Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: eF0HhjL21Nx1TXAv5iDcenHtip2KppYd39VF2AZ8xVg=
Subject key identifier: 58:33:61:F1:52:7E:1A:2B:12:88:D1:E1:EA:6C:57:C1:51:F7:89:65
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A17100E8D5A1AFD53333B7C2738ABC9F12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 05A2
Signing time: Sun 25 Oct 2026 03:00:47 +0000
Manifest this update: Sun 25 Oct 2026 03:00:47 +0000
Manifest next update: Mon 26 Oct 2026 03:00:47 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (hash: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: HFCBszY5q4MDncRaoam8IrS2KWc1zTKWRMWjK/2tmTs=)
4: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:00:e8:d5:a1:af:d5:33:33:b7:c2:73:8a:bc:9f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Oct 25 03:00:47 2026 GMT
Not After : Oct 26 03:00:47 2026 GMT
Subject: CN=583361f1527e1a2b1288d1e1ea6c57c151f78965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:38:78:9d:86:e5:e0:d3:7b:05:18:04:b9:
e2:87:4b:b8:64:89:31:ee:94:0e:d4:5c:af:06:8e:
be:07:32:7b:af:17:7d:56:0b:e8:b1:6c:56:01:84:
7e:4b:70:1d:e1:37:77:d7:41:48:f4:7b:24:33:39:
83:be:76:82:85:b1:9d:16:b6:a7:21:0f:e3:d6:58:
7c:7d:0a:dc:5a:d5:29:91:04:1a:1e:7f:49:18:dd:
73:9a:a8:f2:17:ee:18:db:54:a7:01:ae:d2:2d:39:
cc:38:32:98:28:69:52:40:97:1d:8e:18:f1:f3:43:
a2:ed:63:17:93:54:2c:c7:c5:31:65:b8:58:7a:bd:
13:bb:eb:c3:8e:3f:de:98:50:23:ee:bf:16:be:01:
48:ee:36:1e:52:ee:b3:65:b7:d8:a1:20:0e:6b:25:
28:cf:19:f7:29:63:4a:84:21:eb:f8:b2:3b:e8:c4:
36:40:1f:b7:be:2e:67:a1:26:fa:a0:39:92:b9:fe:
f2:32:92:30:4e:80:af:7f:19:e2:a6:d4:5c:89:b8:
1c:46:40:af:f4:4d:e0:94:1d:e0:a0:3b:f3:6b:6a:
ce:b0:f5:83:39:bb:b3:b5:ab:90:1b:94:d3:10:f4:
be:16:53:6f:fe:a6:f8:30:8d:2e:98:30:37:66:f5:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:33:61:F1:52:7E:1A:2B:12:88:D1:E1:EA:6C:57:C1:51:F7:89:65
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c0:4a:f3:7a:22:5a:25:41:4b:c0:ef:f4:3b:b4:44:f7:51:
45:33:9a:da:df:af:d5:9e:7f:d6:8a:2f:f3:d2:43:86:44:a1:
57:1f:0b:c5:71:bf:ae:4d:5f:a3:4a:91:1b:29:ea:b0:48:3d:
df:54:e4:6e:33:be:b7:60:6d:24:79:fd:c5:56:59:88:2f:55:
b3:a1:df:ab:42:1d:ba:24:84:1b:dc:ba:13:6b:fb:41:95:1e:
12:2c:43:e3:d8:72:f5:42:9d:2e:b5:79:20:57:53:b3:8b:0a:
21:82:b8:f5:81:c9:e6:02:73:7f:77:7c:90:89:85:16:a7:c1:
e5:b5:b0:13:f9:b2:2c:21:e8:c2:0f:ce:32:d7:dd:f7:0e:d5:
54:ba:fd:87:60:e1:1e:08:b0:56:0a:0a:06:ec:b1:ea:db:d4:
d5:57:ef:02:6a:95:3f:77:59:84:16:18:e1:bd:a5:1c:20:ee:
3c:ee:52:d2:e1:25:05:5e:ae:b9:47:b2:20:94:fd:92:73:12:
8e:40:26:33:0e:8a:07:93:51:a7:37:ab:f7:f8:c2:62:1f:d5:
84:97:75:a0:fd:cf:69:23:c0:87:08:f1:fb:6f:24:27:3e:10:
03:a8:02:42:bc:dd:70:6f:67:49:f6:f8:bc:ef:88:4f:68:b1:
21:0d:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:14 2026 by rpki-client