Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
File: UbLEAc5cnogc2aO-jv7GACLaDrY.mft (raw, json)
Hash identifier: Y9ki3m5CBmpyfj54v9Nhm10rxG1oefbc3gFwZ1swozY=
Subject key identifier: CB:87:6B:27:04:2C:B3:48:0D:EF:01:C3:57:0C:B2:4D:F0:19:F6:02
Authority key identifier: 51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
Certificate issuer: /CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Certificate serial: 01A1152AA747322137FCFD25189D5D0D0FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
Manifest number: 0535
Signing time: Wed 07 Oct 2026 07:01:19 +0000
Manifest this update: Wed 07 Oct 2026 07:01:19 +0000
Manifest next update: Thu 08 Oct 2026 07:01:19 +0000
Files and hashes: 1: 7nfjUKMCV_0dkRD9QIxhQ1BPufY.roa (hash: gulW2Fam69TrlFiG88xoJ7S5EpFW5hwd8HZdAINgZRw=)
2: 8EkWCJKlGUuYCmtpF6giWaBabGQ.roa (hash: Sqr1KDT12n1Gb1flLKRN7KU4X7Bc8YqBHnVl5nyK2K4=)
3: MxZUaOK8Ovtd2YeXUj-uaE88_eQ.roa (hash: Fko89UG8aEMvOTWbfyMIqaGd+GLcrLD58QG0NMQTI3w=)
4: UbLEAc5cnogc2aO-jv7GACLaDrY.crl (hash: YYcxtCwVdIiqIYO0EoPu2NBMyM8ymuVPPwxt8c+w8/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2a:a7:47:32:21:37:fc:fd:25:18:9d:5d:0d:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2c401ce5c9e881cd9a3be8efec60022da0eb6
Validity
Not Before: Oct 7 07:01:19 2026 GMT
Not After : Oct 8 07:01:19 2026 GMT
Subject: CN=cb876b27042cb3480def01c3570cb24df019f602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:47:9b:18:7f:e8:6d:8a:6e:37:7f:9b:e2:
bc:f2:8a:a6:64:42:25:84:89:23:4f:f8:45:df:8a:
6f:1c:c0:d9:ee:3c:5a:92:ee:91:1b:79:3a:09:da:
1f:29:7e:e8:31:de:83:85:be:c2:ac:44:7c:10:cf:
fe:82:88:5f:b8:93:41:ab:a0:bc:ec:5b:d1:fc:21:
d4:86:8b:ea:be:16:96:80:f3:bf:1c:e8:a7:27:7e:
85:bf:81:0f:16:a5:0a:8e:2c:7e:ce:76:37:26:ca:
50:7b:67:c9:76:7e:10:2e:a3:d8:db:0a:2b:05:59:
09:a3:40:ec:db:c0:22:97:36:c3:c8:5c:2d:b9:89:
e5:5e:d0:1e:03:3b:44:aa:fb:90:ca:87:c4:43:06:
e2:ca:8e:cf:1a:30:07:a3:37:20:c0:1c:84:aa:eb:
a8:8f:22:d7:42:85:a4:70:c0:d8:3c:86:44:4e:1c:
34:5e:ad:a8:5d:ac:22:61:ea:95:8f:e9:bc:77:50:
2d:f5:81:aa:5e:bd:fa:97:52:ab:10:aa:64:64:45:
3e:35:5c:80:25:2f:e4:5f:b5:5a:71:1f:25:ee:70:
5a:79:e3:50:18:bc:8d:83:b1:e0:12:27:bf:ab:fb:
63:18:de:9b:e7:73:8a:19:01:72:01:e5:73:8f:08:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:87:6B:27:04:2C:B3:48:0D:EF:01:C3:57:0C:B2:4D:F0:19:F6:02
X509v3 Authority Key Identifier:
keyid:51:B2:C4:01:CE:5C:9E:88:1C:D9:A3:BE:8E:FE:C6:00:22:DA:0E:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLEAc5cnogc2aO-jv7GACLaDrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/794f36-9d2a-41bd-928c-94d1b1d16b85/1/UbLEAc5cnogc2aO-jv7GACLaDrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:07:90:a4:96:e8:d3:ac:83:8d:6c:5a:a0:b3:e2:48:a5:91:
2c:64:ae:fa:d3:3e:c0:7e:8c:89:93:07:52:08:9d:a1:16:b4:
cb:0e:f2:38:1d:be:a6:53:10:56:70:b3:4f:28:4f:a3:9f:0d:
56:a1:0f:97:70:68:6c:30:66:fd:56:5a:aa:0f:5c:df:5e:17:
2e:88:b3:cb:48:fc:d8:9a:0a:67:3c:76:90:04:67:0e:d6:df:
ff:3a:c6:d4:d2:15:f7:94:46:61:26:c8:31:5b:ff:c1:f7:0a:
52:6a:94:85:89:47:a9:45:f5:1b:f6:46:9b:35:78:b0:b0:08:
bc:9c:85:78:f9:e4:50:28:ca:64:16:aa:c8:c5:02:f1:48:16:
15:1d:53:6c:0a:07:0f:3b:6a:75:60:34:58:83:6b:d7:4c:a4:
0f:a7:ff:ea:87:77:1b:33:a2:4a:61:0d:d9:8d:9a:cd:84:96:
05:b7:6a:45:59:90:64:9e:15:50:9b:96:c1:9a:03:d5:01:75:
1b:84:82:97:70:42:e3:91:7f:44:74:e2:d7:a6:0b:5d:f7:6b:
03:c1:33:38:3b:8d:89:ed:40:b4:0a:72:84:58:25:fb:67:f9:
8a:ca:df:23:39:00:ed:82:22:9c:74:bd:60:02:0e:fc:0e:c3:
e9:81:cb:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:18:31 2026 by rpki-client