Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: Jzfz11Ufi7NFDvjpHCS5sQJBlXDLJMm49noZlDYNqMs=
Subject key identifier: 69:D7:A3:BB:B2:FE:6A:5C:0C:CD:C8:9D:D7:2A:D5:11:39:A4:F9:00
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01A089429E2FB5A3A4868AB0995F0EB57CBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 03:00:39 +0000
Manifest this update: Thu 10 Sep 2026 03:00:39 +0000
Manifest next update: Fri 11 Sep 2026 03:00:39 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: UJam8Uf1s5e7fUCZ7TgWFJB6W8N3ow0AHC2SBXFbH2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:9e:2f:b5:a3:a4:86:8a:b0:99:5f:0e:b5:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Sep 10 03:00:39 2026 GMT
Not After : Sep 11 03:00:39 2026 GMT
Subject: CN=69d7a3bbb2fe6a5c0ccdc89dd72ad51139a4f900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:94:6c:a1:d7:cf:d5:d3:d0:05:93:0e:aa:
11:c1:45:60:48:52:a2:e2:bb:ea:78:33:8f:b5:c1:
2c:03:f5:89:8b:5d:c6:85:89:39:07:b3:5b:c4:ac:
6e:74:da:2c:52:0e:6c:4b:07:8b:55:78:c0:44:5f:
c5:c4:26:0f:9c:75:03:14:6f:fd:e9:a8:50:15:88:
d3:d7:cd:9d:f3:07:ec:c2:ff:e0:3a:9d:28:e5:7b:
c0:ab:23:c6:7f:5c:d3:d8:69:cb:ea:d6:6f:6b:e9:
9d:27:41:28:8b:97:0e:77:cc:d1:af:1a:79:99:28:
f1:4d:1d:b7:25:a6:1c:eb:87:be:f3:47:5f:82:61:
4e:e8:8e:94:1d:36:86:15:fd:ac:e0:85:75:5e:c6:
b0:82:39:82:73:18:a2:ac:3f:04:81:d8:2e:51:44:
75:36:9b:75:aa:2c:c7:cf:fa:96:83:fd:6f:f7:ef:
4f:63:50:72:a6:d8:82:b3:fa:37:7d:a1:b5:fb:85:
28:9c:f1:3a:1f:65:6e:d2:90:03:59:78:4f:29:b8:
6d:f2:a9:53:68:ed:c9:9a:79:2b:c1:e1:8e:17:e7:
9e:65:d1:88:c4:b0:7d:47:df:76:9d:29:e7:08:e7:
f0:79:29:4c:a4:f6:af:79:71:52:81:fa:4e:4b:b7:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:A3:BB:B2:FE:6A:5C:0C:CD:C8:9D:D7:2A:D5:11:39:A4:F9:00
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:de:8c:fa:94:21:b7:e5:00:28:5e:59:c8:7b:f7:88:72:89:
8b:bf:04:02:b5:24:d9:5f:87:44:f5:22:43:2b:68:c7:a1:f3:
15:8d:31:95:6c:47:e4:62:61:41:63:43:d5:cf:57:3c:9b:7c:
13:b7:cc:d9:b4:8e:08:c3:5b:23:01:bf:f2:6f:22:c0:28:5d:
84:0c:44:fb:4c:5d:a9:8e:8e:10:9c:9e:b6:ef:4a:df:72:86:
34:0b:2a:23:33:b1:16:40:21:02:60:ca:57:ab:67:74:42:af:
a4:0d:6c:ea:1a:d7:0a:f2:82:0a:12:ad:90:56:6a:4d:38:19:
c5:83:90:2e:d1:06:e1:12:30:df:93:81:6c:c8:b0:86:63:7d:
4d:ff:ab:95:00:66:05:61:00:40:bb:a1:bb:d4:5f:9b:86:33:
60:93:2f:56:bd:a7:f0:d2:d4:b3:46:fd:dc:54:da:c9:5c:7b:
e5:6c:91:0a:6a:19:6a:ed:f6:64:0a:93:3c:35:68:41:f1:d4:
23:0e:6c:98:b1:4f:2b:b4:76:9e:f5:ae:2e:9a:ae:85:94:dd:
fd:b7:bf:d1:7d:4c:f0:18:f5:4b:e7:53:ad:03:b2:bb:6c:70:
f4:b3:d9:99:00:60:e9:41:fb:2c:0b:0c:92:b6:36:ff:18:95:
4e:f8:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:23 2026 by rpki-client