Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: /d8SEvO/SnARuN8vTYBqEyaLJ+P13dQ80uc6VPWrZaY=
Subject key identifier: FB:7A:6A:CA:05:48:5A:70:17:AB:59:6E:C8:83:5C:04:3C:15:3E:81
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01A17E182BBD967644413E051867E92F3B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0924
Signing time: Tue 27 Oct 2026 16:01:15 +0000
Manifest this update: Tue 27 Oct 2026 16:01:15 +0000
Manifest next update: Wed 28 Oct 2026 16:01:15 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: qLOPOaPWyem4kErz08G/q1Y11MAlRTIqJsVhFBwHq0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:2b:bd:96:76:44:41:3e:05:18:67:e9:2f:3b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Oct 27 16:01:15 2026 GMT
Not After : Oct 28 16:01:15 2026 GMT
Subject: CN=fb7a6aca05485a7017ab596ec8835c043c153e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:ae:ec:c0:cc:48:56:a1:4d:fb:5c:19:1f:
b0:11:97:e8:3b:5f:fc:65:04:d4:42:d9:ad:17:db:
1d:8e:a0:0c:47:bd:f1:52:16:ef:55:d8:7b:e5:55:
fa:34:5c:49:71:28:4a:64:8c:34:ec:7a:98:a8:ce:
41:f2:c7:bb:0f:b3:9f:87:53:d4:ed:cc:e6:49:f9:
1d:d9:10:bf:cb:ed:74:66:6e:7d:a2:b9:01:06:9a:
02:3f:fb:f5:f7:f2:03:63:90:e6:89:90:58:45:97:
c4:14:a3:34:32:50:61:3f:fe:da:4e:57:be:86:61:
af:80:ef:bf:28:bc:cf:a1:9d:65:8d:51:27:f7:f4:
01:75:13:fd:7d:2a:3e:03:6c:6d:db:66:19:4e:f8:
c4:60:a5:f0:99:12:44:64:45:ae:4d:ff:50:37:f9:
42:a9:c2:4f:94:2d:b9:1c:91:ef:db:e9:b1:65:11:
f5:89:c7:2f:a5:cf:17:b4:d1:4a:53:7a:2d:26:5e:
9b:21:5a:33:77:51:4f:d4:39:d9:6f:77:91:ce:86:
94:bc:b2:3d:71:b8:fc:2a:04:91:0e:f4:6c:33:8c:
49:8e:1d:8a:2a:c9:3e:65:fd:74:a2:c0:16:74:f3:
c9:55:d8:8b:77:ad:c5:77:ba:a4:46:67:84:76:54:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:6A:CA:05:48:5A:70:17:AB:59:6E:C8:83:5C:04:3C:15:3E:81
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3e:2a:98:8c:cb:24:27:12:29:b3:75:8b:ba:b1:9b:ba:1d:
9f:6f:cc:ff:d3:2a:0c:e4:82:84:c6:c1:55:13:3d:47:24:61:
e7:8e:ef:7e:8e:d5:e8:fa:6a:df:b8:52:86:1e:5c:b6:cb:fc:
77:7a:b2:4f:34:77:79:65:e2:65:fb:40:63:10:e0:a5:bc:ce:
4c:3e:0f:ed:ef:45:30:71:77:5d:46:cf:c2:75:c4:b2:9b:43:
b8:a4:c5:41:b2:5d:b9:34:40:38:c5:b7:57:d7:89:06:8f:2c:
2d:a8:6a:03:37:45:e7:7d:cd:19:ab:3b:e5:80:5b:6f:d3:b1:
ff:ce:1b:a1:b3:6d:83:67:98:ab:35:db:2b:92:3c:b5:a9:59:
75:5d:4d:2b:1c:5a:4a:1f:64:38:0e:a2:b4:67:2a:f4:ed:68:
60:3a:5e:a4:d0:d8:48:9d:93:f0:4d:4b:eb:9b:7e:9d:77:1c:
56:65:83:0f:4e:41:ef:03:90:2c:08:aa:c8:9e:ea:d5:0e:60:
07:81:8d:44:f6:1e:bd:b6:83:a3:2f:80:83:4b:bb:1f:ee:08:
83:75:83:06:0a:4f:f0:a8:82:d0:78:27:00:12:83:1e:57:ed:
ea:b9:95:37:36:10:76:bf:0c:77:19:69:2d:62:49:52:67:7b:
6a:2b:4d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:24 2026 by rpki-client