Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json)
Hash identifier: TNnFrEQDTywgD/yHnpkMMgHdCmxt7PGT5UxGyxDWAtI=
Subject key identifier: FB:CE:E3:5F:D6:DA:E9:92:5F:F6:CE:91:59:76:05:8F:42:A9:DC:23
Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0
Certificate serial: 01A1295652C75039D753DD7ED446B1373AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
Manifest number: 1841
Signing time: Sun 11 Oct 2026 05:01:25 +0000
Manifest this update: Sun 11 Oct 2026 05:01:25 +0000
Manifest next update: Mon 12 Oct 2026 05:01:25 +0000
Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: VdllMn5TZjhBgbBjuoqGpytawDUKGkOxqwNp8RjBpaM=)
2: OzmaqdbQnEvHxy-Ju3BWJk8RR4A.roa (hash: yuFXsdpmAkFe7AvZipGRLoE1oL8vDwU9WfUvdebaJCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:56:52:c7:50:39:d7:53:dd:7e:d4:46:b1:37:3a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Validity
Not Before: Oct 11 05:01:25 2026 GMT
Not After : Oct 12 05:01:25 2026 GMT
Subject: CN=fbcee35fd6dae9925ff6ce915976058f42a9dc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:f7:17:c7:52:b0:9e:92:0f:41:2f:58:6f:
35:e4:4c:3c:6d:71:f2:56:c9:e7:ec:d2:ac:15:b0:
f5:c2:d2:e1:59:8f:49:6f:40:e8:0e:d7:75:8c:1b:
b3:d3:b3:6a:fd:5b:a3:9d:7b:d6:2d:6c:96:4a:e4:
ea:38:9d:15:8e:55:91:14:f1:83:1e:98:3a:e8:af:
e2:9e:8f:f9:ff:7d:be:af:0d:74:94:69:3e:14:b6:
2b:4f:d0:8f:75:bb:78:8e:a6:69:fb:52:cb:10:bd:
e4:c6:d3:ef:04:e6:77:6c:71:22:d3:c6:a0:cb:b3:
5f:5c:9f:7a:5a:39:56:00:d1:40:22:36:3b:7c:21:
70:80:69:e0:33:ef:d6:e6:ac:3b:da:0f:b8:71:b7:
91:ff:bf:f3:42:a4:c8:91:17:2f:76:33:9a:9a:a3:
0d:4b:68:d4:c1:60:3d:60:d2:cb:6b:e4:51:41:bc:
f8:26:db:58:65:cf:1b:32:b0:89:05:11:cd:84:d8:
0f:d0:fb:e3:53:de:40:6b:30:a4:4d:52:f9:86:cb:
ef:2e:82:e8:1c:90:85:63:4a:2f:f4:14:2d:d7:48:
17:f7:1b:76:32:98:96:8a:27:83:2e:a3:af:f7:c2:
34:47:23:64:96:1a:f7:b8:68:a9:f0:94:f4:a3:fb:
08:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CE:E3:5F:D6:DA:E9:92:5F:F6:CE:91:59:76:05:8F:42:A9:DC:23
X509v3 Authority Key Identifier:
keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ab:74:d5:71:55:cb:ac:a6:c0:72:16:c9:e6:a0:0f:27:04:
6c:21:97:22:d2:6c:b7:07:96:40:94:10:fd:8f:9c:ce:68:86:
fb:36:f4:3b:19:cd:74:12:6d:a1:bc:72:06:e8:79:87:72:cf:
40:a5:f1:3c:23:59:11:5b:f5:4e:7c:74:0b:6d:ca:06:63:07:
65:27:b5:56:35:b8:14:bb:08:cb:a9:78:36:97:d6:9d:20:36:
e7:12:51:68:b4:b9:f2:cd:d8:18:61:be:cc:e9:2d:a8:3f:2f:
dd:e7:12:f8:3d:0f:ff:57:71:b1:24:94:b2:79:99:27:ba:1c:
c1:1e:0e:74:6d:37:ca:1e:4f:e1:c7:36:5a:74:a9:d7:ae:ba:
73:6a:cc:64:86:f8:92:d7:3f:a4:f4:cf:7a:22:10:aa:d1:0c:
5a:95:e4:dd:07:6e:0a:02:a4:e2:6b:9a:ff:ad:bc:55:fc:f2:
f3:4c:11:40:be:42:94:26:17:3e:e8:9e:a6:17:ad:17:97:2c:
fd:de:a6:83:93:b0:9f:d8:9e:22:c4:9a:25:f2:1e:30:a1:96:
df:fe:53:4c:73:ec:4c:b9:df:28:b0:c7:13:b9:ef:31:ac:d6:
0f:52:72:26:ef:a5:3b:66:47:5b:40:a3:70:d2:21:a0:3c:61:
60:74:dc:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEpVlLHUDnXU91+1EaxNzq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx
MDAzYzAwHhcNMjYxMDExMDUwMTI1WhcNMjYxMDEyMDUwMTI1WjAzMTEwLwYDVQQD
EyhmYmNlZTM1ZmQ2ZGFlOTkyNWZmNmNlOTE1OTc2MDU4ZjQyYTlkYzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vP3F8dSsJ6SD0EvWG815Ew8bXHy
Vsnn7NKsFbD1wtLhWY9Jb0DoDtd1jBuz07Nq/VujnXvWLWyWSuTqOJ0VjlWRFPGD
Hpg66K/ino/5/32+rw10lGk+FLYrT9CPdbt4jqZp+1LLEL3kxtPvBOZ3bHEi08ag
y7NfXJ96WjlWANFAIjY7fCFwgGngM+/W5qw72g+4cbeR/7/zQqTIkRcvdjOamqMN
S2jUwWA9YNLLa+RRQbz4JttYZc8bMrCJBRHNhNgP0PvjU95AazCkTVL5hsvvLoLo
HJCFY0ov9BQt10gX9xt2MpiWiieDLqOv98I0RyNklhr3uGip8JT0o/sI2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvO41/W2umSX/bOkVl2BY9CqdwjMB8GA1UdIwQY
MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt
Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi
LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKt01XFV
y6ymwHIWyeagDycEbCGXItJstweWQJQQ/Y+czmiG+zb0OxnNdBJtobxyBuh5h3LP
QKXxPCNZEVv1Tnx0C23KBmMHZSe1VjW4FLsIy6l4NpfWnSA25xJRaLS58s3YGGG+
zOktqD8v3ecS+D0P/1dxsSSUsnmZJ7ocwR4OdG03yh5P4cc2WnSp1666c2rMZIb4
ktc/pPTPeiIQqtEMWpXk3QduCgKk4mua/628Vfzy80wRQL5ClCYXPuiephetF5cs
/d6mg5Own9ieIsSaJfIeMKGW3/5TTHPsTLnfKLDHE7nvMazWD1JyJu+lO2ZHW0Cj
cNIhoDxhYHTc6w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:49:56 2026 by rpki-client