Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: f8UGficHn8Q8nVIZy4clNnVjDwR6VCgaktnLgfC9Z0E=
Subject key identifier: 71:9C:7F:82:DE:9F:BA:64:68:87:81:53:A4:13:7A:EA:4F:A5:28:3C
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01A06DCC2D1380DBC7C9565C1B5EC30C0419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0897
Signing time: Fri 04 Sep 2026 19:01:32 +0000
Manifest this update: Fri 04 Sep 2026 19:01:32 +0000
Manifest next update: Sat 05 Sep 2026 19:01:32 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 6kutIP2O5due22A0hMp5i4ddYBdLNYohBGclDaCA8Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:cc:2d:13:80:db:c7:c9:56:5c:1b:5e:c3:0c:04:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Sep 4 19:01:32 2026 GMT
Not After : Sep 5 19:01:32 2026 GMT
Subject: CN=719c7f82de9fba6468878153a4137aea4fa5283c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1c:63:54:99:75:14:6c:54:66:e3:79:b4:01:
be:3a:43:b1:4a:04:dc:2a:ff:40:9a:21:67:40:82:
b7:f8:c8:fa:78:51:db:ed:5a:0e:4b:41:f6:21:7e:
1d:ac:7b:23:40:d8:31:55:d6:89:9c:39:4b:ed:8d:
b5:50:7b:b9:0f:e0:f4:80:98:e8:53:53:f3:56:b1:
a5:40:88:26:a5:cf:7d:24:a1:b0:ce:43:f8:ee:69:
3c:04:14:2e:10:0d:e5:46:07:e9:7c:8c:ca:1a:0d:
ef:39:08:3f:e1:94:fb:75:33:3d:45:96:c9:ea:c4:
1f:af:42:56:4e:ab:64:16:b1:8e:c6:0f:31:4a:63:
ad:2e:b5:83:63:0d:b5:13:70:c1:50:86:4a:24:82:
79:7a:ab:41:74:e7:ec:9e:f5:00:94:74:ab:d7:7a:
0d:35:41:34:8a:2e:57:cb:eb:9f:ed:2e:ce:d8:6e:
36:13:95:9f:84:c5:7c:a6:9b:27:7c:51:86:1b:1c:
12:d9:f7:50:2f:46:fe:bb:5f:71:29:b1:33:fb:34:
45:ea:55:b8:57:a7:02:c1:85:25:ca:ed:41:0c:60:
37:0d:c4:9e:1a:ae:f5:c4:06:16:fa:f9:11:0e:4f:
57:b8:24:44:a0:03:82:cd:61:e7:c7:92:90:da:fb:
85:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9C:7F:82:DE:9F:BA:64:68:87:81:53:A4:13:7A:EA:4F:A5:28:3C
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:58:93:b6:32:1b:f7:97:e2:3f:7a:8a:60:4e:0d:e0:94:0f:
a2:bc:eb:86:b4:88:03:cd:61:76:ed:9b:d3:f4:8c:cc:ad:67:
0f:78:1a:42:06:2f:22:0f:41:ea:7a:74:3a:6d:35:d4:b4:c3:
29:86:9d:32:86:cd:a1:05:a4:cf:88:5f:b7:11:da:e0:65:2f:
9f:38:01:13:87:b3:af:67:63:1d:e4:79:5f:cf:2a:51:2f:cb:
f8:11:24:3b:07:ac:6a:c8:13:ac:fa:b7:6e:1c:45:17:61:25:
b6:aa:f9:db:c0:2b:f7:96:d9:cb:3d:8a:19:f5:1a:03:59:1f:
94:c8:a5:89:80:d5:63:7f:8b:b7:97:37:15:25:c9:20:92:d5:
a6:54:88:25:68:6d:5d:b5:08:a4:20:57:83:3e:52:a9:19:c0:
61:19:dd:7e:d4:9c:b0:43:76:50:96:e8:17:5c:40:ef:b3:df:
03:52:1f:74:57:32:17:77:15:5e:b2:7a:c9:e6:36:f1:ee:22:
a6:45:06:25:9d:d5:b8:30:bf:86:24:44:c2:49:1b:59:b0:b2:
5e:7c:22:3c:9f:e5:8d:e8:c7:ee:e4:c6:21:c8:66:60:4c:c4:
60:a2:b5:ca:37:a6:82:bd:f7:f3:83:82:d8:aa:57:7c:fd:ab:
30:e9:be:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:27:00 2026 by rpki-client