Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: sOtflVGYoWURerFDTXT3w/DdnxYZUJg/xuFY/FiHTi4=
Subject key identifier: 71:D8:A7:6D:0E:21:C5:F5:8E:CD:82:A3:18:03:10:75:4C:18:AE:C4
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01A08C0D3A12C3C60E04AC1DE6DC090785A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0A88
Signing time: Thu 10 Sep 2026 16:01:12 +0000
Manifest this update: Thu 10 Sep 2026 16:01:12 +0000
Manifest next update: Fri 11 Sep 2026 16:01:12 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: 0QciUX/C9J7hXMbK0U8vvJ4Mm21q57f2VfS9pT2JkGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:3a:12:c3:c6:0e:04:ac:1d:e6:dc:09:07:85:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Sep 10 16:01:12 2026 GMT
Not After : Sep 11 16:01:12 2026 GMT
Subject: CN=71d8a76d0e21c5f58ecd82a3180310754c18aec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:3c:9e:90:a0:0d:e6:a0:c8:da:68:5b:2f:
ee:6b:96:ad:a1:d9:1d:a2:06:ce:64:3e:62:8c:cc:
c9:50:7e:c4:39:2e:c2:6f:07:c2:30:d7:6f:02:87:
93:02:d0:a0:4f:6f:de:75:f4:88:3a:8b:6a:93:c0:
7a:77:dc:29:58:fb:5c:08:3b:0c:4a:fc:66:53:36:
f0:25:ed:55:a7:06:c0:8b:ec:81:d4:f1:cd:b9:71:
7c:3d:d1:45:b1:81:36:09:42:28:ca:be:e4:fd:8f:
76:f2:54:65:62:90:9e:80:c2:36:8a:5f:42:48:bc:
b4:80:de:8c:55:c2:af:90:4d:cb:0c:8a:33:2c:c6:
29:2b:8d:16:0b:5f:d3:43:07:2a:e6:cd:3d:a4:1e:
0d:6d:ed:1a:fa:4d:0d:8e:28:9c:b3:a9:33:86:03:
10:66:be:91:91:64:9e:51:3e:b8:f8:b1:cd:08:ba:
35:28:6e:ac:b4:8f:a3:c7:be:c3:67:ec:5c:ef:dc:
91:9b:a3:f7:79:91:84:4a:be:21:04:cc:00:b9:c9:
28:e4:4e:bb:bc:e6:c1:0d:88:93:5b:f1:fe:f8:c3:
cc:68:3c:c6:fe:7d:92:7e:69:fb:0c:fc:7a:cc:9a:
62:33:f1:ed:4c:b4:99:16:dc:86:33:68:7e:bf:a0:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:A7:6D:0E:21:C5:F5:8E:CD:82:A3:18:03:10:75:4C:18:AE:C4
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:50:10:a7:55:83:c1:ee:b5:de:70:2e:ec:9b:1d:66:82:3e:
45:b6:9b:e2:b9:75:85:e5:cf:b1:a6:6f:d1:34:ff:b4:c1:23:
f1:f3:39:81:c3:8b:5f:45:3c:29:f0:e8:72:13:4b:f3:57:c5:
d9:de:bd:63:82:a4:dd:57:e2:58:11:97:10:4b:54:0f:50:5e:
1d:c8:6b:94:97:c6:f6:b4:cc:01:85:c5:64:a3:f5:16:09:0f:
ce:a4:2c:26:f0:3c:db:2c:f9:e9:18:f9:b2:80:a8:6a:ad:30:
a3:6a:40:92:be:8f:a0:56:24:7e:70:c5:71:d7:26:40:db:ca:
db:7f:f7:05:50:1c:7c:d2:1d:c4:2d:fc:b6:9d:39:6a:e7:3e:
58:07:bf:77:dc:df:eb:a5:0d:51:bd:af:1e:4c:ed:db:e8:a8:
9b:bd:70:93:75:b9:9a:44:c0:2b:56:ff:a9:aa:74:e7:7e:80:
9f:99:51:53:34:c6:e5:86:fa:cf:a6:14:67:79:67:c0:f8:8c:
dd:28:73:ae:79:07:b8:8e:7e:c4:ee:5f:1c:3d:42:da:d0:59:
cb:4e:d9:68:2c:cd:6b:ae:fd:c8:5d:35:ee:48:0c:95:62:8a:
df:fa:4d:c6:3c:1c:d2:ed:e7:a3:bc:9e:ff:b5:6d:aa:00:66:
92:f3:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:31:51 2026 by rpki-client