Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: 4IH+Ue7tTQmFSjuDhag/FN3mTzB4//R+iAoykX5HB/s=
Subject key identifier: 9B:0A:81:49:CD:FB:11:92:8A:1B:48:51:83:34:74:C3:1E:98:5F:10
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01A17E85EB35102E500A4DD5D50CCCD795C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 18:01:07 +0000
Manifest this update: Tue 27 Oct 2026 18:01:07 +0000
Manifest next update: Wed 28 Oct 2026 18:01:07 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: V+u0p7Xz3YqeqFwmbRRRSgUS7qpM6fNQa9/puvn/hjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:eb:35:10:2e:50:0a:4d:d5:d5:0c:cc:d7:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Oct 27 18:01:07 2026 GMT
Not After : Oct 28 18:01:07 2026 GMT
Subject: CN=9b0a8149cdfb11928a1b4851833474c31e985f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:f6:75:24:30:c5:20:45:33:66:32:9b:8e:
89:14:10:fb:96:c5:29:cc:62:4f:fc:a9:3a:72:c7:
e0:4e:c7:d1:f8:3e:50:9a:f4:a6:5a:6a:1d:43:57:
be:e4:95:8d:f2:d3:c4:27:90:f1:ab:79:84:b9:a9:
4e:40:97:51:70:1f:17:57:f0:f0:ba:e8:b8:30:c8:
68:db:fa:77:77:d1:d2:39:f8:e1:3a:1f:10:76:e6:
e9:fc:19:75:55:ca:2e:a3:06:a9:55:0e:99:b3:34:
2f:1d:ad:ff:6b:d7:e3:7c:09:bc:8a:b4:64:34:bf:
36:6c:8c:97:aa:98:e7:8b:2d:b4:59:d8:f2:d1:7e:
53:73:55:22:1d:75:83:1c:10:bd:c6:ee:8a:51:c6:
70:90:6a:e7:e6:fd:6c:5c:1d:b7:3a:c7:a2:7d:e5:
fb:b4:01:ab:3d:cb:c9:c5:0c:f1:c9:71:90:23:d8:
25:1b:b9:7d:cc:ef:90:1e:51:f1:40:cb:99:14:ba:
1c:99:f1:a2:0a:b9:df:2d:4b:36:2a:ae:fa:c8:99:
cc:7d:41:c1:3f:b3:25:3f:76:96:01:34:af:9d:5e:
00:15:95:0b:ac:c0:00:ee:90:a0:12:ee:cb:4f:1d:
26:10:26:43:d4:37:5e:95:4d:da:9e:cd:8c:8c:68:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:81:49:CD:FB:11:92:8A:1B:48:51:83:34:74:C3:1E:98:5F:10
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:0e:2a:3f:a8:e9:0b:81:20:1c:a6:9b:c7:bf:8c:b2:4c:5a:
4d:6d:0a:ee:01:8e:4f:d6:da:ca:7d:db:2d:95:14:03:bc:cd:
6d:a8:68:12:c5:05:9b:98:4b:f9:cf:fa:94:8d:2e:74:1b:10:
66:37:91:42:fc:b5:3e:57:46:83:41:de:32:46:53:18:0d:0b:
77:62:6f:e5:4d:f8:1b:1a:22:6c:15:b5:a3:5c:fc:9f:f6:69:
61:7b:c9:a2:19:5f:11:fa:85:bd:7f:b7:c8:a8:f7:20:bd:9a:
b7:10:20:cd:83:b6:9e:b4:39:8d:d6:c1:7e:9a:03:fa:00:b7:
e3:e8:47:e3:9a:c1:8c:18:95:07:c9:19:30:8f:58:f1:1c:2a:
a0:50:05:be:a0:7a:85:b2:fa:e9:59:aa:a1:c5:34:74:1b:dd:
42:e3:5e:f9:fc:8a:f1:65:38:b1:1e:64:7a:06:63:be:df:6c:
ae:18:8d:ec:57:91:94:35:79:c3:d8:7e:7f:51:23:70:84:a0:
54:44:0e:83:d3:94:b9:f9:d0:b6:6a:cc:c3:52:3a:38:1f:b3:
18:b8:45:fc:a2:81:5b:dc:ed:dd:e8:05:68:43:49:b5:bd:a5:
82:6d:e9:18:be:73:da:30:5d:32:e6:2a:d9:db:cd:47:41:70:
09:41:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:54 2026 by rpki-client