Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: HFwJoJRF6CVMOUuyVjBsJLIISJZnkYB4ZlC0x69ks2U=
Subject key identifier: A7:29:B2:74:20:88:0F:B0:45:FD:5C:A4:99:CF:9B:BB:E1:99:4B:0D
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01A001DD06DD479EC1C5DA199ACA7531AC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 17A8
Signing time: Fri 14 Aug 2026 20:00:57 +0000
Manifest this update: Fri 14 Aug 2026 20:00:57 +0000
Manifest next update: Sat 15 Aug 2026 20:00:57 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: 1P+LwC5HvjW4/nDkvVKIsuZmLeG06vj7x5Ka+wm0CXM=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:06:dd:47:9e:c1:c5:da:19:9a:ca:75:31:ac:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Aug 14 20:00:57 2026 GMT
Not After : Aug 15 20:00:57 2026 GMT
Subject: CN=a729b27420880fb045fd5ca499cf9bbbe1994b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:88:4a:55:41:ee:70:f2:21:54:2e:a1:a9:26:
e6:06:e3:87:9d:19:76:e7:05:fb:17:c9:c1:96:6e:
4a:f7:e3:8f:64:2d:f9:8f:6e:13:f5:c8:66:3c:80:
91:43:f9:86:ec:4d:15:15:2e:18:97:32:0a:82:e7:
18:22:61:f2:be:f3:13:39:74:d5:66:8e:ba:4b:38:
a9:4e:4d:24:b1:e0:c9:83:ad:92:87:c9:0a:67:01:
62:97:ab:02:cc:ef:83:01:ec:2d:62:9f:5b:4c:b3:
97:1f:4d:dc:cd:fa:38:89:b2:fb:9f:15:4e:48:d0:
86:47:44:71:f3:15:3f:d3:b3:2b:2e:14:af:af:55:
2a:f7:6f:28:b6:4f:af:cd:0d:f0:91:8a:38:1a:cb:
29:78:72:53:e1:5a:fc:72:61:cc:a7:cf:5f:d7:23:
6a:57:06:db:4a:a0:a7:f1:26:87:a5:9e:e5:16:73:
bd:20:1c:4f:ea:15:2a:de:3d:8f:55:71:78:dc:62:
0f:be:c1:27:22:17:e7:f0:d2:4c:d9:47:ee:a2:46:
25:5b:96:fb:5e:68:c2:4b:ef:42:1c:29:57:a9:ba:
bb:a4:58:93:a9:81:e1:52:6d:30:c3:b7:c6:6c:e1:
42:af:5c:08:6a:0e:4b:cb:d1:6b:54:ac:56:68:7d:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:29:B2:74:20:88:0F:B0:45:FD:5C:A4:99:CF:9B:BB:E1:99:4B:0D
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:0f:36:ab:3b:cb:7d:b2:bb:db:4c:dc:6a:4f:c3:70:87:
74:1a:83:11:5a:80:50:8b:ca:06:7f:91:1f:fb:7b:03:ab:21:
45:61:7b:36:af:3d:6f:00:30:c3:8b:fc:3a:37:1f:6f:bf:a9:
34:c1:49:e2:71:b4:af:55:4c:55:f3:d7:6f:ef:29:5e:bc:c7:
2b:89:d7:6f:24:2a:e3:49:e3:ba:9f:6e:4d:e1:98:d1:ac:d9:
7c:e4:67:3f:b6:a7:5b:78:04:46:15:99:01:a9:64:5c:e8:6a:
fe:72:8a:cd:ae:e1:11:c5:73:75:1c:cb:d2:91:e8:6a:ac:9e:
2e:51:49:fe:e8:7b:1d:85:32:fe:e0:90:bd:49:62:6b:b1:72:
88:43:d8:be:ee:b4:27:2c:f7:ce:5f:a1:04:4e:bb:e8:09:5c:
2b:2c:f6:6c:6b:b0:6a:0e:20:66:b7:ed:f1:00:f0:a4:ae:ad:
f9:72:e6:d0:e0:31:f6:c2:b1:ab:1b:59:91:a7:09:20:91:be:
14:80:7d:60:69:80:04:5a:4f:c4:15:e8:1c:6c:8e:80:04:d2:
79:cf:c2:c1:49:8e:1c:1c:8f:6a:14:ac:ea:fc:57:44:e4:f2:
fa:ec:5c:28:cd:1d:28:73:7c:e5:db:d6:bd:53:81:86:70:56:
44:7f:cf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:24 2026 by rpki-client