Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: DDl4mVRQW88kG8klALRKawdyNxZznSgPb2fhIDfVdZU=
Subject key identifier: F8:19:07:41:55:92:78:1C:E5:5D:04:6E:F7:97:B1:18:9A:49:9D:42
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019CAC479B78A474E7696B13E89B7E5E9537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 02:01:39 +0000
Manifest this update: Mon 02 Mar 2026 02:01:39 +0000
Manifest next update: Tue 03 Mar 2026 02:01:39 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: Fsb3IuVNEZDCzcGWBoNkstQHiTNUsqLjK6wuAD1WYcI=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:9b:78:a4:74:e7:69:6b:13:e8:9b:7e:5e:95:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Mar 2 02:01:39 2026 GMT
Not After : Mar 3 02:01:39 2026 GMT
Subject: CN=f81907415592781ce55d046ef797b1189a499d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8d:1a:1c:b8:a5:d2:e1:aa:00:e4:a1:a7:90:
71:ae:a8:db:0e:ae:ca:e6:cf:3f:26:cc:36:a5:5b:
55:1a:bc:8c:86:6b:e4:9d:97:e0:d2:14:43:2d:d3:
da:c1:0e:e8:47:96:03:73:88:ed:1d:d2:87:63:29:
10:24:d5:ec:ef:a2:45:ac:7c:a2:cf:6e:95:a6:81:
02:de:3d:d1:a9:8f:da:36:88:9c:cd:d8:f8:8d:da:
82:bc:d4:6f:5a:03:d7:21:20:ad:c7:0b:68:51:da:
a4:b2:b0:81:a8:ee:12:cc:06:93:fe:6b:4d:ae:a8:
6b:93:42:e9:11:62:3f:59:16:94:d5:df:e7:c2:1c:
49:de:1b:7f:ba:0f:91:e6:69:56:67:e0:4b:2e:fc:
2a:d6:95:8b:70:f4:ac:8e:7f:7f:f4:aa:0e:53:94:
09:6e:bd:fd:3e:70:04:2c:04:50:97:f0:2d:0b:a8:
1d:34:33:7d:96:20:ba:b7:eb:de:a4:b4:db:fa:6b:
5e:e9:1b:f9:e0:4c:cc:64:d5:4a:e6:12:b8:9c:9f:
37:ab:02:91:98:e6:8f:2c:bf:5d:23:3a:ae:11:bb:
f7:03:9d:45:5c:ab:88:cc:3b:4c:b7:a0:e7:22:78:
83:2a:bd:15:d5:30:21:ee:9d:4b:ae:cd:f8:4e:48:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:19:07:41:55:92:78:1C:E5:5D:04:6E:F7:97:B1:18:9A:49:9D:42
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a1:5f:06:a4:cc:0d:05:11:0e:0d:ca:ce:02:bc:7e:f0:5c:
53:09:d0:ff:81:f1:90:13:5e:71:75:bf:fc:67:83:3f:4a:9a:
cd:0a:25:b7:16:4c:87:bc:a3:61:28:51:61:8d:87:f9:ca:23:
c9:7c:ba:c8:24:e0:34:c1:d5:50:e4:ae:bd:75:f5:49:75:81:
0d:65:56:02:47:3e:57:c7:f7:4c:a4:02:86:11:74:90:45:d7:
b6:90:4e:cd:25:bb:99:8c:01:48:dc:54:17:a6:7b:8e:9a:a9:
13:55:65:7e:3d:27:6c:3b:73:ad:96:3c:88:c5:8c:c2:76:89:
87:ac:e4:e0:be:20:d5:f5:12:f7:15:a4:f2:ad:0f:4d:5b:c4:
b7:d8:4f:34:7e:e1:fd:bc:6d:b6:bf:b8:8c:d0:22:46:02:c4:
e2:47:84:f4:35:29:43:3c:81:4d:94:4e:e1:36:d9:c1:d7:14:
3a:50:8a:f8:e2:87:72:d7:3d:1f:20:ba:71:ef:bb:73:d3:d5:
dc:6f:3f:32:bd:0d:c3:c1:d1:d7:0f:fd:51:20:f5:b4:e7:27:
50:82:a4:33:29:38:30:7c:3b:00:1f:65:7b:28:25:b1:82:e9:
61:50:14:2a:73:13:a9:a1:00:a1:72:06:0e:e4:95:06:e6:8d:
a8:b6:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:25 2026 by rpki-client