Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
File: U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft (raw, json)
Hash identifier: 4KA+85hWOOVnG2D0VrkFrheUViP1UN4MPJTuO4qr7TE=
Subject key identifier: 8F:15:CD:95:C8:D9:9A:0D:5D:8C:B4:2D:31:2F:2A:56:B1:3C:F1:7C
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 01A119751B46A0C88E7E16745DAF892F06B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:01:07 +0000
Manifest this update: Thu 08 Oct 2026 03:01:07 +0000
Manifest next update: Fri 09 Oct 2026 03:01:07 +0000
Files and hashes: 1: Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa (hash: Ds8FZooitJMNVsAEf1unNJvTN7eQbb92Gpc2ul39w0s=)
2: MHRuqT3ZxWiNPWjx1hFceo5038Q.roa (hash: duJLSAn68SgAgFK46x9nz8RGT1uXEmPsEIzG1iEF5y4=)
3: U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl (hash: aHph+JlIbx93E21WfdeaezPGtFAZQwjZuEkGdEosOEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:75:1b:46:a0:c8:8e:7e:16:74:5d:af:89:2f:06:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Oct 8 03:01:07 2026 GMT
Not After : Oct 9 03:01:07 2026 GMT
Subject: CN=8f15cd95c8d99a0d5d8cb42d312f2a56b13cf17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:f7:2d:92:82:0c:15:f6:32:df:2a:ab:f3:
12:ad:d4:fe:64:65:51:55:47:db:d6:b3:38:1d:11:
82:5c:24:0a:74:72:fa:a2:38:e6:7e:f0:14:29:ae:
40:78:09:42:d7:d3:93:e9:bd:ba:e2:e1:10:35:a0:
49:7a:b2:b5:95:7c:06:a6:14:ef:9d:b1:27:3f:36:
18:5e:e4:de:d9:8d:ac:22:bc:7e:5e:57:7e:83:00:
a4:b4:9f:7d:94:ac:e5:8b:fd:3e:a9:59:d2:b5:7b:
04:ea:76:aa:d9:60:6b:09:74:36:e4:b2:05:de:8a:
e1:8c:98:2a:bf:25:eb:0c:d3:80:7f:fc:97:e0:ea:
b0:22:2f:78:1a:c4:b5:35:c8:68:9f:05:53:9a:c6:
ab:64:97:ac:26:4c:3a:06:fe:cb:76:97:3a:84:95:
5d:4a:38:85:f9:7b:4c:a7:81:4d:62:15:57:d0:30:
3e:7f:c4:82:cc:57:04:8c:cf:5a:aa:89:3f:37:5e:
fa:ca:0c:e0:a8:b1:2d:a0:00:90:25:c1:3c:f4:22:
8c:6b:47:10:e6:3a:88:f5:a0:5c:eb:b1:4a:cf:32:
eb:97:32:71:89:4b:86:8e:89:3c:21:2a:4e:40:a0:
96:d5:0a:24:a1:3d:4a:de:fd:d9:fb:d3:41:17:bb:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:15:CD:95:C8:D9:9A:0D:5D:8C:B4:2D:31:2F:2A:56:B1:3C:F1:7C
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:10:ba:b6:e5:66:3d:eb:8a:d6:f0:8e:0e:37:35:1b:f4:b7:
55:f5:d1:c3:5d:85:87:de:55:17:1c:e3:8a:5a:30:7a:31:0b:
da:cc:a4:8c:61:49:2b:38:92:59:4d:58:a7:30:2c:34:4d:c6:
c4:50:33:e2:c2:bf:64:75:f5:55:7c:d8:26:74:7e:e1:ae:8a:
59:2c:86:11:00:ff:a2:f5:3a:28:cf:c8:df:95:16:fe:8b:4e:
67:53:f4:65:0e:34:8b:07:59:7e:2a:2b:da:c7:0a:82:e6:5d:
1c:d2:9f:90:7f:63:52:a5:6c:83:da:5a:e1:b5:00:54:ee:35:
15:b4:5c:82:b4:de:c4:9a:2b:a6:c2:43:d1:7d:dd:0f:de:d2:
06:43:e0:7c:14:43:e8:a4:73:9f:79:d8:13:5e:1b:ad:37:ad:
91:02:d9:3d:11:07:cf:94:a0:11:d1:a0:28:aa:30:94:a0:f1:
5b:1b:c0:6f:a6:bc:67:5b:bd:29:03:0b:04:b4:fe:52:68:61:
b8:1f:fa:0d:3d:68:ae:63:2d:ea:fc:4c:cf:d9:92:08:e6:29:
cc:ed:f6:ec:a9:79:d3:48:1e:27:bf:01:26:2f:5f:e9:47:25:
bd:ae:5b:52:75:3a:19:6b:b8:e0:3e:df:59:30:49:6d:10:f9:
2b:ea:66:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:58:56 2026 by rpki-client