9f:ba:1e:55:
8e:0f:4c:72:7c:3e:dc:c7:aa:8c:13:90:01:89:c9:7e:52:b0:
4a:cd:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:58:05 2026 by rpki-client