Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: NcEC6HXif4jARHfOEWhMzimT/Gtc44o7Rh9VDn7iNr4=
Subject key identifier: 1A:A3:93:D7:E6:4A:5F:08:CA:9C:B0:45:DD:C4:10:11:7B:45:0C:30
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 01A175B9575C6BC48B9A259DE3EB666A05A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 01:00:43 +0000
Manifest this update: Mon 26 Oct 2026 01:00:43 +0000
Manifest next update: Tue 27 Oct 2026 01:00:43 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: xM5h0o/KlyJkTAEeFziq8KjqprT7DjK/cWlnb//SdnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:b9:57:5c:6b:c4:8b:9a:25:9d:e3:eb:66:6a:05:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Oct 26 01:00:43 2026 GMT
Not After : Oct 27 01:00:43 2026 GMT
Subject: CN=1aa393d7e64a5f08ca9cb045ddc410117b450c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:63:3f:f7:55:9f:3a:1a:66:2e:c3:4d:73:04:
d9:59:12:d9:63:a2:36:70:37:c4:f7:5c:f3:ff:e6:
63:2b:81:38:9c:e7:64:54:e3:ee:a8:e7:04:20:f8:
35:59:09:5c:02:a9:6d:d2:0c:6d:2e:0b:8d:17:71:
0e:56:7c:fe:f3:36:3d:ec:c3:eb:82:0f:85:74:09:
7d:28:68:ae:9b:0f:5e:97:e7:a9:6c:4e:bd:00:e9:
46:a4:ca:ba:d2:fe:78:dd:9d:ab:2d:b3:fe:6c:69:
41:de:8a:d5:fb:b8:ab:35:71:a3:e9:71:47:df:f6:
d8:fe:47:75:8b:ea:03:25:7e:4d:25:d8:33:cc:38:
8a:19:b3:72:13:54:1d:6e:81:38:21:c5:5f:c1:fa:
d2:6c:16:3d:03:63:e6:f9:de:03:ca:7f:84:63:68:
ec:77:05:5d:bf:d0:70:dd:99:bd:1d:24:c1:2b:d4:
6d:6b:6e:90:e0:c2:ba:0e:a0:51:05:b4:5d:4e:4d:
e4:27:3d:83:9e:ca:5a:37:62:3c:c4:dd:45:ca:3d:
9e:74:ed:7c:24:42:93:1f:14:1a:3f:f3:3f:3e:06:
ae:08:8c:85:70:79:ff:74:07:d3:d0:aa:b8:30:59:
79:9c:cb:95:ea:e3:50:85:f7:9f:60:34:49:e1:34:
ab:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A3:93:D7:E6:4A:5F:08:CA:9C:B0:45:DD:C4:10:11:7B:45:0C:30
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:35:98:f0:61:02:51:ab:6d:ef:e7:24:e3:e1:ad:f4:86:bb:
1f:38:0b:bb:d0:4c:21:34:f5:bf:10:01:73:ab:a3:76:41:77:
8b:bc:3f:b4:d7:35:2a:29:84:a2:0d:6b:03:7e:54:0b:75:e2:
52:00:6d:7a:75:72:52:d1:1d:f8:a6:7d:83:ac:2f:c9:d5:fa:
b8:8a:b4:b2:af:15:48:52:a4:e8:62:49:60:df:45:ec:83:70:
7a:ee:22:2e:97:42:54:33:ba:0c:32:bd:f5:55:8e:94:92:8b:
0c:1a:1d:5b:a2:6d:9d:57:2f:24:ea:63:64:74:93:f5:d4:71:
44:02:5c:19:2e:39:3d:83:b9:90:d2:5d:f0:a9:64:86:ab:d9:
43:08:bf:e4:ea:f1:c4:a1:1a:8b:95:95:a2:a2:1d:5d:fe:e7:
81:f4:b9:34:e1:db:b9:8a:13:35:89:76:7e:14:9f:4e:ef:e9:
07:11:cd:19:cb:ec:0b:d7:f8:99:48:3c:f9:9c:62:a3:0c:95:
7d:36:3c:a0:ab:fd:82:88:ee:fb:77:b5:32:48:9c:00:4f:bd:
0d:21:39:d1:40:17:9b:04:1b:c8:6d:0e:53:44:1c:ed:0d:4f:
bc:4b:16:77:2a:9b:23:5a:02:9a:56:62:2d:a2:10:59:b1:35:
e4:9e:0e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:38:06 2026 by rpki-client