Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: PEzUGIH6dBBARnlP5VSO/4Ddtg+++d9DvkTfJAgG+L0=
Subject key identifier: 36:F9:85:01:19:56:6B:F5:10:6A:17:E2:50:3C:F1:F5:60:79:DB:8F
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01A129FA5A9BFAD6FE82DB8C592DC197B04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1AA5
Signing time: Sun 11 Oct 2026 08:00:35 +0000
Manifest this update: Sun 11 Oct 2026 08:00:35 +0000
Manifest next update: Mon 12 Oct 2026 08:00:35 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: VAJPeeKVqXMAfSZuVUsyB2nKzdxuwiGtqnODT/XsViY=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fa:5a:9b:fa:d6:fe:82:db:8c:59:2d:c1:97:b0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Oct 11 08:00:35 2026 GMT
Not After : Oct 12 08:00:35 2026 GMT
Subject: CN=36f9850119566bf5106a17e2503cf1f56079db8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:75:11:84:b3:47:34:1c:86:a5:f6:d2:62:
4c:18:54:87:1d:83:b6:c0:d9:09:b7:b5:94:0e:83:
04:25:e8:f5:64:fd:3a:17:38:63:41:32:d5:8f:81:
ca:30:cc:aa:e2:38:a2:63:bb:99:e8:76:54:18:f1:
dd:b5:23:c3:37:c1:b6:9d:f6:b5:1f:20:d8:b3:c9:
c8:b1:07:05:dc:78:6a:ca:94:f3:b5:33:b1:91:fa:
89:c1:f7:6e:30:03:bc:02:6e:ad:c1:27:bb:94:ec:
34:9d:74:35:a1:88:8d:77:94:6b:63:8c:9f:f1:4d:
f5:97:c2:4b:27:ab:33:e0:e1:11:2a:fd:f4:b3:d8:
64:7e:22:d4:43:0d:b8:b3:d8:42:ea:0c:5d:9d:a0:
f6:58:52:91:6e:70:9c:de:5a:bf:2e:47:88:06:ba:
dc:53:56:25:53:1d:ee:4e:f2:a9:c1:06:41:69:b6:
ce:72:38:31:a0:18:62:ce:a0:b8:32:2a:2e:32:82:
4c:b7:d6:b5:8a:c3:ad:71:26:41:ab:56:b7:92:82:
d5:26:1a:40:2c:ca:6d:24:90:5c:2c:26:37:9d:f6:
6f:85:00:41:db:c7:7c:f5:51:08:31:64:26:22:14:
e3:b9:67:ea:8f:47:b2:c8:85:50:91:94:ee:7e:c6:
04:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:85:01:19:56:6B:F5:10:6A:17:E2:50:3C:F1:F5:60:79:DB:8F
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:c4:5b:18:9a:fb:4f:14:bc:1e:cc:8e:16:e5:e0:4c:51:
38:0b:50:cd:d7:6f:5d:ad:e9:68:91:44:69:c0:d6:53:88:82:
a9:af:87:07:f5:ab:ab:fa:cc:d7:21:86:dd:16:78:de:64:bd:
76:27:1e:6c:8a:96:32:c6:57:12:7c:64:d9:45:51:ea:be:14:
74:a1:f0:c7:c2:7f:93:e3:72:6f:db:a0:a0:14:4e:98:4b:81:
0a:e0:63:6b:15:ba:7e:92:1c:36:4d:44:76:90:bb:2c:b0:b9:
d4:76:86:48:f0:f0:d0:ab:73:dd:b0:0a:9f:8f:7f:e7:7c:1c:
08:3e:d0:fc:41:d4:78:4b:04:3f:39:45:b5:7f:86:cf:72:88:
c7:5e:1e:6d:b6:69:f5:a7:3f:31:82:13:dc:1b:70:d1:2a:f5:
07:42:0e:92:97:81:2d:8a:f6:4e:21:5c:d0:dd:1f:f1:f2:81:
9c:f2:b6:4c:51:aa:66:2f:af:6f:3e:30:e4:c7:be:da:b5:b3:
aa:ee:9e:cc:8d:44:9b:8d:2c:48:71:d2:c5:24:70:df:5e:66:
a6:31:ca:33:28:81:31:ee:36:a0:45:a3:7e:12:e6:2a:2a:43:
83:ae:08:f3:87:61:d4:71:f2:73:1e:bc:bc:b1:5c:53:c4:31:
60:dc:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:00:43 2026 by rpki-client