Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: qamXS3Ip+725FMzVSguuvEGgzmo0Eihhy/1CUs1V0Bs=
Subject key identifier: F9:19:89:ED:09:EE:6E:CC:9E:6A:10:26:DB:2E:B1:01:CB:24:FE:C3
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019E3072CA5D04435FA0D9A41271D7A77458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 11:01:29 +0000
Manifest this update: Sat 16 May 2026 11:01:29 +0000
Manifest next update: Sun 17 May 2026 11:01:29 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: VFFtWRRFPyX8s/oNHW62mZ0T8vBKDAcmRCDOdYvP8yo=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:ca:5d:04:43:5f:a0:d9:a4:12:71:d7:a7:74:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: May 16 11:01:29 2026 GMT
Not After : May 17 11:01:29 2026 GMT
Subject: CN=f91989ed09ee6ecc9e6a1026db2eb101cb24fec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:d1:17:9f:fa:af:1e:c3:26:e3:9f:a4:b5:
96:b3:fe:8a:85:2a:ae:e8:cf:4c:e8:e3:a5:37:16:
fc:50:7f:87:9b:f7:75:2f:40:5c:fc:b9:49:a3:9d:
fc:5b:6e:3a:bc:59:46:78:71:8d:97:e2:5e:49:4d:
f8:c9:3b:eb:72:bd:4e:d7:b1:fd:cb:26:13:f6:34:
3b:0e:e1:ed:b8:d6:ad:9c:f4:90:36:90:22:00:93:
96:5b:44:e9:f3:ee:e9:35:d7:3d:a0:3a:e8:76:c6:
7d:1e:5b:99:5f:31:ce:0d:04:93:a6:f1:cb:d6:e6:
e1:16:71:06:64:e0:fa:dd:88:d0:2e:cd:37:11:55:
28:0a:73:63:46:ca:fd:72:d0:a7:78:41:9b:43:fe:
71:7b:11:5d:0d:67:4e:cd:a0:47:1c:58:5e:be:e1:
09:3b:4a:f9:5d:42:8a:d8:1f:d6:35:87:ed:ff:5e:
19:17:75:c7:32:76:85:3a:ed:a0:91:d5:ae:c3:89:
69:c9:c9:52:fe:32:d6:6a:ca:33:98:f9:35:08:45:
1a:3f:94:72:a1:37:e4:78:d8:9d:19:8a:b2:87:9c:
60:eb:cd:b4:fe:fd:fc:2c:3b:8d:85:22:9f:1e:fb:
a8:e9:fe:29:a6:af:00:bf:82:ec:c0:97:ea:08:63:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:19:89:ED:09:EE:6E:CC:9E:6A:10:26:DB:2E:B1:01:CB:24:FE:C3
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:22:6a:5e:ec:8b:53:72:eb:35:14:68:58:83:d3:37:5a:97:
ed:14:9f:7d:86:7d:14:68:40:e3:3c:d3:36:23:0a:8c:d1:97:
16:07:82:e7:2c:87:35:f4:18:61:f4:b7:9c:48:ea:0f:7a:86:
3b:79:3d:6d:c1:21:ca:e0:66:78:56:82:3c:72:80:c1:bc:03:
1e:d5:b7:3d:60:34:f1:13:af:9d:a5:f3:56:8b:07:c4:30:aa:
71:1a:5b:6a:f8:ab:27:f5:fc:77:e2:ca:e8:a7:18:99:13:ae:
55:c6:b7:c2:b6:ce:bd:f3:e9:cc:d5:ae:1f:88:14:2a:c7:7c:
98:c1:79:a7:27:3f:45:81:3a:86:dc:87:b0:0c:12:2b:aa:ea:
cf:73:5f:51:88:7b:c0:ac:54:57:06:29:9a:62:0d:8f:2d:62:
3a:77:0b:b9:d8:3d:cb:54:71:f9:93:e6:c3:cc:9d:a7:15:e5:
31:5f:7a:27:d3:ff:9e:65:bc:23:e4:01:c8:5b:d3:49:9c:00:
11:94:d6:29:a0:b1:b9:e2:b6:17:29:b7:34:66:73:b6:8e:fc:
be:3a:34:fe:cd:3e:f0:d8:38:20:6c:0f:2d:bd:90:a2:73:54:
f3:15:76:10:e4:b1:2b:be:e7:d8:16:01:65:07:61:70:5f:e4:
ac:55:6f:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcspdBENfoNmkEnHXp3RYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NDNlYTUyODcxNDg5ZDg2YWE5Y2E1Y2EwYzI5N2M4OGFi
ODJhYjYwHhcNMjYwNTE2MTEwMTI5WhcNMjYwNTE3MTEwMTI5WjAzMTEwLwYDVQQD
EyhmOTE5ODllZDA5ZWU2ZWNjOWU2YTEwMjZkYjJlYjEwMWNiMjRmZWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3nRF5/6rx7DJuOfpLWWs/6KhSqu
6M9M6OOlNxb8UH+Hm/d1L0Bc/LlJo538W246vFlGeHGNl+JeSU34yTvrcr1O17H9
yyYT9jQ7DuHtuNatnPSQNpAiAJOWW0Tp8+7pNdc9oDrodsZ9HluZXzHODQSTpvHL
1ubhFnEGZOD63YjQLs03EVUoCnNjRsr9ctCneEGbQ/5xexFdDWdOzaBHHFhevuEJ
O0r5XUKK2B/WNYft/14ZF3XHMnaFOu2gkdWuw4lpyclS/jLWasozmPk1CEUaP5Ry
oTfkeNidGYqyh5xg6820/v38LDuNhSKfHvuo6f4ppq8Av4LswJfqCGMIPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkZie0J7m7MnmoQJtsusQHLJP7DMB8GA1UdIwQY
MBaAFPVD6lKHFInYaqnKXKDCl8iKuCq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYt
ZGZiYmVkYTIxNTk0LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8xNmM0YjUtNmRkYS00YTM4LTg0OGYtZGZiYmVkYTIxNTk0
LzEvOVVQcVVvY1VpZGhxcWNwY29NS1h5SXE0S3JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciJqXuyL
U3LrNRRoWIPTN1qX7RSffYZ9FGhA4zzTNiMKjNGXFgeC5yyHNfQYYfS3nEjqD3qG
O3k9bcEhyuBmeFaCPHKAwbwDHtW3PWA08ROvnaXzVosHxDCqcRpbavirJ/X8d+LK
6KcYmROuVca3wrbOvfPpzNWuH4gUKsd8mMF5pyc/RYE6htyHsAwSK6rqz3NfUYh7
wKxUVwYpmmINjy1iOncLudg9y1Rx+ZPmw8ydpxXlMV96J9P/nmW8I+QByFvTSZwA
EZTWKaCxueK2Fym3NGZzto78vjo0/s0+8Ng4IGwPLb2QonNU8xV2EOSxK77n2BYB
ZQdhcF/krFVvYQ==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:15 2026 by rpki-client