Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
File: U7MsWuoesSCyjxNNrLIARIHOD7E.mft (raw, json)
Hash identifier: t0N4oGgD9sUJuXqw0SRly/zxSWpE++UFGylpkrRPV+A=
Subject key identifier: 1D:79:5D:DA:0F:AC:55:F9:D5:C8:9B:E8:CC:0F:52:9D:AB:FA:45:B7
Authority key identifier: 53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
Certificate issuer: /CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Certificate serial: 01A17D05D8FA9BADBFA420D4689CEC2DF09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
Manifest number: 9A
Signing time: Tue 27 Oct 2026 11:01:37 +0000
Manifest this update: Tue 27 Oct 2026 11:01:37 +0000
Manifest next update: Wed 28 Oct 2026 11:01:37 +0000
Files and hashes: 1: U7MsWuoesSCyjxNNrLIARIHOD7E-hqQU9YRU78t0_oxvZ8ha0_6qAKY-bgpsec-00033d08-00033d08.cer (hash: KBZoZgGurQi9ZK92LEy/zu+SjcrGnYpHdRyEj1/5HKo=)
2: U7MsWuoesSCyjxNNrLIARIHOD7E.crl (hash: dWh0vtf8qVRBoHk2hbIdbin/GHPE8QWBYDtpxdLoCjw=)
3: oP0i5tSjJpPnw7rZtnRJyU5Q4vU.roa (hash: wSIal4fPSrIdhNkTAud1pbA+N7pOXY7jxLrkWLCn7Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:d8:fa:9b:ad:bf:a4:20:d4:68:9c:ec:2d:f0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b32c5aea1eb120b28f134dacb2004481ce0fb1
Validity
Not Before: Oct 27 11:01:37 2026 GMT
Not After : Oct 28 11:01:37 2026 GMT
Subject: CN=1d795dda0fac55f9d5c89be8cc0f529dabfa45b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:07:6a:d6:7d:90:8e:98:5a:09:ab:fe:3f:
96:1b:97:f3:ad:96:f7:d1:9f:92:ee:30:d1:04:51:
be:56:e2:19:5e:65:c4:8d:f6:73:9c:e9:c7:e3:e9:
90:b2:50:41:48:be:ac:b2:d2:5d:f4:5d:14:25:97:
07:e4:c3:c6:ba:8c:e6:6f:31:32:47:13:7b:47:0e:
16:17:a5:50:cc:71:ad:87:cf:7a:b2:5f:0f:df:a5:
2f:34:bf:0f:8e:e8:f3:a5:ff:9f:3d:64:38:f0:da:
36:36:69:b2:35:17:8e:e5:2f:b3:3c:fd:cb:f1:06:
30:35:af:bb:22:82:87:00:bf:b2:aa:ec:e5:52:ad:
b9:c1:14:3a:7e:63:ff:2d:55:5a:f2:8e:ee:27:71:
44:74:c2:2c:1d:a0:53:2d:69:3a:7c:7a:35:0d:fe:
a9:06:a8:ef:18:e9:83:db:e7:f8:a5:4d:f3:86:af:
18:e3:7c:16:a4:89:9b:f6:4d:a2:bb:67:2e:63:84:
65:77:dc:96:21:da:44:d7:b5:d8:77:1e:ea:55:b1:
d7:49:93:f4:f1:f6:80:20:da:98:c9:87:0e:1d:95:
f9:ff:34:e9:6a:41:a7:82:62:56:0f:d7:72:30:1f:
f7:9b:44:d9:73:4c:4a:ca:b6:fe:a1:a9:c6:cc:e2:
58:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:5D:DA:0F:AC:55:F9:D5:C8:9B:E8:CC:0F:52:9D:AB:FA:45:B7
X509v3 Authority Key Identifier:
keyid:53:B3:2C:5A:EA:1E:B1:20:B2:8F:13:4D:AC:B2:00:44:81:CE:0F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7MsWuoesSCyjxNNrLIARIHOD7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0ea2fc-ad5c-4f2d-813f-0cee2c4ca062/1/U7MsWuoesSCyjxNNrLIARIHOD7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0d:ed:e0:29:e1:2e:b1:fd:1c:58:e4:54:18:44:a0:c0:83:
c8:42:23:c2:d4:4d:da:66:33:3f:b0:7b:68:45:99:25:48:ae:
4a:3c:0a:c5:a7:03:de:72:a8:f9:85:86:cf:3f:60:dd:f6:77:
01:c3:7b:9c:af:9b:b3:5f:5f:ae:90:32:67:ab:60:47:a6:d1:
11:4b:1d:a2:04:8e:b0:12:53:89:09:f6:7c:f5:27:e9:77:da:
d5:0b:44:44:69:44:00:d5:16:9f:9e:df:03:e0:01:bc:b6:a4:
dd:73:fc:c6:fc:aa:d0:a3:67:56:54:f9:a1:f8:ac:a6:e4:f1:
87:a9:c9:b4:09:6a:76:69:b7:be:8b:f1:08:06:b1:9f:30:44:
b6:dd:72:34:a1:2c:0e:d1:c9:27:d5:cc:a5:5a:0d:6c:7d:53:
1b:4f:ca:dc:2d:9d:28:e6:92:bf:26:c7:59:71:52:42:60:f7:
39:5c:1d:87:bb:07:d0:6b:66:ab:72:ba:6e:1d:58:4d:7a:17:
51:1c:74:8e:f3:7b:69:1f:db:7f:67:f3:55:f4:02:87:e9:d4:
bc:05:65:80:5c:f6:0a:12:88:37:8a:6b:6d:89:f7:6a:cd:a5:
6b:f3:7e:8c:4b:a5:41:3b:a7:c7:81:d2:35:5c:55:d2:c8:45:
5b:dc:5c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:22 2026 by rpki-client