Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: snm1jclNBAci3nOWnCN44Vfu7IrbWY9a8LNrP0zEt2Y=
Subject key identifier: 0B:2B:D4:E0:00:5D:EB:F2:09:34:E7:B4:B7:D7:19:8A:A5:6C:71:E5
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 019D3940E5637E08B0E41F01AA89B319276A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1637
Signing time: Sun 29 Mar 2026 11:00:47 +0000
Manifest this update: Sun 29 Mar 2026 11:00:47 +0000
Manifest next update: Mon 30 Mar 2026 11:00:47 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: Hi9NhxkDj/duQ3V4Ais5x6ezmPw/k0A1I+bOXI1Ei5E=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e5:63:7e:08:b0:e4:1f:01:aa:89:b3:19:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Mar 29 11:00:47 2026 GMT
Not After : Mar 30 11:00:47 2026 GMT
Subject: CN=0b2bd4e0005debf20934e7b4b7d7198aa56c71e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:8c:58:0d:1c:db:d7:5a:ec:30:ae:9c:c9:
17:9e:45:a4:1a:49:ee:a0:cf:d7:50:ea:55:01:c4:
0d:ea:93:a0:d2:63:30:00:b9:db:b3:4e:92:33:d6:
ce:a5:68:dd:58:f8:03:20:c3:e3:40:d3:49:5a:d4:
70:f2:1e:38:1e:62:12:75:d6:a0:3c:5f:76:ea:d1:
e4:89:c2:50:77:38:e2:93:68:72:00:3e:3a:53:41:
b9:9c:de:21:b9:04:45:3e:6b:d2:25:6a:38:1b:06:
8a:3d:84:4d:6e:9a:3c:c7:a9:0c:40:7b:35:d8:91:
58:6e:fb:84:9a:b2:41:56:20:b4:b6:2a:91:b1:c0:
af:e6:1e:25:18:fd:3c:64:be:f9:0e:78:9e:51:72:
0b:72:f1:b2:a0:3d:1f:77:51:b5:ae:3e:89:01:50:
2b:2e:f1:bb:b5:a6:71:0b:cd:3a:9d:fb:66:b4:e2:
8c:5c:23:68:cc:57:56:7d:34:b4:96:f1:e8:7e:11:
85:d5:fc:ab:1c:25:95:b5:81:01:07:31:5d:a3:ba:
49:6a:24:c5:fc:3c:35:51:4e:c2:9a:91:79:58:00:
21:8a:df:2f:46:4a:85:59:a8:d7:c4:6f:cb:a0:3e:
f3:f1:48:2c:6e:45:08:9e:cc:86:76:ed:25:3a:85:
18:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2B:D4:E0:00:5D:EB:F2:09:34:E7:B4:B7:D7:19:8A:A5:6C:71:E5
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:64:e7:45:3d:c2:c2:0c:6e:8b:71:c5:aa:4b:34:89:0a:51:
74:c1:70:68:02:46:74:c4:62:37:3d:61:72:63:26:b2:b7:b8:
97:ab:7c:10:ee:d2:aa:a7:98:19:88:e0:7d:0c:f5:0d:ae:30:
18:4e:03:74:12:b1:f6:6f:73:be:5f:87:41:2e:47:8e:4b:ce:
6c:37:81:04:b1:6b:62:a3:2b:ea:d7:3c:49:4f:c7:6f:8f:a2:
db:6b:aa:87:28:ba:b5:52:d9:0c:c4:fe:97:98:7a:de:6e:03:
38:30:22:8c:cc:d1:a9:50:69:11:78:a1:7a:7f:74:e0:63:4d:
cc:9c:d8:23:3c:85:35:90:63:b0:a1:ab:af:e9:90:a7:bb:3b:
f2:e0:9b:71:80:06:16:b0:05:24:30:bb:f2:45:19:5e:d3:4c:
41:71:de:a9:e1:1e:95:08:da:fc:5b:02:f7:a6:3e:5c:e5:b4:
f0:03:7b:6b:ac:68:99:22:92:62:02:54:7e:c3:a6:4e:b5:97:
b2:4e:2b:57:1b:0c:fc:38:ee:26:da:ba:ca:53:00:d2:19:58:
8a:91:5e:93:21:36:2c:e1:10:00:45:12:48:b7:67:8c:00:2c:
cd:01:10:d9:87:a5:cb:f6:af:77:c2:16:0c:f2:04:b8:1d:44:
0f:b1:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:41 2026 by rpki-client