Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier: RHvMUEaTT1+UewpsW/KX4r1i3xJu6jzaZsNkexF0P3k=
Subject key identifier: 39:60:C1:3E:F0:B7:06:B1:A5:D5:14:2B:2A:DA:F7:4B:C1:E5:4C:AA
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer: /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial: 01A183E2E3436FD73B640FE2A7840935455D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number: 02CE
Signing time: Wed 28 Oct 2026 19:00:46 +0000
Manifest this update: Wed 28 Oct 2026 19:00:46 +0000
Manifest next update: Thu 29 Oct 2026 19:00:46 +0000
Files and hashes: 1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: OWVDaGAlXzAxZvmYYk0PqXq0nA7PgoAkZqQetD46pfw=)
2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e2:e3:43:6f:d7:3b:64:0f:e2:a7:84:09:35:45:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Validity
Not Before: Oct 28 19:00:46 2026 GMT
Not After : Oct 29 19:00:46 2026 GMT
Subject: CN=3960c13ef0b706b1a5d5142b2adaf74bc1e54caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:12:89:cd:fb:58:94:35:e5:96:63:d9:97:
d3:e6:e5:67:ad:37:be:f7:64:70:70:73:dd:01:4f:
8e:b8:d2:fb:e3:d5:85:d3:0f:1d:c3:f7:88:c2:59:
5b:1b:6f:ed:b9:ca:2e:f5:5f:3f:2d:36:01:87:a5:
4d:60:b9:d2:d5:6d:c9:c2:8b:fb:37:34:4b:b3:68:
67:cf:7e:37:c8:28:8a:2a:7a:b1:69:dd:cb:39:07:
6c:31:c2:0b:31:06:59:de:01:0f:4f:55:3e:73:96:
d7:cf:59:48:98:26:55:f3:8c:e2:30:2b:1e:45:4f:
21:91:76:17:e1:1e:ff:ff:63:a0:95:b0:3e:54:73:
e5:8d:cb:d7:68:8b:68:01:9c:7e:42:7a:21:ad:a4:
49:c5:70:81:78:38:10:65:6b:65:36:5f:de:49:ce:
9d:4c:94:25:7a:7d:71:f2:dd:77:57:a7:33:02:2b:
e5:27:c0:d9:82:d5:5b:b1:2e:58:59:6f:30:1d:28:
84:e2:e0:64:d0:e5:f1:6d:e9:57:56:b5:4e:b6:58:
32:6e:6c:1c:69:75:e1:05:2b:41:61:2c:43:db:15:
d9:3f:50:b6:b0:cf:02:96:38:6f:23:8d:c8:b5:78:
8c:13:99:d9:8d:d3:a6:ad:c5:cc:15:34:b0:4e:02:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:60:C1:3E:F0:B7:06:B1:A5:D5:14:2B:2A:DA:F7:4B:C1:E5:4C:AA
X509v3 Authority Key Identifier:
keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:01:a4:e4:e3:bd:1a:ee:f9:6b:d2:1b:6e:52:e8:2a:bb:c7:
ec:fd:a7:61:06:4e:ba:c3:5e:d7:0d:e5:a4:81:e5:9c:48:93:
93:b4:42:56:06:be:94:61:0b:c9:f2:fb:57:0e:65:55:84:83:
88:a0:34:29:d6:14:8c:4f:83:fa:80:b3:6a:52:89:21:22:30:
7b:8c:19:68:8d:22:76:63:54:55:1a:09:83:08:c2:4e:6b:68:
7e:ca:c9:a5:d1:b0:55:84:5c:ec:2d:04:60:6c:d6:e8:62:dc:
0e:87:19:ef:23:3d:0f:c5:42:42:61:62:4b:1d:b0:81:16:e3:
de:22:de:e9:f4:76:19:68:ec:27:5b:35:d0:6b:80:31:bc:a1:
7c:e7:63:d1:1a:85:5f:9e:8a:d8:d7:78:56:34:ff:ca:69:f0:
51:db:40:b7:b5:c7:3b:12:10:be:4c:b2:92:cc:f0:e5:b2:c9:
2c:cd:4d:d1:a1:ff:e5:45:65:98:a6:aa:84:06:0a:89:d0:48:
94:ae:1d:b8:ad:d9:40:03:03:0a:e6:96:7c:41:16:bb:ac:dd:
8f:c2:d0:21:2d:4b:25:1c:2d:66:13:98:b9:5f:c3:73:6b:77:
ff:86:83:45:13:f9:a5:4a:bd:97:a8:4f:c8:5e:d1:4e:13:e7:
a2:b0:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:55 2026 by rpki-client