Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: s8BPeBC7FO510u8Eq89M0PRZ5v5kuY4WvJ8pNEu56EI=
Subject key identifier: D1:38:E9:99:0A:39:9E:59:3F:AE:20:90:CC:CF:6B:D0:A8:6E:A3:EA
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A08C43A941CB7BACD3150C450A784E78B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 17:00:39 +0000
Manifest this update: Thu 10 Sep 2026 17:00:39 +0000
Manifest next update: Fri 11 Sep 2026 17:00:39 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: 7mWBfN9iHmdEQcoDwMDDbeyoORdq3Cw1xqfn2U/5tWA=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:a9:41:cb:7b:ac:d3:15:0c:45:0a:78:4e:78:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Sep 10 17:00:39 2026 GMT
Not After : Sep 11 17:00:39 2026 GMT
Subject: CN=d138e9990a399e593fae2090cccf6bd0a86ea3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:bf:72:12:6b:bf:97:a8:ea:b7:19:a8:e1:
33:ff:63:7a:84:85:9b:fd:bc:b4:e2:c2:4b:29:5c:
38:50:30:81:2c:cd:ea:b1:36:3f:9d:61:a6:c6:b6:
4f:26:de:49:f7:4e:b7:ce:a3:cc:78:3d:85:df:c4:
63:95:03:6a:cf:72:d0:05:68:cf:13:37:0d:36:fb:
60:5f:8a:60:f7:a6:06:66:e6:00:5d:dc:b0:b8:f4:
01:64:3b:42:47:f4:a3:47:7a:cf:8e:2e:f9:3e:f5:
99:43:83:23:88:30:8c:b7:79:ca:d7:c0:a6:a8:1f:
7d:2a:53:df:db:72:79:17:64:47:cf:f7:3d:c2:58:
32:f4:69:7c:a5:0c:ab:9f:48:1c:ab:0f:25:02:02:
3a:75:3f:fa:fa:37:82:8b:35:6a:8b:3e:94:b3:62:
ee:c6:d4:ef:76:63:0c:6e:75:3a:6e:ac:3d:2c:dc:
aa:f7:39:0c:61:a5:b6:3e:63:06:49:a4:28:7e:32:
2a:15:4a:ac:29:63:fb:1d:a7:10:35:af:20:45:9c:
55:e4:58:28:10:d3:b9:45:f9:41:ba:4b:f5:fd:da:
0e:34:8c:ad:f6:09:b6:ab:81:44:4d:a9:6a:d7:c1:
65:a0:8e:b3:84:bb:8f:98:a6:a9:45:02:4f:db:77:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:38:E9:99:0A:39:9E:59:3F:AE:20:90:CC:CF:6B:D0:A8:6E:A3:EA
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a5:b1:49:7f:df:de:94:9a:7a:12:bb:6e:79:fd:b8:aa:8a:
55:19:3f:47:df:ec:41:0f:e2:ee:ff:67:d0:9d:60:94:86:5a:
4e:5a:6e:37:7f:5b:a7:09:52:09:53:8f:22:ed:bd:d8:40:09:
8f:65:c4:84:17:81:20:2e:e1:ae:1a:9f:00:59:84:87:4e:d9:
b3:d4:8e:07:96:c9:a6:8a:d4:6b:83:84:13:a5:b9:27:f9:80:
05:5d:ab:5a:37:6c:ec:5a:75:ef:1f:c5:60:b2:40:e1:98:98:
38:cb:cf:04:4d:f1:85:4a:91:55:7e:c9:b6:c1:c3:8e:e6:4d:
a6:4b:ed:fc:1f:05:7d:e8:86:f4:0f:ec:31:71:ed:9b:ba:29:
22:b5:da:58:82:88:9d:91:17:d2:a0:19:ac:fb:3e:f9:04:1e:
1e:c3:a0:0f:b1:f6:ca:eb:ad:cf:1e:4a:bf:17:01:21:a8:35:
b1:13:bb:cc:91:64:7d:47:bd:bf:cd:07:74:44:73:a6:9b:53:
2c:41:f2:42:45:28:82:78:76:3b:0a:48:21:fd:20:3e:61:20:
52:8a:61:77:7f:8f:6f:2f:62:c2:f9:7a:7c:dd:14:f5:fa:6f:
b7:c6:dd:b4:c1:39:d5:df:04:0f:81:f6:b3:14:5f:a8:a4:33:
5b:a0:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:42 2026 by rpki-client