Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: GNiSdK/tFSd6AMhs0ue0VqtMxm9GJTTy5sr960CA9oQ=
Subject key identifier: 32:AA:06:52:83:6E:F8:5B:A1:C0:F2:24:2B:CD:6B:52:6E:0D:91:E2
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01A02544EC4F9B65F3E4FD2BFBE667E2EE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1A1E
Signing time: Fri 21 Aug 2026 17:01:08 +0000
Manifest this update: Fri 21 Aug 2026 17:01:08 +0000
Manifest next update: Sat 22 Aug 2026 17:01:08 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: 8WuU2eAkI4CbqbAGTq4UXODP/MJEiJQtK7Rp+m2UX2Y=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:44:ec:4f:9b:65:f3:e4:fd:2b:fb:e6:67:e2:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Aug 21 17:01:08 2026 GMT
Not After : Aug 22 17:01:08 2026 GMT
Subject: CN=32aa0652836ef85ba1c0f2242bcd6b526e0d91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:31:59:79:20:e9:72:6b:da:f5:cc:98:b2:
2b:10:01:46:f0:02:bf:47:af:fc:6a:cc:02:31:42:
c4:59:be:0f:fe:4d:27:c7:86:7f:30:68:b2:47:3e:
52:fa:38:f5:69:67:15:84:aa:b3:1c:c3:60:e7:06:
69:2a:77:45:fe:f0:32:7f:60:c6:c2:04:dc:52:bd:
c8:b0:63:23:1e:54:d3:b1:7d:16:78:ff:ff:16:6c:
1d:f4:d3:90:a6:f3:ed:2f:ba:74:5b:a5:b6:51:e2:
05:25:b4:37:90:e7:02:c3:66:c6:c1:33:63:72:4b:
a3:0a:a2:5f:86:8d:ec:c9:79:55:fb:ba:8c:b6:cd:
e8:e9:d1:41:e2:55:b3:fd:66:80:4f:b7:fb:68:12:
cb:b3:a3:88:12:55:37:c0:75:05:85:c7:61:ba:e4:
ca:59:2a:68:1a:e1:a7:8a:eb:cb:8a:de:d1:dd:c6:
62:b9:e4:b4:38:a4:ea:ce:68:37:f3:23:4e:6e:cc:
dc:69:43:10:58:c2:5a:5e:80:25:3a:83:eb:58:f8:
6f:bb:fc:5a:a2:94:9b:7d:76:2d:f9:6e:73:8c:52:
56:65:ee:23:70:8d:0c:b0:01:10:d9:8f:45:43:5b:
70:58:7f:1b:6d:da:2c:56:fa:ea:e0:72:64:cd:d1:
73:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:AA:06:52:83:6E:F8:5B:A1:C0:F2:24:2B:CD:6B:52:6E:0D:91:E2
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:34:f6:c4:c6:43:f5:b0:36:43:98:97:1b:75:f9:ce:1a:4a:
a4:6a:fa:30:24:8f:2e:8b:b8:95:d0:7d:c2:35:4b:a1:00:24:
7d:94:be:ed:db:f8:33:17:ab:5b:df:3a:a8:04:f3:50:37:c3:
cd:4e:63:50:73:0c:c5:b6:5d:4c:fd:e3:12:e1:ce:d9:bb:e1:
e9:71:87:75:25:32:02:53:b1:cb:8c:7e:2b:95:5b:2b:ff:60:
5e:f9:53:ee:22:72:fb:5f:58:65:a6:66:ff:a7:6a:cb:60:ac:
68:53:32:76:ad:4e:9f:f3:16:94:09:d0:5b:30:1b:e5:36:db:
bb:ee:e6:e3:dd:b8:3a:b7:c4:dd:6c:b9:4d:9f:cf:e9:b4:c8:
93:94:f6:1a:6c:6e:96:29:b0:b6:a5:33:f6:5e:38:3f:d0:93:
52:51:ec:75:1f:00:c4:f2:6b:60:7c:7a:b5:bf:ba:ff:82:9a:
a5:2b:91:24:30:52:86:f2:61:42:50:7b:5f:54:84:cd:69:45:
33:1e:4b:20:36:22:44:4c:4e:04:8b:93:40:7d:b1:85:56:30:
fc:92:dc:c7:1b:63:75:d2:8e:25:b5:53:4f:d0:34:fe:c4:ec:
88:d7:e5:7f:6b:ea:c2:5a:23:b2:dd:e7:f5:fe:16:93:fd:f3:
64:14:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:38:06 2026 by rpki-client