Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: P4f1bwbQt5v1VzMand1dMxEobhQh58FmTiWOHn1ZE6Y=
Subject key identifier: 72:43:BC:60:00:DD:36:4F:8F:60:83:5D:21:52:68:5A:7D:67:D2:DC
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 01A1803D9333E76BC61D2EFC0BD9D93FFCE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 1854
Signing time: Wed 28 Oct 2026 02:01:21 +0000
Manifest this update: Wed 28 Oct 2026 02:01:21 +0000
Manifest next update: Thu 29 Oct 2026 02:01:21 +0000
Files and hashes: 1: G-yw8d4tGfvu1V1RtqHrB0f1A7w.roa (hash: FCGFh2yYxIfN7yEpFKXYoDozhL/55pv9VOGSxlFFrP0=)
2: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: WmzbbyPXftlia8q1Nhegd5x20n91aGgk2oJcPxdUw5s=)
3: Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa (hash: 3dKfDLWPx4SPhtrGmyl80Hv9zqYxVlUTJ6doGiqefpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:93:33:e7:6b:c6:1d:2e:fc:0b:d9:d9:3f:fc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Oct 28 02:01:21 2026 GMT
Not After : Oct 29 02:01:21 2026 GMT
Subject: CN=7243bc6000dd364f8f60835d2152685a7d67d2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:47:4e:38:d9:89:cc:a7:da:bd:5c:d3:96:
71:79:2b:31:b8:dd:ff:49:80:db:0a:4a:40:36:43:
67:8b:8a:a1:8a:13:f9:82:ad:54:fd:c5:17:af:1c:
d5:fb:e9:35:ce:cc:b6:9e:77:51:18:b3:fe:a4:10:
cc:86:f5:05:3f:7c:14:bd:9f:18:16:fc:b6:34:30:
db:83:4c:9f:58:7d:0a:19:da:68:69:21:12:27:ce:
7f:f1:0e:f8:8c:69:5b:66:98:77:a2:de:42:2a:a9:
c8:9f:34:a2:dc:14:94:cc:23:43:3a:c3:8f:e3:ae:
c9:1a:89:4a:30:45:10:71:9a:ae:70:94:b0:bd:0a:
62:94:04:6f:05:19:bb:7e:33:37:a1:f2:b6:5c:bd:
6d:d9:14:27:ec:bf:39:0a:f3:18:35:1f:c2:2c:f3:
30:df:d4:94:dd:94:c0:6c:80:cb:2d:ee:6f:d4:61:
2e:2d:d7:88:5e:80:6a:e4:81:5a:13:cb:8c:d1:46:
92:b0:f6:4b:a4:0a:1b:16:51:eb:4d:48:28:32:ef:
3c:7a:d3:fa:2b:11:32:0e:53:26:a8:e8:bf:95:d7:
5e:d8:a5:fa:50:3c:01:ec:c6:59:d1:23:f0:02:a7:
b5:ec:6e:1d:9c:45:93:51:8a:ed:b5:0f:bb:40:d7:
dc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:BC:60:00:DD:36:4F:8F:60:83:5D:21:52:68:5A:7D:67:D2:DC
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:36:c5:00:d1:25:dd:8c:53:a2:ce:1a:d5:ae:aa:a1:ae:99:
c5:73:4b:09:4d:e4:d8:38:40:26:8b:5d:c1:bd:75:82:d8:aa:
d6:a5:50:d3:5b:f9:c1:47:b6:47:b1:e2:18:b6:50:d4:af:a8:
ea:e8:45:c3:2c:d2:a6:b5:5d:21:de:5c:3c:58:b8:d3:a6:14:
b0:66:4b:c9:4e:b0:03:d9:8c:40:2f:09:46:8c:55:df:ec:2b:
d5:7b:33:33:7c:c0:4f:db:43:e4:b8:66:49:39:b7:d5:4a:9c:
84:78:46:a2:3f:39:75:1a:60:44:12:a8:fc:6c:ac:d3:68:0b:
c8:84:6b:97:72:fa:45:c5:bc:f8:66:b1:44:cd:4a:a8:53:5f:
5c:80:ad:fd:ac:1b:e3:52:53:12:fe:ea:e3:b0:c6:80:9a:e2:
c3:82:31:7c:5f:a7:15:82:0e:b9:e3:ff:dd:43:6c:f2:73:eb:
92:37:79:93:ec:51:37:25:ae:1d:c7:f9:7b:c2:f2:1f:b2:e2:
a4:18:ac:d9:3c:6c:be:52:a8:c9:b7:51:0e:47:78:b9:fa:c7:
88:83:5c:bb:56:69:b0:15:7d:0f:a1:b7:8a:48:d5:95:ae:7d:
be:36:98:2e:12:c4:70:61:8c:99:99:d6:78:9a:28:1a:da:9c:
61:f5:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:54 2026 by rpki-client