Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: DFGjryfOw98POLBEYKOMg1a/2YzwotuNZvlLiMh7ftc=
Subject key identifier: D8:B0:13:08:39:72:CF:37:A7:1E:87:6A:8F:84:C0:5C:FC:06:4A:CB
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019F1454785C2CA82D4DE6315E48C912AA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 172D
Signing time: Mon 29 Jun 2026 17:01:47 +0000
Manifest this update: Mon 29 Jun 2026 17:01:47 +0000
Manifest next update: Tue 30 Jun 2026 17:01:47 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: Ty0w50vUPgbBsdts9BkapcwSTs7BVQqH+Dskogo7dLQ=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:54:78:5c:2c:a8:2d:4d:e6:31:5e:48:c9:12:aa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Jun 29 17:01:47 2026 GMT
Not After : Jun 30 17:01:47 2026 GMT
Subject: CN=d8b013083972cf37a71e876a8f84c05cfc064acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:68:56:9e:cd:18:53:6f:df:18:d5:1e:80:
e7:23:db:ed:9e:b1:64:7e:32:45:e1:cf:f0:07:81:
30:04:ab:27:b9:2a:f6:7e:4c:ac:e5:fb:35:cf:22:
9a:15:8d:69:c7:85:d8:23:b1:76:df:bd:f2:ae:7a:
3e:11:87:b1:f1:4f:7a:25:17:29:07:f3:f7:0b:0a:
56:a3:0c:5e:cb:6f:5e:30:06:ec:0b:4c:0b:54:4e:
94:76:58:db:6f:9e:92:45:f7:90:1f:ed:dd:72:4b:
b9:ce:b7:65:86:25:59:00:3f:7d:94:07:ab:c6:2d:
b0:05:eb:41:9d:7e:e6:b3:2f:27:9a:e5:b6:ea:a6:
34:92:85:1e:f4:ea:b4:63:43:ae:4a:de:e0:53:e0:
d4:43:6c:a6:09:ff:b0:b8:04:c7:d2:94:16:91:31:
ed:c6:f6:75:1a:19:13:40:dc:94:7c:a1:7d:ea:87:
bb:78:4a:14:ad:0d:b1:1d:4f:cf:20:0b:10:72:4c:
06:d9:2e:5c:e3:63:26:49:c6:46:4a:d2:f6:93:cf:
a5:02:b9:e5:62:8f:5d:c3:0d:06:11:d4:b8:e5:05:
da:99:ad:25:20:2c:13:af:a2:91:74:ab:90:06:25:
fe:47:20:04:53:11:6a:27:5e:99:d6:44:41:fb:00:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B0:13:08:39:72:CF:37:A7:1E:87:6A:8F:84:C0:5C:FC:06:4A:CB
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:e0:da:1c:3e:08:3d:36:b1:10:3d:5d:4d:05:ad:9f:96:
4a:6d:bf:f1:cd:4c:ca:81:a6:46:f1:8e:37:51:46:34:f9:db:
97:29:ff:bc:a4:f0:8a:34:e5:58:f9:8b:ce:d1:b7:04:dd:70:
13:d5:c2:1b:e0:6e:3f:f1:9f:a5:10:a4:e8:2a:5b:d4:50:59:
32:2a:73:9a:f7:77:72:d7:3c:28:43:e1:df:b1:4c:fa:1e:33:
0f:7b:19:67:6f:4c:1e:81:a7:13:9a:a2:59:dc:71:e8:0e:cd:
3f:70:2f:d5:68:f8:0d:ac:6c:5c:97:4b:bf:d7:3e:c9:45:58:
b4:07:d3:18:9b:29:1c:7e:d6:52:2f:c9:7b:11:8d:dd:ca:12:
f3:5c:00:6b:84:22:29:35:cb:cb:36:c6:14:28:48:7d:39:7c:
f6:69:49:15:af:0f:56:57:aa:0d:fc:c9:d3:fa:b4:d5:4e:59:
97:f1:f8:1c:37:d0:2f:2a:35:44:d8:b7:42:09:2c:0e:74:56:
08:b2:fb:d2:f5:4e:f2:98:d0:8e:2d:bd:60:d6:3c:b4:60:ec:
c6:62:73:77:99:27:d4:67:ae:55:47:0c:9a:dc:9e:ba:b7:2b:
59:e3:12:ca:93:68:32:ad:3d:0a:eb:77:a8:8d:15:8a:23:fb:
84:93:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:36:24 2026 by rpki-client