Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: VBDsOzaalH3Z0tpSjE8sK17z+ID9E3FpKQNx2sHQKXA=
Subject key identifier: 52:49:34:C5:98:0E:D9:73:97:B8:DC:40:69:5E:BA:59:52:3B:48:18
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01A001DD95AAE87BF1204C8852827E320CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 20:01:34 +0000
Manifest this update: Fri 14 Aug 2026 20:01:34 +0000
Manifest next update: Sat 15 Aug 2026 20:01:34 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: DuNLcl8rNouYit0hF60aSSDjWVPAcDBANDWWsrRcw9s=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:95:aa:e8:7b:f1:20:4c:88:52:82:7e:32:0c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Aug 14 20:01:34 2026 GMT
Not After : Aug 15 20:01:34 2026 GMT
Subject: CN=524934c5980ed97397b8dc40695eba59523b4818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:74:3d:1f:03:72:dc:08:e8:22:02:2e:3b:8d:
67:a0:ec:5d:a7:2a:71:9e:f1:34:64:ce:da:62:d5:
a9:05:5d:33:84:22:37:86:d4:d1:9a:1e:95:24:3d:
46:96:d1:a1:87:e5:a7:98:f1:68:78:0a:94:ae:14:
8e:14:2c:fc:da:b8:44:e1:c5:35:7b:6e:fd:f8:a6:
ab:00:95:9f:3d:87:6a:f6:7a:e4:23:32:f3:66:9c:
d3:d6:d2:d0:b1:85:3a:e1:05:ea:4c:95:6f:02:31:
e2:00:3f:3b:5e:3a:63:e0:48:df:2f:9f:69:0f:7b:
e0:3d:e2:84:db:ca:7d:98:74:46:2b:73:46:41:a0:
c9:af:ea:9f:90:01:bb:0d:20:6b:97:91:f5:2e:72:
b7:d2:21:a0:d8:79:42:bc:fb:0d:11:ad:4f:a7:74:
0c:c2:27:0e:77:3a:43:15:79:74:ad:3b:b0:9b:a8:
18:ee:b6:ab:28:5a:27:15:69:ac:da:0c:e1:51:8a:
e9:4b:ff:8a:c9:d7:c0:91:b4:72:08:87:e3:ee:53:
9c:31:cb:35:b1:1a:99:0e:82:2d:e1:bd:2f:5a:45:
00:f3:36:09:cd:22:22:88:08:02:70:f5:b6:ec:60:
c3:c8:eb:82:6d:e8:a0:b2:c8:7b:dd:f9:71:19:43:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:49:34:C5:98:0E:D9:73:97:B8:DC:40:69:5E:BA:59:52:3B:48:18
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:17:2a:58:eb:c4:b8:78:80:c7:7a:1a:62:95:bf:95:44:
c1:1b:cd:54:b3:a1:7d:e0:b4:57:27:e9:44:e2:0d:f2:2a:f9:
15:5f:b5:93:95:05:61:3e:b5:ae:c1:b7:84:bc:21:42:d7:26:
46:2d:b4:c3:89:d2:30:e4:35:57:d5:d2:7f:0d:b8:a0:69:a3:
a9:e7:c0:2d:b2:56:b7:41:20:a2:d2:5f:ef:7e:7f:4d:4a:62:
a4:0a:08:d6:0e:8f:f8:95:d0:ee:59:b6:e1:4c:ef:76:18:81:
7d:12:98:be:41:8f:a9:1d:7b:ff:50:84:8c:c4:78:81:9a:c7:
bf:0d:94:c8:41:22:45:7a:3c:46:1f:28:db:52:c8:2c:f2:43:
e3:30:60:44:f8:f9:98:db:85:01:2b:a8:ed:81:b7:42:a5:dd:
43:a1:8f:d3:b2:e1:01:26:fe:4b:df:dd:9f:a2:df:7b:9e:81:
4c:9a:4c:41:d6:c6:31:2a:8b:2d:c1:44:b2:f0:e3:de:f8:91:
30:d0:09:36:14:5b:31:d0:f5:a5:ed:ca:cb:c1:c1:d9:90:cf:
6a:1d:87:1a:a1:a5:f4:47:8a:de:10:ca:d8:a6:32:f6:97:f4:
20:7f:c9:fe:5c:e4:55:d3:f7:ac:a4:21:74:3d:40:91:0b:de:
a5:cb:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:09 2026 by rpki-client