Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: 2lVJgta/9ZbW6yIICI/HHU7gL2K+BR+pPjXBuTC02WU=
Subject key identifier: B7:61:A7:24:65:7B:92:31:44:2A:7D:4A:04:E9:E4:DB:A1:70:33:FC
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 019D39413A17596FBDB80E94F3AA592A3CA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 11:01:09 +0000
Manifest this update: Sun 29 Mar 2026 11:01:09 +0000
Manifest next update: Mon 30 Mar 2026 11:01:09 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: T4B/fjZo3W2aFCoJpXWbqTOqXgM+9wOxUXOhoWP9jSk=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:3a:17:59:6f:bd:b8:0e:94:f3:aa:59:2a:3c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Mar 29 11:01:09 2026 GMT
Not After : Mar 30 11:01:09 2026 GMT
Subject: CN=b761a724657b9231442a7d4a04e9e4dba17033fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:4e:93:ff:43:1d:e3:8d:ae:ef:a6:47:7d:
85:e7:ec:ab:d8:47:a0:1f:53:9f:2a:73:d0:ee:eb:
ab:17:a6:56:95:2a:70:1d:25:41:38:4e:42:db:de:
d8:e3:68:f7:60:0e:9f:46:3d:2e:d8:75:54:0a:f0:
04:06:e2:aa:5f:13:f4:53:11:9a:1e:06:27:49:0b:
ef:43:65:0c:e2:54:54:fc:51:52:37:f5:56:dd:e5:
87:18:57:21:ce:76:cc:b9:0f:40:3c:db:e3:20:5d:
39:7d:0b:4d:3c:e2:5c:d8:c1:9b:98:0a:b7:c2:20:
47:26:be:fd:d7:4f:c0:8c:54:3a:2d:31:f0:3c:fd:
24:c8:88:70:0f:c3:ad:0e:6b:e2:2e:6a:9c:3f:fa:
f6:26:58:ef:e6:a5:f5:37:ff:7a:19:94:f9:f0:33:
58:43:d0:ee:d7:d7:3c:3c:c4:b2:36:0f:34:db:2d:
b3:8f:c2:24:14:1e:c3:c6:63:24:55:d1:d7:8b:72:
85:e8:5d:22:80:be:96:12:65:f2:2a:7d:1e:2d:71:
4f:85:04:ba:6b:28:55:10:4c:03:5f:e7:6f:f9:40:
6b:f8:ca:0b:50:55:d2:0f:89:95:28:f1:33:14:af:
25:fe:13:61:92:57:fb:da:08:f8:ff:3d:b2:48:62:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:61:A7:24:65:7B:92:31:44:2A:7D:4A:04:E9:E4:DB:A1:70:33:FC
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e1:ec:75:53:a2:d5:54:a4:f2:5d:65:0c:54:c8:12:68:57:
f9:55:da:c4:c4:0c:78:79:95:00:3c:2d:c6:8e:ad:c8:e8:6d:
36:de:6a:53:84:6f:24:07:3b:59:1b:e1:7e:cb:b0:fc:cf:26:
5f:45:66:87:d8:be:30:9e:bc:5c:83:48:89:1b:00:10:81:b7:
ab:2c:b7:08:99:13:4a:aa:a8:e9:6b:0e:27:84:48:ee:75:24:
27:35:4f:3b:44:b4:b5:c1:ae:60:fb:22:21:32:e1:21:8a:7f:
30:76:98:05:13:eb:4c:01:f0:c1:9a:b4:4f:30:a9:00:f8:55:
60:81:00:f3:6b:d8:59:de:1c:39:11:0c:6d:03:3a:f3:9f:42:
9d:7e:35:b8:a0:a0:52:8d:50:5a:29:c7:53:81:7f:76:7a:00:
56:e2:5a:b3:09:49:25:24:16:d3:ab:55:44:3e:80:64:22:7e:
73:41:ba:bf:c3:ef:bb:60:96:28:9c:7f:80:3d:c8:d4:8d:cc:
5f:26:88:d7:21:69:2c:67:9c:7e:dd:e7:85:b3:d9:fd:8f:b1:
4f:5e:15:e6:25:e4:6f:a1:70:d2:6e:25:e2:be:54:32:95:85:
20:d9:91:fb:bc:31:ee:e8:55:a2:3b:6d:17:8c:14:29:b5:c9:
02:ee:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:16:59 2026 by rpki-client