Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: Ps521tKvT4fLWkG0vcE7+w0Oqijc8vrOtjH6caFH/JY=
Subject key identifier: CA:5A:54:1C:85:8C:5A:D4:1A:6C:58:20:72:2C:76:85:32:3C:78:E9
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 01A18B9C4FEA37925E5AB41F19E0DC0C1DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1AD3
Signing time: Fri 30 Oct 2026 07:00:39 +0000
Manifest this update: Fri 30 Oct 2026 07:00:39 +0000
Manifest next update: Sat 31 Oct 2026 07:00:39 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: WFIdSgcmuYbtclDxmymzgIxMfMptRAee+YFOx8CjSe0=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:4f:ea:37:92:5e:5a:b4:1f:19:e0:dc:0c:1d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Oct 30 07:00:39 2026 GMT
Not After : Oct 31 07:00:39 2026 GMT
Subject: CN=ca5a541c858c5ad41a6c5820722c7685323c78e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0d:f1:0c:b9:ce:f8:3f:de:48:b6:12:5b:fd:
a8:5f:b2:f7:60:7f:fe:31:00:36:b5:44:f9:d0:fe:
5f:7d:63:2f:38:e1:9b:94:8d:a5:2a:20:b5:c2:d4:
9d:91:0d:8b:7d:a9:73:39:5d:8c:ba:00:4f:05:66:
48:98:88:92:c0:fd:9e:cd:5d:2a:64:38:c9:bc:8d:
05:6e:6b:af:41:5c:3d:2b:2a:df:ae:28:46:7a:e9:
76:89:5d:71:fd:79:93:74:25:d0:e0:49:ed:17:84:
a3:48:78:de:c6:4f:1f:f0:90:09:54:98:bc:66:18:
f6:91:b7:5f:58:17:6d:b1:f8:fd:43:3d:b1:17:82:
bd:ec:db:c1:34:7a:10:85:f4:58:ba:c6:4f:48:fe:
10:51:7a:9c:a6:70:0e:51:4b:cd:84:a4:b7:b4:6d:
93:55:6b:cb:e1:70:ef:38:4e:67:72:37:bc:06:72:
5d:bc:d1:13:52:dc:97:39:53:4e:3e:14:cf:e4:41:
48:57:9a:5b:3a:ba:69:3f:79:46:dd:dd:79:f1:cd:
db:85:9c:e6:25:07:8f:1f:68:9e:22:c0:6b:65:11:
1b:63:e9:14:ed:40:51:cc:f8:37:02:7a:20:f9:d4:
0a:b1:39:87:09:2a:76:ae:63:61:10:da:34:8f:23:
c8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5A:54:1C:85:8C:5A:D4:1A:6C:58:20:72:2C:76:85:32:3C:78:E9
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e3:be:38:0e:bd:86:c5:49:67:dc:92:81:32:c3:bd:b9:19:
d7:ef:e5:dc:0c:ae:24:10:ed:38:f4:1b:eb:b4:cc:e1:68:af:
81:a1:f3:69:a3:75:ae:5d:9b:95:ea:9e:b7:c2:c4:10:70:e5:
f6:8a:2b:db:9c:91:f2:18:12:21:66:1d:33:b2:29:2b:3a:5d:
f0:94:8d:a7:34:04:48:c6:a7:bb:14:02:fe:b5:d1:fa:1c:96:
37:db:2a:7b:97:a3:f4:b5:36:11:2d:eb:61:e4:9c:87:7a:69:
84:c4:cc:c5:33:b5:25:1e:0d:34:94:51:10:37:10:15:1e:e8:
76:0a:da:77:9c:bd:af:39:98:65:6e:54:b5:29:e4:4d:79:ce:
9d:40:8d:ef:20:b5:d7:16:25:a0:83:2f:41:dc:54:1b:42:68:
c0:11:4f:10:57:5c:03:e5:6c:d8:b5:20:f4:fc:a4:a2:1f:c1:
8b:90:40:1e:41:77:fa:f8:a6:81:8e:19:72:02:a8:09:a1:fa:
60:e8:50:8c:16:40:ce:17:27:44:fb:5b:6a:08:d0:eb:d6:1e:
7c:e6:d4:47:f2:a7:5e:e7:99:bd:96:53:e5:23:30:69:21:29:
e7:56:c1:2b:31:59:b8:c7:64:f0:49:31:26:72:87:47:23:55:
e3:74:c0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 13:34:49 2026 by rpki-client