Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: BjfBwXtWW2gq0sWD/tIRTQ/p+TULrN7M9rny+3jvcw4=
Subject key identifier: 73:5A:A5:37:07:78:22:B1:02:E5:20:27:80:CD:A0:36:EF:FF:CB:4B
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 01A19BB456E3F537B98E12082D3D58F46B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1AD7
Signing time: Mon 02 Nov 2026 10:00:49 +0000
Manifest this update: Mon 02 Nov 2026 10:00:49 +0000
Manifest next update: Tue 03 Nov 2026 10:00:49 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: ZZ6O/SB0xZkIorVv4HlY1H8/cpIhRJqsEKvUgXY2LRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:b4:56:e3:f5:37:b9:8e:12:08:2d:3d:58:f4:6b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Nov 2 10:00:49 2026 GMT
Not After : Nov 3 10:00:49 2026 GMT
Subject: CN=735aa537077822b102e5202780cda036efffcb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:10:48:80:a8:99:88:25:0b:13:ca:46:b7:17:
6b:de:37:09:8f:bc:ad:3c:6b:a4:47:15:71:44:07:
89:7d:f5:b9:77:fa:23:3f:d2:51:80:47:8c:7d:0e:
05:88:79:33:a2:82:11:69:56:39:ce:d8:6d:80:74:
93:fd:d8:f1:e6:59:6c:3d:67:46:d8:0c:08:6e:b0:
32:40:2c:d7:d3:6d:16:b0:3f:57:59:27:5c:c6:5b:
92:b5:7b:45:e7:a7:9c:65:5e:7e:9a:96:4a:22:9a:
f1:f7:df:dc:3d:f0:ff:eb:e4:39:ad:3a:22:1f:96:
fa:23:52:87:ae:be:fb:bc:cd:2c:82:a5:a2:c8:41:
30:62:97:e6:5d:99:97:40:9e:c9:98:6b:bf:bd:25:
1a:96:84:e6:b6:11:29:f2:75:74:37:7b:52:b3:e4:
c3:ab:ca:5b:6f:02:5b:2e:b7:f2:b5:0c:f5:c1:ab:
e6:82:3b:a9:6a:76:5c:d6:74:78:58:c0:5e:c2:ef:
43:cb:00:40:0f:0d:10:f3:b4:ed:03:24:de:19:5b:
9b:10:f8:09:f8:ae:70:a8:9a:a2:86:f4:49:d1:88:
0b:55:96:f3:ad:82:dd:32:fe:c4:bb:f2:74:05:6c:
64:7b:49:eb:de:2a:e2:a4:cd:fd:bc:c6:83:09:40:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5A:A5:37:07:78:22:B1:02:E5:20:27:80:CD:A0:36:EF:FF:CB:4B
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4e:c5:3b:dd:26:28:81:59:bc:b6:9a:c4:91:b0:78:ee:04:
82:7b:f3:5e:f5:02:7c:5d:20:d1:20:5a:ea:d1:8f:d1:5e:67:
e9:7a:01:c6:bd:dd:4c:cd:26:a4:49:ff:79:9c:65:37:64:ef:
58:08:0f:8b:43:ce:e8:43:db:9f:48:25:19:e5:0b:89:23:a6:
ee:26:b7:70:ff:ce:65:31:3c:1e:14:4b:1b:8f:dd:78:60:eb:
b1:c7:ff:c7:31:c6:38:98:fa:ab:95:65:1a:ad:5a:9d:1d:f4:
35:82:d4:3c:5b:a1:b3:d2:5a:9a:83:56:9f:ed:9e:f1:5c:3f:
5a:00:e7:a5:d9:0a:a7:01:21:eb:d1:9d:1c:34:a3:fa:82:ff:
c2:81:13:e4:45:2e:ee:d4:04:d4:98:37:68:83:c9:15:d6:66:
3e:e4:77:81:2d:46:34:1a:1b:f9:42:bd:35:87:1c:fd:72:14:
6f:7f:0d:07:34:75:e9:0e:ce:f9:73:c7:d4:0e:58:75:b3:a6:
28:e9:48:6b:e4:67:46:cf:52:b5:65:d2:44:42:49:b7:45:f3:
c7:5d:d8:c2:94:7f:9d:2b:03:c3:d0:b0:34:30:75:11:61:63:
3d:a2:05:be:7d:fd:3f:fe:f7:e7:34:5a:33:07:2f:63:7c:ef:
23:b1:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:12:34 2026 by rpki-client