Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: nQsyMG/fskgCuszyoOBHDvEni8epRJxLnR1p9Foar9s=
Subject key identifier: F6:FD:60:C7:F3:05:2E:58:DE:57:3F:5A:CD:D4:DD:52:F6:3D:17:E5
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A06E70B39B78D269AB8D2C01141F49868E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 051C
Signing time: Fri 04 Sep 2026 22:01:14 +0000
Manifest this update: Fri 04 Sep 2026 22:01:14 +0000
Manifest next update: Sat 05 Sep 2026 22:01:14 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: Y+qk6i9RmJHZofc7H4vdJmOADtHCtT4NNFzkP8+le64=)
3: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
4: n5blPzAxj6urB6U69h-1_6oKGxM.roa (hash: wVHabnnbMu4awX0MmEHsebkGh6JiyzOhJKMjTxirSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:b3:9b:78:d2:69:ab:8d:2c:01:14:1f:49:86:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 4 22:01:14 2026 GMT
Not After : Sep 5 22:01:14 2026 GMT
Subject: CN=f6fd60c7f3052e58de573f5acdd4dd52f63d17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:c0:33:cc:56:30:bd:07:09:31:8f:89:db:
da:08:87:1b:6b:a6:4b:49:89:e2:e9:e4:94:6c:cd:
38:23:49:8c:13:53:ed:42:20:93:85:52:0f:ef:23:
49:d0:f9:2d:a8:91:ef:ae:8a:ea:bd:9f:d5:f7:f4:
2e:78:b5:f1:a7:f2:0a:9f:da:63:9c:42:6d:c7:56:
8f:02:29:53:bf:3b:be:45:de:b0:88:14:6a:67:42:
ef:11:ee:51:9d:b0:6d:bc:aa:6b:80:7b:f7:5c:01:
ff:70:cc:c7:b8:ad:42:bd:c4:ef:00:07:ef:50:ea:
11:a2:d9:63:75:a2:9b:46:78:d0:b1:3b:22:d8:c8:
ce:ea:fe:2c:5f:dc:82:cb:21:c8:a0:fc:01:01:1a:
c4:7e:af:eb:d5:d7:5f:8c:ea:b5:21:c6:d1:3b:36:
d4:ad:3a:02:2a:60:cb:6c:99:82:31:f5:7e:85:99:
91:ff:78:f7:79:4a:29:69:3a:63:57:36:15:09:b0:
2a:4d:b4:94:c6:07:b3:d4:73:7b:f7:03:10:2e:b8:
24:f2:8a:ef:3f:31:7e:9b:1c:b0:77:6b:41:4f:8e:
32:1f:7b:5d:a4:5c:fd:c3:3e:d0:d4:80:48:6c:8d:
55:6b:92:09:b9:b4:85:00:15:2b:9e:b5:83:f7:ca:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:60:C7:F3:05:2E:58:DE:57:3F:5A:CD:D4:DD:52:F6:3D:17:E5
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:c9:7d:90:25:fe:bb:df:f6:b9:52:14:17:42:d9:c2:8e:88:
50:69:66:61:1c:d3:10:ed:70:2d:4e:a4:8c:74:e3:07:50:12:
81:3c:6e:ae:2d:5e:1a:13:a0:e2:b8:aa:5a:7f:dc:d8:02:65:
a9:c6:e3:5e:23:39:7f:c2:6e:d5:16:df:67:77:b9:ff:e4:fb:
a6:f2:f6:a2:f4:22:28:8a:db:b5:ce:7d:d5:3b:80:13:da:b2:
af:ba:d9:32:51:1d:77:e7:5e:5a:bf:3a:d9:95:46:60:51:b7:
ee:db:af:f6:60:2a:c0:e9:c6:74:4f:fd:45:82:cd:86:ac:ae:
23:c5:e1:b5:23:e9:69:19:92:c4:f5:99:a4:89:1c:a7:f2:b0:
5e:41:c7:02:c6:67:36:25:59:c6:11:35:e2:d8:44:46:05:55:
d2:0c:a5:95:a0:1c:1c:55:02:01:aa:75:b3:e3:68:18:c1:7e:
53:b9:c1:3c:87:19:e8:e2:7d:02:1f:27:62:9a:d0:9b:70:88:
1a:f1:3e:d9:76:1e:89:32:e2:76:d3:00:c5:9c:16:89:0d:ea:
8f:44:45:cf:05:b3:3a:42:01:4a:86:76:f7:2e:97:9e:15:2d:
d6:f9:9a:11:5e:f3:07:64:b3:14:9b:a4:be:52:7b:6e:a3:bd:
16:e2:22:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:10:44 2026 by rpki-client