Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
File: 9UPqUocUidhqqcpcoMKXyIq4KrY.mft (raw, json)
Hash identifier: WUdeGDGoa5oKONbMEjZcJc45LEWz7n98BJJIDV6gZMU=
Subject key identifier: 63:28:95:C0:AE:34:45:D9:4C:67:AB:69:6D:3A:B6:0B:CF:F9:D9:ED
Authority key identifier: F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
Certificate issuer: /CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Certificate serial: 01A13E94E5651DF7FADA3452D50E87C33F2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 08:01:47 +0000
Manifest this update: Thu 15 Oct 2026 08:01:47 +0000
Manifest next update: Fri 16 Oct 2026 08:01:47 +0000
Files and hashes: 1: 9UPqUocUidhqqcpcoMKXyIq4KrY.crl (hash: NzyR6yzhLkN8xETDu3IApPjMBa0jBJP8GaJNULqRRPY=)
2: OfRVJ7_eaet9FZN9xLvW_dLglGI.roa (hash: YmesTPN7OCHhIKA0M4jl2Mh1wKjg/IKdK9qpKweokzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:e5:65:1d:f7:fa:da:34:52:d5:0e:87:c3:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f543ea52871489d86aa9ca5ca0c297c88ab82ab6
Validity
Not Before: Oct 15 08:01:47 2026 GMT
Not After : Oct 16 08:01:47 2026 GMT
Subject: CN=632895c0ae3445d94c67ab696d3ab60bcff9d9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:60:a3:e4:ba:7c:75:64:45:86:f4:39:17:3e:
24:43:fb:e7:c8:f4:f3:5d:17:6b:b3:c7:5b:83:b7:
57:02:fe:4d:63:82:93:61:6c:11:49:c9:59:cf:bc:
e4:e2:a1:83:3f:10:7f:c5:d1:1f:1f:0c:62:4c:ff:
07:8a:6f:db:3d:71:eb:05:5c:9f:94:d7:1b:6b:a5:
3b:39:b4:db:86:fb:9d:97:c7:e0:95:38:37:49:c7:
b2:3a:bd:cc:f5:11:6f:13:53:0e:bf:0b:f1:20:79:
84:be:a4:3c:bf:e5:0b:8a:dd:ec:13:a9:63:c9:2b:
2d:f3:0b:6f:c1:0f:0d:43:9d:43:66:be:06:87:25:
37:9b:0f:f9:72:ed:a7:99:c6:f7:d3:45:8b:ee:61:
a0:23:f2:22:21:04:37:a2:ee:99:f7:97:f5:8f:d2:
3d:11:3b:ed:bf:c7:3c:fb:12:99:4f:80:39:82:a8:
8f:d0:1c:27:5b:2a:00:be:fc:aa:4b:a0:f5:22:21:
79:b1:f5:4a:c1:c0:28:e7:f4:3a:1b:40:4d:6c:ff:
a9:e8:33:c3:6c:65:3d:62:ce:1d:4b:9a:02:91:02:
c4:95:e1:3c:3a:0c:5c:ba:c7:b5:dd:2e:2f:d3:2e:
05:8b:50:ca:b0:67:32:67:f0:ad:af:f8:08:8b:46:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:28:95:C0:AE:34:45:D9:4C:67:AB:69:6D:3A:B6:0B:CF:F9:D9:ED
X509v3 Authority Key Identifier:
keyid:F5:43:EA:52:87:14:89:D8:6A:A9:CA:5C:A0:C2:97:C8:8A:B8:2A:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UPqUocUidhqqcpcoMKXyIq4KrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/16c4b5-6dda-4a38-848f-dfbbeda21594/1/9UPqUocUidhqqcpcoMKXyIq4KrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ec:0d:9c:f6:ff:e4:76:dd:f6:fd:a6:87:95:a1:98:57:f8:
9f:e2:34:30:07:bc:d0:be:1f:34:8d:f3:33:8a:87:f7:7e:ab:
01:fb:32:4a:39:0d:d1:d4:fd:1d:fb:25:6f:08:16:a4:fc:30:
b6:54:0c:fc:bc:4e:f5:79:fa:08:64:9b:9a:91:a9:1e:a0:9a:
ec:5b:4c:1c:75:c3:20:c4:76:eb:2e:4c:b2:77:54:7d:21:b9:
0c:94:4a:a4:b5:c3:b8:e8:0f:96:a3:1a:23:78:14:56:17:e2:
d9:d0:ec:80:4f:42:71:4d:a8:f7:f3:4c:10:96:02:0a:74:83:
96:cf:0e:1e:52:ae:d7:f1:eb:5e:26:72:82:4a:84:47:ca:aa:
cb:ba:35:2b:c1:98:f0:a5:14:89:92:18:c1:14:5a:a9:1c:d0:
49:80:b6:73:1c:3b:17:d7:23:1c:fe:1d:a1:5c:4a:53:86:2a:
43:a0:ab:cd:cf:3d:5d:7a:9b:57:4d:df:1f:7a:cb:0a:9e:6b:
4f:a6:bb:ec:2f:a8:dc:ab:0d:d6:ca:71:24:24:3a:00:67:07:
09:24:ea:83:c2:2a:c1:37:81:1f:a0:8a:f7:a1:19:98:26:cd:
5e:44:f0:e4:e0:f6:82:20:8b:8f:15:38:7b:c9:db:e2:0c:1d:
da:1a:50:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:21:34 2026 by rpki-client