Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: 4QKIaVv6QxwHxRXhdHIgmdlfu+hqOERWXGAIIAqljCo=
Subject key identifier: 6E:8B:B1:63:4E:E4:41:47:60:15:FA:1E:37:42:F5:12:EF:03:CB:DB
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01A18186C6B4BE56F5FF864D2D03EBF9F979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 1328
Signing time: Wed 28 Oct 2026 08:00:55 +0000
Manifest this update: Wed 28 Oct 2026 08:00:55 +0000
Manifest next update: Thu 29 Oct 2026 08:00:55 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: KZgHVWQeIM5/GfBxwXn43u8+z/lC7e7j9dNErQYqQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:c6:b4:be:56:f5:ff:86:4d:2d:03:eb:f9:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Oct 28 08:00:55 2026 GMT
Not After : Oct 29 08:00:55 2026 GMT
Subject: CN=6e8bb1634ee441476015fa1e3742f512ef03cbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:97:21:8b:32:d2:e2:8a:bc:ab:04:f6:d0:
c2:10:b5:98:f7:9c:1b:29:1e:91:9a:02:0b:41:ca:
b5:0d:b0:31:ce:bc:0e:6f:ef:d8:4e:a9:6a:7e:b5:
ed:e6:da:09:51:b3:7f:ca:b4:8e:dd:de:ff:ac:d2:
b2:7d:0c:64:29:62:72:ef:f4:f4:c3:ff:45:e3:e5:
78:b8:bb:76:f4:e9:1f:a5:be:d9:6c:b8:73:3a:cd:
93:b2:dd:57:10:70:04:46:e5:69:90:7d:1e:c8:45:
9a:e4:a1:33:02:97:a7:a7:82:bd:78:77:60:4c:68:
04:b4:f0:32:60:05:0f:52:be:cd:b1:d9:c0:5c:43:
c9:19:9e:e7:39:13:0d:bd:7d:a7:bd:4c:b4:2e:47:
9a:81:96:2d:42:39:91:35:8c:c1:57:88:4a:00:72:
91:89:6f:ff:49:54:99:a4:aa:95:8a:a9:fa:82:50:
8b:9f:da:2c:a7:cd:78:9d:30:a0:27:36:43:ad:68:
c7:69:0d:54:9a:a0:62:77:1b:b2:25:9f:5e:0c:45:
37:9a:ce:2f:64:fa:9f:7e:b1:77:7f:52:7e:96:f2:
d2:96:00:1b:27:04:a5:af:51:d0:2f:b1:43:c1:57:
d5:22:0f:72:ec:d6:f2:2f:83:27:87:36:59:10:f2:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8B:B1:63:4E:E4:41:47:60:15:FA:1E:37:42:F5:12:EF:03:CB:DB
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b7:c3:54:fa:48:a2:8a:f2:41:e6:50:95:36:81:6e:81:39:
5b:2d:d3:02:ac:bf:a3:b5:87:75:f8:fa:48:6a:db:a2:91:87:
20:a6:e6:78:51:db:4e:2e:c9:2d:c5:b5:ad:93:43:f5:34:4c:
fb:24:29:d1:ef:0d:1a:a1:2a:16:bb:b8:d6:47:0e:3e:01:a0:
b2:5d:7a:a1:5d:06:eb:27:2a:b2:c4:d1:ff:92:58:2e:ae:da:
53:b8:48:c2:4d:55:f3:a3:55:f2:e9:55:08:12:f8:a5:3a:73:
48:41:ab:f9:f2:cd:c6:f9:dc:b8:db:a0:2c:6d:16:d9:62:96:
1a:3c:fc:f8:9f:a2:36:b0:6e:ca:03:90:dd:cc:fe:d5:32:d2:
52:82:b1:76:81:94:fc:4d:43:0a:84:84:4f:8e:df:c2:70:87:
07:89:2d:78:da:2e:08:a8:c1:2c:ec:1b:a1:8d:00:4b:d4:a5:
fc:1b:ac:ad:01:a9:86:1d:8a:e4:ab:da:4c:54:8c:c5:c1:b7:
32:fa:dc:2c:2a:c3:62:c2:aa:74:69:b1:d4:75:12:36:e9:b6:
6b:68:57:5f:c5:57:82:4a:0b:ec:52:8b:33:f1:d3:9c:3a:a7:
46:82:8f:24:75:ff:0e:bf:1c:43:62:2d:45:33:fd:b6:de:10:
89:d7:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:27:15 2026 by rpki-client