Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: iEfWgvDCSYIvJR8FR/WTsej9Vc4+ArbjsJ4eDLzhSPk=
Subject key identifier: 60:9B:83:B8:CE:69:3C:37:D1:6A:90:2C:20:5B:15:FA:5E:DA:48:A4
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019E2AA70FCBCDB1E33D814F7C093078CA0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 16B4
Signing time: Fri 15 May 2026 08:00:51 +0000
Manifest this update: Fri 15 May 2026 08:00:51 +0000
Manifest next update: Sat 16 May 2026 08:00:51 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: ljy7oLHwDbGc233qECsppcOBN1PgLwiZYd70J/u/+cw=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:0f:cb:cd:b1:e3:3d:81:4f:7c:09:30:78:ca:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: May 15 08:00:51 2026 GMT
Not After : May 16 08:00:51 2026 GMT
Subject: CN=609b83b8ce693c37d16a902c205b15fa5eda48a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:86:39:aa:90:8e:b4:86:2a:1c:0a:ae:5e:
cc:7a:b1:4a:1e:63:8f:46:db:1d:07:59:6b:cd:04:
ee:a1:64:a1:85:57:4d:fc:0b:12:e2:50:90:73:ea:
68:84:63:25:c0:da:6b:1a:77:4c:3c:d7:e1:7e:fa:
18:14:cc:e2:7c:28:c5:85:04:2b:2d:2b:e1:09:34:
4e:3f:50:21:54:04:3b:75:c5:d0:8d:dd:4f:b2:d7:
5f:0a:e1:0b:a6:43:b8:3d:23:cf:57:6c:6f:80:2c:
d4:53:eb:c6:58:35:72:c2:a5:1d:9b:7b:55:c3:71:
ef:f2:08:37:77:5f:39:d3:33:61:ba:a5:2a:b5:10:
e7:eb:51:61:97:00:99:72:81:4c:6d:0e:9a:eb:07:
97:19:d5:6e:cc:03:19:db:44:a5:2e:64:64:8a:a3:
74:19:e1:85:79:5c:a0:96:a8:c3:4e:f7:fe:ea:a1:
57:16:b7:8a:ac:d8:48:b6:ff:45:df:72:5c:7f:e3:
8a:9b:47:38:0c:b7:4c:c8:10:12:44:72:2a:92:b8:
12:eb:d9:68:be:98:20:d8:74:14:d8:9c:6b:a3:5f:
68:a9:26:ad:28:53:cd:35:e3:70:4e:86:44:d2:54:
9d:3d:24:3e:95:84:be:db:54:7e:1b:8a:6a:0e:f7:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9B:83:B8:CE:69:3C:37:D1:6A:90:2C:20:5B:15:FA:5E:DA:48:A4
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d3:1d:93:5f:8e:95:d0:49:55:5a:c3:ab:c8:7e:fa:3f:51:
97:44:a2:69:12:81:19:20:76:45:d9:68:0a:e4:86:39:9d:6c:
45:46:68:b5:47:01:97:b0:6b:f4:78:b9:ff:9d:2d:de:00:60:
3c:56:9d:7d:46:62:0a:13:bf:de:d6:4a:a9:58:14:6a:26:a3:
2f:e5:2b:04:d1:cc:7f:90:67:33:1e:83:ab:ff:82:a3:e6:00:
d6:bf:30:48:f9:a3:f9:38:de:70:7b:7e:bb:fb:ff:0a:71:d5:
cf:d4:23:7b:ca:07:6f:c2:e6:14:df:1d:e5:c1:7e:a1:b8:59:
96:4b:f6:66:2f:e3:53:be:dc:bb:1e:97:de:21:66:d1:73:b0:
0c:9c:8b:e2:d1:92:de:53:5c:c3:83:13:5b:1c:5e:95:1c:5c:
9f:2a:a0:92:86:74:11:2c:b5:61:75:26:6c:94:ef:9d:c0:b8:
6b:61:5c:1d:81:d1:94:e2:fb:35:28:89:68:b1:bd:72:0e:2c:
dd:64:3a:77:81:21:af:55:bd:f7:a6:f7:a9:89:77:9c:d3:1e:
27:b2:d3:b9:64:41:bc:fe:55:e3:4d:b7:69:3d:d8:ed:48:de:
2f:b4:e6:03:38:12:6e:13:d6:77:f1:d7:dd:25:56:0d:3c:a3:
11:84:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 14:25:17 2026 by rpki-client