Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: 9EgeLqrR5G0EJ+rhXg0kJ47fRPSiosX+Tk7/axKLWQY=
Subject key identifier: D1:CB:DC:7D:DE:D6:56:2A:FF:C1:7F:2F:17:EE:1C:ED:C3:F5:45:11
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019D99CFCAEF32520E1227EBA75681D69367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1669
Signing time: Fri 17 Apr 2026 05:00:25 +0000
Manifest this update: Fri 17 Apr 2026 05:00:25 +0000
Manifest next update: Sat 18 Apr 2026 05:00:25 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: FNJPjNmJ5+w3RoXKOVxaq0UcQdwOYYuQJqjqFKufWFU=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:ca:ef:32:52:0e:12:27:eb:a7:56:81:d6:93:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Apr 17 05:00:25 2026 GMT
Not After : Apr 18 05:00:25 2026 GMT
Subject: CN=d1cbdc7dded6562affc17f2f17ee1cedc3f54511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:52:6f:c6:34:c7:ad:0a:09:14:e5:8e:2d:
71:09:48:db:60:60:2d:18:f3:a7:8c:ce:bd:a5:60:
d1:ff:e5:49:3b:df:b0:72:ba:6d:e4:cb:92:70:1d:
c0:22:5d:1c:93:75:26:76:c9:b3:1c:8e:fe:5f:dd:
be:ad:80:54:dd:b2:22:54:8d:c5:73:5c:1b:0a:60:
26:ed:08:11:ae:97:99:62:a1:16:5f:eb:eb:d8:be:
9a:a5:a3:78:87:d7:46:47:e5:f2:07:52:97:d4:31:
b6:78:9b:41:0b:c4:2c:72:97:c5:b5:59:5e:5c:ea:
f5:03:9c:1a:42:65:24:1d:93:12:7d:22:be:f7:af:
d5:51:7a:8a:ff:d4:ed:d9:48:01:41:71:56:b6:8c:
be:73:49:6b:8e:a5:e5:fc:d7:bc:e1:d5:e2:fe:c1:
66:c1:b9:84:ff:50:09:b3:5a:b7:30:cd:e7:e3:70:
7a:87:5a:e8:07:16:7c:10:e3:35:db:1c:b5:f5:f1:
cd:d7:3a:5c:6d:29:8a:8f:be:40:10:9a:57:e5:ba:
a9:7a:e5:f5:80:30:46:83:a7:2f:44:f8:04:22:d5:
0a:9d:ba:7e:cf:38:cd:56:ee:c6:43:5a:69:96:81:
55:ee:c3:ff:fe:43:50:ac:77:d1:18:7f:15:7b:38:
97:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:DC:7D:DE:D6:56:2A:FF:C1:7F:2F:17:EE:1C:ED:C3:F5:45:11
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a3:13:30:e2:45:c5:3d:b8:54:7e:07:f2:9e:26:61:e0:1f:
b3:c8:4a:40:33:5a:67:28:59:e1:fa:db:26:c9:5b:c3:34:cc:
56:b5:68:46:bc:69:a0:fd:1a:ac:7b:ef:2d:34:21:e0:18:bb:
22:48:a9:57:7d:53:a8:43:88:af:62:bb:2b:c5:8a:1a:b4:cb:
e2:ad:e9:62:7f:a1:1b:9f:e0:a7:94:de:48:b9:3d:20:b3:b4:
68:c6:16:e0:c1:79:9f:a2:7e:a5:36:06:4d:72:ed:95:fb:b9:
23:e8:33:cb:39:64:87:22:b0:4b:9d:ba:d8:17:a2:75:cb:5a:
16:77:14:81:74:63:54:29:9a:78:fb:cc:e4:f9:98:60:f3:cf:
aa:00:ac:89:68:ef:6b:6f:8d:86:2a:f9:fb:ff:73:fd:26:37:
98:e2:5c:0c:5f:32:73:44:07:2d:f6:0b:00:bc:0e:87:2e:6b:
6c:35:af:d5:0f:a1:0f:8b:69:a9:64:05:c8:89:11:12:56:82:
71:8c:55:b7:00:00:3a:62:93:02:9b:a9:94:da:0a:ae:29:84:
46:45:78:e0:0c:57:d9:03:7f:10:bd:40:47:05:64:8f:6e:35:
e9:b3:9d:b9:02:9e:f6:d7:3d:41:4c:cf:69:81:87:6a:10:3b:
5b:ad:4a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:54:07 2026 by rpki-client