Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: hB3H73h/p5+TeLA63CzHOy43yulRYlhwh9UDNX+1tJw=
Subject key identifier: 9E:DE:78:44:56:C3:7F:73:D7:2F:C2:7E:8A:9A:B5:2D:55:10:2C:73
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01A06E70C0C989C5F100CB954C45F07EBAE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1794
Signing time: Fri 04 Sep 2026 22:01:18 +0000
Manifest this update: Fri 04 Sep 2026 22:01:18 +0000
Manifest next update: Sat 05 Sep 2026 22:01:18 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: gvllTjsbVZkA9aRSIxHrTtm11EvPn/V18vDna3wUfYQ=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:c0:c9:89:c5:f1:00:cb:95:4c:45:f0:7e:ba:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Sep 4 22:01:18 2026 GMT
Not After : Sep 5 22:01:18 2026 GMT
Subject: CN=9ede784456c37f73d72fc27e8a9ab52d55102c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:07:01:a3:8a:f4:dc:be:ac:f4:84:1b:c0:
84:66:0f:83:bd:13:0f:5b:74:61:aa:38:5c:95:72:
18:84:1f:3a:06:6d:31:21:24:99:d2:ec:1c:7d:d0:
a2:25:f9:ac:cc:ba:f2:70:c4:32:85:06:91:e5:57:
b6:85:dd:ea:ba:e4:36:95:aa:65:8d:9f:91:59:4c:
f3:fe:30:10:7d:68:bc:70:b7:b1:2b:ad:da:d7:3b:
22:e8:16:d3:87:2b:1f:06:ff:be:fe:b3:fd:e6:7e:
b7:8d:23:25:1f:7a:25:46:36:80:ca:9a:e3:d6:00:
b8:53:f3:10:06:9d:c7:f1:24:92:53:63:6f:a8:f3:
ab:cf:63:0b:7d:a0:4f:a9:0f:17:42:74:34:80:db:
b5:d6:5e:7e:3b:51:11:0e:69:21:b5:27:12:95:db:
18:ff:10:8b:bb:fc:2a:db:5d:ce:e4:14:04:46:e0:
6f:84:e5:3d:4f:6a:2a:84:73:89:54:7a:8c:7b:58:
b1:0b:f2:d1:24:49:79:1d:7e:61:da:75:a5:a1:a7:
41:2c:99:b3:81:d1:16:0d:cc:0e:6a:0a:20:e8:37:
cc:99:b5:f2:4d:f4:c9:08:f5:37:4a:5c:45:4f:67:
8d:08:9e:c6:96:0d:5e:ab:10:2b:4b:37:2f:5f:69:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:78:44:56:C3:7F:73:D7:2F:C2:7E:8A:9A:B5:2D:55:10:2C:73
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:80:fb:ff:a6:26:5b:7e:89:c4:64:04:71:53:2d:28:28:
26:89:0c:99:e4:55:da:4f:b4:b5:75:e2:30:99:0a:b1:3e:ba:
df:bd:dd:43:c4:0e:9e:3a:82:f9:1b:3e:46:c3:52:15:3a:2c:
40:48:6c:a1:51:89:3e:4c:7e:22:fe:3a:0b:7f:a8:72:fc:37:
db:15:46:d9:9b:4b:16:1c:b7:fc:69:fe:1e:34:17:bb:e0:18:
8d:28:7e:cf:9f:f2:0a:6c:88:af:c5:2c:ef:c9:af:24:29:aa:
0e:54:08:84:4f:47:8c:ca:9f:f6:bc:ca:13:c5:f4:f2:27:31:
50:3b:e1:9a:62:48:d8:75:d8:67:1a:3e:4e:75:c2:41:68:5f:
91:7e:1b:f9:d2:f9:f7:a7:70:01:64:79:91:24:60:f8:7c:a7:
f7:f9:1f:9b:86:77:33:f1:02:4d:1d:7d:fb:36:b3:2d:0e:c4:
4e:7d:5e:eb:69:ba:1d:0e:b3:b5:73:74:67:6c:c8:a7:8b:d7:
98:38:d3:b0:db:08:48:22:49:a0:cc:0c:3a:81:8f:ab:f9:a5:
6c:c9:4b:46:36:8b:50:42:69:b9:e4:75:8c:63:88:10:27:e7:
5c:19:7c:ab:f5:59:b9:8a:58:ea:25:4c:a1:01:f4:e3:c2:5d:
b0:cf:16:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:32:50 2026 by rpki-client