Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: 1t9OkxOO/BxYCJWNPzq70KZ0WYzO9sBqClOyK1IryhM=
Subject key identifier: D5:84:9B:6F:59:D7:85:68:D9:AD:4A:1A:90:1C:BC:D2:40:A3:0B:6C
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019EC148C97D241A4BD73D508536C18E05BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 14:00:33 +0000
Manifest this update: Sat 13 Jun 2026 14:00:33 +0000
Manifest next update: Sun 14 Jun 2026 14:00:33 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: YS8DN7lM6rfhouShxYuPXVufRKIR1xo3zAMPH8OQNds=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:c9:7d:24:1a:4b:d7:3d:50:85:36:c1:8e:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Jun 13 14:00:33 2026 GMT
Not After : Jun 14 14:00:33 2026 GMT
Subject: CN=d5849b6f59d78568d9ad4a1a901cbcd240a30b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:ff:bb:df:99:0f:e9:bd:4a:df:2b:8f:68:
20:8b:44:59:b0:74:74:db:47:39:f2:7a:36:0f:f5:
6c:6a:9b:59:cd:33:54:06:8b:24:53:c9:4d:e6:f5:
5b:78:90:4f:86:e5:31:47:d7:2f:db:34:54:bf:f8:
43:7c:9d:ad:64:f8:bf:85:f5:30:69:29:3d:64:a6:
79:29:b8:af:93:10:c5:c8:62:bf:1f:fc:c3:04:2a:
06:d5:34:68:d2:dc:84:d5:a0:de:72:f3:e1:90:38:
9e:15:63:83:67:51:de:00:11:78:cb:2d:9a:7b:07:
12:65:bc:ce:50:6a:68:50:2d:11:0c:2f:19:46:74:
07:ad:5f:20:71:a6:6c:d0:65:c4:27:d4:df:45:b0:
94:b9:a9:50:bd:1e:04:61:c1:cb:d3:53:21:cd:ad:
66:52:4c:69:50:23:ec:37:be:04:0f:22:be:66:ff:
7f:8e:7e:68:5c:48:d6:0d:28:a0:34:28:89:13:56:
62:5e:92:d4:1e:a4:e8:eb:15:cd:29:a9:69:8b:3f:
6d:ea:b9:e3:bf:67:c4:83:55:55:8c:59:44:aa:f6:
b1:ab:1f:f3:fd:ae:fe:42:9c:89:c3:cd:3d:c7:5a:
57:5a:46:85:5b:c5:ff:73:0c:78:a9:5c:23:ed:dd:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:84:9B:6F:59:D7:85:68:D9:AD:4A:1A:90:1C:BC:D2:40:A3:0B:6C
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:38:f5:04:ea:40:29:6b:03:ae:a4:7b:04:1f:8a:05:fe:
19:ab:ad:b1:9b:fe:5d:13:1c:a6:0d:ce:d5:43:ee:d0:68:c4:
5f:fa:38:8f:ae:c0:71:5a:ec:c2:83:0d:ab:d7:99:fd:e1:50:
44:18:f2:06:95:45:4b:eb:27:03:8b:ac:83:69:6d:f0:1a:d4:
4b:30:a5:07:c5:e4:7f:c5:c2:3b:f1:f7:4f:74:81:fb:85:92:
f7:b3:d3:1e:42:83:99:81:1e:de:49:cb:4f:2a:f7:e7:61:b9:
fb:a7:10:18:b1:f4:e8:2d:70:a2:66:ac:00:ee:7a:cf:53:b6:
6c:7a:fe:4f:9d:e9:b9:24:6f:49:74:b4:db:bf:94:e7:d4:75:
16:95:6c:0b:86:e0:17:d3:68:d2:7b:9d:e6:ab:0e:4a:d9:7e:
93:a2:f5:84:d4:34:13:c1:22:88:4d:00:20:fd:fd:5a:68:d5:
ea:da:2b:73:84:59:89:9f:ca:7e:bf:69:c5:f7:eb:4e:fa:90:
21:b4:79:32:70:1a:bf:2a:0a:47:f6:7b:2a:82:ea:0c:0c:8f:
e0:2f:ff:9a:66:a2:e7:81:b5:b6:1d:88:f1:11:e5:b4:3e:94:
e9:27:2e:32:bd:c0:3f:dd:b5:81:78:1e:35:b9:82:95:d5:6b:
e0:a6:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:12 2026 by rpki-client