Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: MP9Cm/kLs7M6sshbl9loOUrdILcDqS+pPNRtJVjnFhw=
Subject key identifier: 18:F7:AB:16:E2:48:D1:9F:E5:90:A3:35:26:28:3E:49:83:CA:18:04
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01A129562925A4EFAB71F35D04B9DE4B5FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 05:01:14 +0000
Manifest this update: Sun 11 Oct 2026 05:01:14 +0000
Manifest next update: Mon 12 Oct 2026 05:01:14 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: rp7HIdiT1dY5TYRB5vXaEYU/NruGV9+xqe41bwP0vQM=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:29:25:a4:ef:ab:71:f3:5d:04:b9:de:4b:5f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Oct 11 05:01:14 2026 GMT
Not After : Oct 12 05:01:14 2026 GMT
Subject: CN=18f7ab16e248d19fe590a33526283e4983ca1804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:c5:24:e5:00:a2:3f:66:1e:00:12:c3:8f:
7e:83:64:ca:3c:8e:f1:a5:56:ab:d2:a7:3c:05:b8:
51:70:0b:96:4b:f9:85:4d:fe:f2:ab:12:79:ff:27:
8d:e5:b6:fc:2e:aa:1a:87:97:62:44:9d:7d:b8:6a:
07:f1:7e:77:73:80:a4:06:25:f1:67:39:c9:a0:d0:
15:c5:d3:9a:fe:68:f3:e7:1c:e7:42:7c:81:e9:5b:
51:04:96:eb:18:fb:3b:96:26:cf:b3:38:da:79:e6:
96:e4:17:3a:a1:d3:54:31:09:1b:2c:f3:cc:73:8c:
b5:54:26:9f:f9:6c:6b:5a:f3:84:e3:e0:d7:61:e6:
2a:ff:25:1a:54:91:1b:f4:e6:d7:a8:8e:c9:9d:53:
f0:26:62:05:fc:d2:e6:f4:04:fe:b7:dd:d5:46:77:
9b:86:dd:e6:33:7c:c3:e4:a9:7b:03:ae:35:bb:8c:
c2:87:81:75:2c:7d:62:6f:5e:dc:b9:54:c0:3a:fe:
8f:dd:74:7c:54:54:06:eb:45:43:4c:4f:df:e2:a6:
1d:b7:46:22:dd:18:f4:98:4e:84:7a:d1:cd:93:a9:
a1:9c:8e:6f:45:c1:9d:c5:2d:23:34:3e:cd:e8:22:
c3:87:83:86:26:fb:d4:99:52:d6:06:23:e8:d7:e4:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F7:AB:16:E2:48:D1:9F:E5:90:A3:35:26:28:3E:49:83:CA:18:04
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:21:18:5c:b4:08:05:4a:39:fa:71:19:79:44:77:8e:93:75:
fc:7d:0b:ae:05:10:d3:11:3b:fa:0d:0a:4d:30:18:e1:84:7f:
56:55:7e:b1:3a:92:58:9f:de:8f:57:c7:75:65:98:b3:c1:38:
c3:31:47:6c:46:6b:7e:c4:18:ce:59:9c:33:4b:31:24:f3:27:
30:d1:6a:24:ac:f4:0e:46:5e:d4:23:a1:dd:b0:ad:f6:32:29:
45:b6:7d:a8:7d:7d:41:74:04:d0:7c:53:4d:9d:88:1e:38:0c:
c6:d6:8d:7d:8b:c0:a1:43:be:ac:d7:6c:15:de:10:c7:fa:7a:
17:d3:b0:57:f4:fa:90:04:1c:9a:5a:cd:a6:a0:9f:e8:f5:8e:
31:ad:4f:3c:c9:d3:ff:d8:26:8e:9d:bd:c4:77:85:40:39:b6:
99:fa:42:ee:8f:cf:d2:1a:04:83:59:2f:47:aa:d1:dc:21:09:
19:d4:6c:85:6b:9e:31:1c:e2:00:8e:2e:cf:ae:06:fd:5a:94:
ee:bd:c8:82:3b:a3:44:d9:c9:67:70:6c:c8:fc:78:ff:e8:fe:
9a:68:d3:02:e2:7a:a9:86:cb:83:d2:a9:c1:86:28:ca:1c:aa:
75:95:1f:25:2e:81:7e:31:02:18:a9:4a:66:ae:05:49:0b:8c:
93:91:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:37:21 2026 by rpki-client