Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: Y2ReuH+pXc1MBfAMf3knJ8FLtxQa3LwgcTwy7R83IkY=
Subject key identifier: 74:69:23:91:6D:36:BE:96:C5:B5:15:CB:40:72:BF:A8:63:DE:5B:07
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 01A17DAA0A589ED0BF5E05D7420895EF2DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 020B
Signing time: Tue 27 Oct 2026 14:00:57 +0000
Manifest this update: Tue 27 Oct 2026 14:00:57 +0000
Manifest next update: Wed 28 Oct 2026 14:00:57 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: +XYlkv7N3WSEHhvE6jLDNEKKo4qDmbDl87UTpif03pU=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:0a:58:9e:d0:bf:5e:05:d7:42:08:95:ef:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Oct 27 14:00:57 2026 GMT
Not After : Oct 28 14:00:57 2026 GMT
Subject: CN=746923916d36be96c5b515cb4072bfa863de5b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:37:a0:d0:7c:bc:b7:20:77:c9:14:68:28:48:
0a:64:b7:c0:17:f6:c4:70:2e:a3:60:f6:81:7a:ac:
59:6e:e5:66:5a:c9:e8:d0:ea:07:7a:1c:01:f0:fb:
b3:78:48:9d:c1:87:b1:eb:84:8a:0c:98:ef:c5:ef:
f0:8a:9d:ad:a4:60:9e:bf:4f:73:e9:88:90:54:6f:
ae:33:7d:76:e4:cb:d7:9a:36:d0:60:d1:34:57:d3:
e5:e8:25:27:65:d6:97:d9:9e:14:0e:3f:9f:e4:3c:
77:26:30:1c:00:3d:40:12:78:cd:3f:30:dd:f1:c0:
a2:87:ba:f3:b2:60:ae:63:5b:dd:fc:fe:7d:54:7f:
28:85:ef:bd:bc:ff:7c:81:82:2f:7f:f9:de:86:09:
75:b7:09:f1:18:a4:30:88:c4:e4:08:f9:2d:eb:a1:
81:64:4d:5a:bf:9b:b0:67:df:03:e7:3a:7c:a6:c3:
01:b9:09:22:8b:f8:3d:b9:c2:86:11:2c:b4:f3:4c:
4d:23:a7:84:78:d4:0d:77:13:f0:c6:0c:ec:d4:e9:
a4:f2:d0:0a:5e:b4:38:2d:99:62:93:4a:29:a8:87:
6e:95:22:6e:67:d5:80:84:b1:8c:61:76:54:77:43:
94:9f:12:9a:30:ae:52:05:c5:4c:df:4d:ba:02:98:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:69:23:91:6D:36:BE:96:C5:B5:15:CB:40:72:BF:A8:63:DE:5B:07
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:00:c6:ce:07:cb:df:95:14:a6:a0:91:e2:8c:9a:e0:c5:a7:
2c:4e:85:6d:9f:cc:3f:ce:46:19:b6:ee:ce:ff:f2:67:35:dd:
ff:d9:24:74:bb:31:85:a4:4f:bd:28:09:36:ae:f3:c2:4e:2a:
b4:43:7b:a8:ab:51:a5:4c:8d:6f:52:70:71:2d:35:0b:04:b1:
95:f1:bf:aa:ec:20:75:7d:fd:dd:ea:44:a9:cf:2f:c7:29:2f:
23:6c:e8:ab:50:55:6a:5f:0f:bb:23:1f:b8:bd:9f:68:cb:44:
70:11:04:6d:98:02:37:c5:f8:a0:19:36:c6:d7:ce:42:fb:f4:
cf:01:54:79:da:d0:b2:a6:e5:7a:4a:4e:e8:da:3d:aa:0e:20:
8f:1d:5e:f8:94:11:e9:c9:3e:d2:ec:ff:dd:1c:d4:3b:31:11:
81:f9:e5:a3:c0:54:ab:19:4d:2e:93:b2:ca:8d:16:7f:bb:26:
23:0d:51:75:e0:27:af:04:01:ea:66:9c:a6:73:da:fe:37:4c:
02:03:97:37:f4:fa:29:09:70:97:e9:46:d3:dc:bf:07:83:39:
8b:f2:ba:24:6b:43:20:a3:77:d2:3d:cf:a1:34:a2:9a:08:f3:
f5:55:91:76:99:6b:98:c7:96:f5:8d:53:7b:fb:4c:a2:ae:5d:
69:d8:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:10 2026 by rpki-client