Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: ysndETeX+DjEen7CyZ7/uxUXP74vPKEpm1EsyjzJQ0o=
Subject key identifier: 62:92:24:DD:9D:1A:F5:D1:7D:3C:8A:D4:BE:63:AC:61:30:B7:35:15
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A16759234F86BDFC09EE217640C3BEF9F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 059D
Signing time: Fri 23 Oct 2026 06:00:57 +0000
Manifest this update: Fri 23 Oct 2026 06:00:57 +0000
Manifest next update: Sat 24 Oct 2026 06:00:57 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (hash: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: gqY/ikSAXr94QrHtYtfRf9CiNdFvUc6JGBygLsJYdHo=)
4: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:59:23:4f:86:bd:fc:09:ee:21:76:40:c3:be:f9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Oct 23 06:00:57 2026 GMT
Not After : Oct 24 06:00:57 2026 GMT
Subject: CN=629224dd9d1af5d17d3c8ad4be63ac6130b73515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:d5:47:d1:be:4d:fc:02:7d:0e:d9:72:ac:
fa:05:d5:d2:f3:1a:08:fa:f1:30:17:32:9e:3a:53:
9d:77:67:20:7e:1c:91:77:28:9c:23:dc:9a:e3:aa:
9b:6c:f3:3b:f8:5d:34:95:13:7d:9d:64:6b:42:c2:
4b:4a:e3:17:96:91:d4:00:dc:20:7c:45:62:ef:b0:
93:f8:aa:ef:9b:8a:2e:f4:f8:07:68:06:3b:30:fa:
0d:9a:d5:1d:c8:80:90:6b:57:63:e0:71:a5:72:02:
9f:c4:22:76:85:53:2f:ab:77:d5:7f:7c:6e:0e:83:
0a:a1:53:d0:77:47:44:7a:f2:0f:80:be:70:e3:ab:
d8:34:cf:d9:e6:8f:8e:ad:7a:77:0c:f5:c1:73:1b:
76:95:d4:16:d9:e5:99:5e:c9:dd:94:5f:ed:c3:2a:
cc:5b:34:08:68:7d:16:72:b2:01:19:7b:05:a7:78:
7d:be:d7:48:b0:a0:be:e1:f4:18:03:79:14:65:70:
a3:c2:1a:3b:96:5d:cb:d3:50:d4:86:d8:0c:f0:57:
44:b8:6e:ed:88:df:f6:01:a8:e6:c7:b0:4c:41:15:
1d:d7:fc:75:02:0b:d0:8f:a7:e6:63:e2:1a:eb:01:
4a:32:02:c1:4a:5e:74:57:ee:dd:e9:a6:94:f2:59:
83:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:24:DD:9D:1A:F5:D1:7D:3C:8A:D4:BE:63:AC:61:30:B7:35:15
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f5:6e:c6:bc:d8:12:0d:f9:3f:fc:a0:f1:ae:10:fa:cb:dc:
2d:8a:4f:21:7e:21:d1:a4:ab:38:c9:13:03:43:f9:0a:a8:36:
5f:f6:3e:dd:7c:75:07:fd:be:76:5a:49:3c:46:43:8c:24:b0:
b5:cb:96:a5:33:57:64:e1:82:6e:0d:bf:01:1b:09:da:24:b0:
6e:11:68:14:0c:fd:35:eb:2e:97:e3:43:1b:92:95:ae:d2:9a:
dc:ab:8c:05:cf:5e:6a:e6:e2:2d:6c:6a:cb:04:6f:c1:c5:db:
92:60:1a:7f:2a:b1:36:c9:40:8b:65:3e:df:b2:fb:dc:97:7e:
31:c0:a1:6e:03:82:bb:36:e5:47:95:fc:2a:cf:e8:28:16:da:
e2:07:41:3b:79:27:c1:0b:56:f0:95:59:2e:55:a2:d1:64:dd:
4c:bf:7e:78:19:8d:6d:00:68:bd:a1:dc:f4:36:b0:66:0c:7b:
e0:ac:e9:98:ae:93:2f:7a:fb:88:81:bc:8d:00:30:59:41:3b:
3c:db:32:15:35:2a:8e:1c:80:ef:69:2a:9b:48:1d:e0:8b:07:
92:d0:f1:b0:3c:5c:03:98:cb:42:5c:d5:ce:f5:46:e1:9d:57:
9b:52:3f:19:18:e8:99:26:93:3d:37:6c:18:03:4a:fa:7d:76:
18:b6:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 09:53:24 2026 by rpki-client