Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: gxBgVc3W7t0/NmK0/8LSIYWwJ5y3Iw6SFqAycQscGUw=
Subject key identifier: EE:42:BC:7C:AE:3F:B3:1C:C1:0F:A8:1F:95:0F:7D:B9:01:D4:A4:68
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A18186F1E056183F5FC522FE1E3B144F95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 08:01:06 +0000
Manifest this update: Wed 28 Oct 2026 08:01:06 +0000
Manifest next update: Thu 29 Oct 2026 08:01:06 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: h7t7aY4uQnoFmYHTiYv9u8O0uX8u8jZDa1t3R1bMOVU=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:f1:e0:56:18:3f:5f:c5:22:fe:1e:3b:14:4f:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Oct 28 08:01:06 2026 GMT
Not After : Oct 29 08:01:06 2026 GMT
Subject: CN=ee42bc7cae3fb31cc10fa81f950f7db901d4a468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:91:02:22:d6:00:63:8f:81:fd:16:47:54:01:
20:6d:9d:1a:ea:df:99:51:4e:3d:cd:d3:88:3e:9e:
02:1f:0d:93:a6:01:3c:51:ee:18:66:c7:97:f5:50:
92:78:c4:fa:5a:10:38:f3:45:77:75:0d:b2:4a:e2:
3a:36:8c:65:bd:73:7f:74:f7:fe:01:48:ab:cd:94:
91:1b:af:8c:66:f8:aa:fe:b3:36:b8:14:09:80:fa:
fa:50:cf:86:41:69:c6:2c:79:ed:bb:a3:81:e8:40:
dc:23:62:fa:2f:24:61:7e:1c:6f:0d:ee:80:69:a9:
e4:f4:44:bc:f7:e2:83:88:1e:e0:1d:e0:bd:38:60:
20:66:c0:9b:2c:07:7d:c3:09:66:d5:e0:ca:27:84:
aa:8f:a8:0d:aa:88:59:77:69:fa:fa:18:08:7d:f3:
36:be:67:e2:79:a5:ea:8f:1e:58:e3:67:83:0c:c4:
96:e4:76:35:6b:73:26:18:75:97:85:52:1e:8e:07:
44:c4:86:48:84:76:69:bb:f4:34:3f:9e:7d:3a:45:
f8:1c:1b:8b:6e:93:2a:a2:25:4a:fc:7f:02:93:72:
ed:56:86:57:eb:29:ab:ac:28:28:67:a6:18:a9:4e:
08:40:f0:2c:d0:41:20:23:6e:40:c9:55:a0:26:42:
da:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:42:BC:7C:AE:3F:B3:1C:C1:0F:A8:1F:95:0F:7D:B9:01:D4:A4:68
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d7:b7:c6:3d:65:04:56:dc:59:ff:ea:2d:4d:e0:96:56:97:
f3:88:1d:2c:4f:58:bb:e5:14:8b:3b:0c:9c:81:09:72:14:d4:
b7:ec:9a:fa:c6:e0:8c:65:17:c4:a1:b6:0c:86:12:a6:58:20:
77:92:88:1f:10:d5:c7:35:94:ef:b5:44:7a:9c:b0:3f:20:2b:
5e:ce:2c:be:42:82:48:4d:1b:0d:e9:7a:53:10:b6:26:41:30:
a6:8c:58:7a:48:40:35:7c:bc:1c:a0:3c:5e:70:d7:f7:92:6c:
f6:7b:5a:71:56:71:37:e4:5c:55:9f:35:f2:08:1f:8c:d7:b9:
f5:11:77:01:26:c3:bf:db:b2:5f:c5:66:ba:8d:8f:62:7c:23:
5e:18:07:ed:a3:8a:b6:92:9b:48:65:66:ae:e6:cb:8b:6d:0f:
f9:c0:a1:b1:80:5a:85:42:e0:56:81:05:07:be:fd:34:e1:c0:
06:40:1d:41:d5:02:73:67:09:d4:c0:7d:fe:0b:94:c2:db:d8:
4f:38:2f:4b:e9:6d:12:33:6c:6a:8d:a3:0a:9e:ed:91:e6:a2:
8a:96:c7:d1:50:a1:f6:77:d2:40:b4:38:39:4e:2b:00:01:de:
8a:19:af:85:55:6a:fd:3b:a7:e8:d1:22:22:51:e7:fa:73:ee:
60:e7:77:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:28 2026 by rpki-client