Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: rIoMNaAR1zMjT0dddi4MFoNrhqrriXmkdVoufGPMCdo=
Subject key identifier: 4E:A6:49:3F:C5:85:D6:93:B3:4B:26:82:CA:16:ED:54:93:A1:69:D8
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 01A0705EF025ED0F0963FF8C22B628449896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 1A3E
Signing time: Sat 05 Sep 2026 07:01:05 +0000
Manifest this update: Sat 05 Sep 2026 07:01:05 +0000
Manifest next update: Sun 06 Sep 2026 07:01:05 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: VVrR7H4bcsqKwajBYKzR/Slf/qYlJjXweSQLR9D1Ld0=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:5e:f0:25:ed:0f:09:63:ff:8c:22:b6:28:44:98:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Sep 5 07:01:05 2026 GMT
Not After : Sep 6 07:01:05 2026 GMT
Subject: CN=4ea6493fc585d693b34b2682ca16ed5493a169d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d5:12:fd:74:13:ec:fd:bc:05:4c:39:82:b5:
16:a4:4f:ae:93:cd:8d:9f:ac:1d:3f:0e:78:3e:ce:
bc:35:0f:09:70:b6:a2:de:89:3e:4f:2f:70:0b:fc:
f0:cc:13:84:6f:76:1f:e3:94:15:a6:47:3e:79:b8:
f3:b3:c7:e4:9c:df:91:85:1d:59:4b:b8:73:7f:76:
25:b2:cd:8f:83:5b:a5:3e:d8:29:67:57:97:3b:dc:
8f:ec:be:cd:bf:a2:49:ca:3a:57:e9:30:90:21:0e:
3d:62:7f:c7:fa:c7:06:85:42:5f:44:db:ea:80:14:
a1:cf:47:29:ce:72:88:df:ff:16:ab:a3:22:92:28:
18:e5:f6:9d:c0:c5:04:77:58:0a:fc:fd:68:8a:2d:
25:ab:7e:0a:34:86:2a:6f:73:4d:e8:79:09:8a:56:
66:78:6b:a7:2c:b8:a6:56:d8:16:cb:8d:1e:22:dc:
89:00:0b:4e:e5:7e:65:db:73:a3:3f:97:0f:05:3d:
75:54:91:05:de:04:e6:92:e7:76:29:c8:1c:06:99:
d5:cb:25:02:2f:c5:2c:4a:c0:3b:e0:95:41:bf:a4:
03:4c:02:b9:d2:7c:bd:55:a1:67:24:69:27:7a:96:
99:db:05:7e:95:67:f3:bc:94:05:b1:c6:2d:be:c4:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A6:49:3F:C5:85:D6:93:B3:4B:26:82:CA:16:ED:54:93:A1:69:D8
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:86:f4:b1:1b:61:97:fc:ce:42:a5:47:79:95:92:e9:68:62:
b3:7a:33:44:a9:69:71:fd:01:cc:f4:30:03:4c:f2:29:13:66:
92:52:ba:bb:97:5b:78:45:29:63:5d:4f:22:b6:0a:5b:f1:59:
f6:4b:22:25:6c:5c:f2:b7:15:2d:18:ce:95:3b:de:18:70:4f:
12:cd:b7:7b:c3:f9:2a:a3:82:97:9c:52:e0:87:07:0c:2a:94:
4c:bf:3f:b2:72:ba:51:5b:1e:d0:22:30:ef:d9:cf:e2:a7:8e:
df:ac:de:50:df:7a:43:d1:97:35:95:59:64:84:5e:bc:b0:80:
70:07:0f:1f:7f:14:02:1e:51:82:b4:df:70:d6:05:cf:29:c7:
d4:de:bb:f3:9c:47:3b:15:b9:66:b6:d4:f4:44:37:6e:94:60:
8d:4c:25:cc:ff:2b:d7:d4:13:3e:6b:71:a9:0a:2d:e4:8d:25:
ee:77:c5:42:c0:69:46:83:43:24:fe:de:e4:9b:0b:e6:03:6c:
a4:8c:0f:ca:ba:a9:83:35:58:63:5a:75:dd:8d:ee:a3:47:b3:
93:dd:11:4c:72:37:51:85:e0:19:90:a4:7f:63:5d:34:5d:75:
0a:a2:8c:1b:42:8d:3f:0b:99:33:cc:a4:08:e6:7e:63:5f:8c:
0d:92:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:30:13 2026 by rpki-client