Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: Ky0GDm132iMlVUKaoEMLDME2hznWfCmPM6VHNygzbTE=
Subject key identifier: B1:03:13:02:9D:0C:4C:20:51:AB:76:6F:22:8D:5F:D0:EB:DC:D2:65
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 01A08D56F39C560D312241698A8B01F5A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 22:01:20 +0000
Manifest this update: Thu 10 Sep 2026 22:01:20 +0000
Manifest next update: Fri 11 Sep 2026 22:01:20 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: RjtwmeJKkxzjeBW9gWDPhAGkiSm5lVwJz+lqbR26VHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:f3:9c:56:0d:31:22:41:69:8a:8b:01:f5:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Sep 10 22:01:20 2026 GMT
Not After : Sep 11 22:01:20 2026 GMT
Subject: CN=b10313029d0c4c2051ab766f228d5fd0ebdcd265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:ff:5a:33:1c:d9:6c:62:eb:b2:bb:53:75:
84:78:7f:c1:e4:5a:25:1b:c7:b3:99:9b:56:be:90:
7c:a4:a6:66:8d:b4:62:d3:5a:9c:5e:a6:f0:01:a8:
80:f2:86:98:0b:a3:8a:ab:01:9f:b8:f0:c1:d1:31:
53:d4:46:0a:49:cd:94:bc:42:45:be:84:bd:b8:e7:
33:f5:e2:af:59:53:e4:dd:d0:a8:74:71:9b:52:bc:
24:12:f0:76:38:fd:b1:a7:b3:7a:21:23:50:65:d1:
0a:d1:ec:03:1b:09:f5:78:3c:6b:8a:d8:5b:db:06:
8e:0d:70:fa:96:4e:6e:d8:ec:fc:ce:69:70:2e:d5:
5f:40:75:3b:68:a3:fe:4c:6d:91:7c:0e:d6:45:3a:
fe:b0:cb:be:64:ef:55:68:9a:9a:91:c6:e3:2f:36:
e0:1c:22:5f:8f:ed:21:97:0e:df:14:95:3d:ff:a0:
f6:94:5e:5c:5f:f8:6a:a3:c9:34:dd:0e:40:46:ab:
04:d6:a8:11:8f:da:68:30:ee:8b:9d:33:a7:81:a8:
3e:de:c0:71:d2:7c:0e:9a:06:24:68:e2:5c:4a:fa:
06:2c:52:bb:77:d9:50:80:9f:93:ab:b0:43:8f:f7:
2e:63:ea:da:3f:01:42:3f:41:30:10:84:8c:36:03:
2f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:13:02:9D:0C:4C:20:51:AB:76:6F:22:8D:5F:D0:EB:DC:D2:65
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ba:59:5f:4b:9d:6f:ce:0e:2b:ab:14:09:5d:e7:72:8d:f7:
ff:9a:cf:2c:3e:47:f5:c2:38:63:29:b1:97:8a:9f:43:7d:67:
dc:1a:02:85:b4:2a:a8:16:88:d8:52:7c:9b:5b:b8:18:53:ee:
92:db:f4:f5:9e:87:23:81:57:f9:c8:97:a0:50:d3:a6:1c:23:
d3:68:5d:57:ef:e7:25:7b:0b:57:41:09:a9:14:af:a2:1b:90:
0f:2e:1a:60:9f:1f:71:bd:12:82:d4:4c:e8:06:41:99:86:73:
9a:23:83:c3:96:dd:09:2e:56:97:f3:6c:ec:ac:5d:00:8b:cb:
b9:82:c9:b1:b3:e5:20:2e:a2:68:6e:84:a8:56:90:55:a1:dc:
95:b3:84:df:7d:1e:dc:0f:94:37:db:6a:9b:a8:c0:6c:0a:20:
5b:2b:60:24:16:79:9a:44:63:5b:9d:db:52:5c:27:0c:79:99:
73:51:22:7e:30:18:2a:14:cb:e5:48:83:20:b5:ac:30:cc:e8:
43:e5:a9:88:f5:29:28:1c:63:79:b8:b2:f5:95:95:55:93:ff:
98:f9:8f:51:18:e8:b5:8a:3d:be:9d:04:a5:a4:e5:55:f9:9f:
b7:de:cc:05:7d:37:67:ce:2f:2b:53:52:68:e7:13:8a:48:c8:
bd:bb:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:56:33 2026 by rpki-client