Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: nkwfUEwjf23XoS9SMl7UK2nb4z48WQ2kEB4gXy5mLyE=
Subject key identifier: 91:59:38:D8:EF:02:10:99:D0:3C:FB:B8:4B:D1:A4:AB:D1:3E:3E:F0
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01A168D91B6A77305F2B5132D51373FF50D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0919
Signing time: Fri 23 Oct 2026 13:00:21 +0000
Manifest this update: Fri 23 Oct 2026 13:00:21 +0000
Manifest next update: Sat 24 Oct 2026 13:00:21 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: /O8o2wFd8k1NojMUPV0+gpzCHDSJjMg63lAIx7EweGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:d9:1b:6a:77:30:5f:2b:51:32:d5:13:73:ff:50:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Oct 23 13:00:21 2026 GMT
Not After : Oct 24 13:00:21 2026 GMT
Subject: CN=915938d8ef021099d03cfbb84bd1a4abd13e3ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:9f:ce:89:c9:dd:7a:d6:b7:04:1d:ac:86:
dc:ee:54:1c:94:7f:88:b3:53:ca:38:93:25:40:dc:
58:01:31:aa:5d:ad:87:6d:4c:4f:c7:2a:8b:4c:0b:
c2:c2:e8:d6:2e:19:0e:b8:43:30:b4:0b:5e:41:9d:
cc:73:ff:32:85:87:51:75:13:e1:25:92:43:b5:dd:
ba:3a:d8:4a:31:ca:73:73:1b:c7:34:92:2d:78:ea:
59:6e:50:b4:28:5f:18:a0:4d:65:41:30:8e:fd:02:
07:50:05:b9:eb:e6:9e:3d:a7:50:63:ac:e2:2f:84:
a0:08:a8:27:fb:ef:e4:eb:ff:c2:e0:c3:85:a1:9e:
4d:53:0a:fb:61:1f:48:71:78:9a:da:13:58:c6:e9:
e0:5f:44:47:23:e6:c9:5b:e4:bc:f2:82:15:0c:0f:
dd:8d:49:d9:08:3b:16:76:0e:63:a7:7a:fe:69:42:
18:fd:60:09:bf:a6:e3:cb:01:bc:53:16:70:a9:eb:
73:54:b7:65:12:4b:f2:af:ea:ce:a4:89:e0:82:fe:
57:8e:22:ee:36:3f:4c:d5:e7:e3:76:f1:a9:9c:2c:
9a:a8:e6:60:16:e9:ef:56:b9:bc:30:83:8f:56:b4:
59:62:ae:08:36:a7:bd:ac:6e:7d:6e:3a:cd:f8:b8:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:59:38:D8:EF:02:10:99:D0:3C:FB:B8:4B:D1:A4:AB:D1:3E:3E:F0
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:af:43:78:a1:23:86:fc:ae:b4:29:fa:7b:22:d7:17:f1:
7b:61:8d:4d:54:93:6e:15:e8:55:b0:f4:32:5f:40:19:f0:12:
fe:49:b8:b7:ca:ed:95:ea:fb:02:0b:e8:21:e3:f8:d6:88:f3:
67:88:07:d5:a6:8c:e7:95:56:df:2b:ad:48:83:df:7b:39:71:
fc:13:02:11:db:fa:60:30:c3:89:ed:49:70:b3:ae:54:0a:79:
64:ee:30:cc:90:76:15:c8:49:6c:7e:98:e8:5e:28:5f:8e:31:
0d:90:e1:5f:5c:50:d2:c7:db:a7:19:2a:8b:d3:89:a5:81:2d:
d4:bd:03:da:ec:3b:c6:5f:0a:d4:70:06:de:16:17:58:e4:a5:
5c:f9:60:0b:a9:c0:47:93:2e:a3:b4:33:d3:46:85:dd:d8:ce:
1a:36:9d:7a:4c:9f:0c:5c:65:86:b8:2e:ab:aa:14:0b:68:e7:
d3:43:bb:91:25:93:dd:d6:1b:02:89:07:57:f6:bf:fb:76:0d:
14:83:8c:f9:6a:b0:d5:00:fd:48:dc:d4:ba:8b:4b:d4:6c:1d:
f5:87:11:a4:57:73:e8:01:f9:34:4a:db:6d:28:70:32:92:3d:
32:dc:b0:a8:64:6f:61:07:5b:e5:0a:2d:aa:fb:7d:a3:fb:f2:
c5:69:c9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:37:31 2026 by rpki-client