Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: 1e/+7f9SEKaLPUGcBK8fS+jtyvlk4Dk6sBj8Z3ZrODI=
Subject key identifier: FF:EB:DC:0F:5C:54:C1:92:99:20:09:1B:B0:D6:A1:3E:8C:27:4B:55
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01A1968DB59F7FAB7C57943833CAE183F250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0B12
Signing time: Sun 01 Nov 2026 10:00:31 +0000
Manifest this update: Sun 01 Nov 2026 10:00:31 +0000
Manifest next update: Mon 02 Nov 2026 10:00:31 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: k7qicU6ZtjGoBqIasETp9zriFOvqyHoDFegLUvX6lnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:8d:b5:9f:7f:ab:7c:57:94:38:33:ca:e1:83:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Nov 1 10:00:31 2026 GMT
Not After : Nov 2 10:00:31 2026 GMT
Subject: CN=ffebdc0f5c54c1929920091bb0d6a13e8c274b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:46:e4:9d:b5:bf:73:53:fb:2c:ae:bc:21:
d8:67:05:44:38:7f:0c:f6:15:e2:41:00:0a:b8:59:
1b:a9:35:4c:1f:73:2d:67:ab:e8:94:f2:71:2b:95:
d1:74:8d:b6:b8:31:69:41:7f:c8:87:f8:32:f8:c7:
10:e4:a7:44:c4:60:f9:d6:2b:ff:78:ed:79:ed:db:
66:09:0a:ad:fa:7a:94:9c:e1:b7:07:4e:ab:81:f5:
1b:72:dc:01:ac:e1:6a:fe:ce:d3:05:cd:cf:8d:7b:
8e:dc:37:e1:5d:35:19:1b:9e:b7:01:2d:aa:d3:8e:
35:e1:e6:c1:06:d8:63:93:70:bd:21:c6:4c:8a:7c:
07:bd:c0:13:ed:22:12:9e:94:d3:a9:1c:1e:23:ef:
3d:f6:81:78:43:0c:2b:23:5c:34:ca:03:16:92:63:
16:ad:87:ad:3a:15:b9:d0:af:45:d0:ce:f0:99:aa:
d7:73:cc:7b:b1:1e:7b:7a:10:e3:d7:77:44:7a:d7:
27:03:8a:4e:4c:21:67:17:77:52:39:73:73:57:7a:
50:66:fe:a3:2f:24:40:46:67:b8:30:5f:65:74:39:
69:72:7c:4a:94:2c:01:3c:5c:f9:ce:3a:25:82:b9:
e9:e7:5e:96:e1:1f:1c:3c:f9:9f:da:02:d8:cd:c3:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EB:DC:0F:5C:54:C1:92:99:20:09:1B:B0:D6:A1:3E:8C:27:4B:55
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1c:12:13:ec:4d:4e:9b:5c:52:a9:1f:ba:e1:40:70:9e:3f:
71:41:a8:20:b9:b1:76:a9:7f:a3:d4:f2:ed:2c:7e:e3:99:1b:
5e:da:16:87:f9:88:4f:cb:d2:45:59:92:a1:9b:6c:a3:4b:d9:
ed:24:fc:0e:9f:73:5f:29:6d:91:82:08:38:5b:81:f3:85:c3:
65:d4:5b:73:75:61:7f:7c:dc:55:25:0e:ed:60:55:9e:a1:34:
ff:b9:b0:fc:bd:3d:01:9e:49:73:a7:a7:d5:b7:95:a5:d8:fb:
64:87:d5:46:c5:bb:9a:15:27:20:65:00:fb:1c:2c:3f:f1:d7:
d1:30:95:c2:ad:1f:54:16:2d:31:57:43:97:6d:72:33:68:a5:
c2:7a:71:12:4f:1b:1c:3d:22:09:6d:d0:01:59:a5:9a:eb:b3:
75:54:10:b0:12:58:53:5a:3a:eb:b7:e9:b4:41:5e:e7:c4:af:
fd:2d:c2:74:ee:53:a4:6d:40:60:05:fc:c6:e2:ca:41:c9:d7:
e8:02:50:b5:ab:b8:90:8c:27:4d:32:fa:b8:1f:19:96:1d:10:
46:41:9b:f4:64:3d:c4:af:7c:b9:84:73:c4:cd:eb:4d:47:1f:
f7:66:34:ab:4b:50:0c:d4:04:60:28:d7:42:cd:9e:95:93:0f:
ee:ec:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:52:45 2026 by rpki-client