Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
File: U0phq7_QFizvAP9DEIp63y5Bf2M.mft (raw, json)
Hash identifier: AocwplTFk5U/jTLOvCOAWC2bI1Nlkrqgd2SRHE4shlk=
Subject key identifier: 47:E1:7A:37:F2:D2:94:8E:A6:02:EA:22:DE:02:B4:C6:CD:2D:E7:DA
Authority key identifier: 53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
Certificate issuer: /CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Certificate serial: 01A0412A26D682D6C5F25BDBBB52411E11A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
Manifest number: 0146
Signing time: Thu 27 Aug 2026 03:01:16 +0000
Manifest this update: Thu 27 Aug 2026 03:01:16 +0000
Manifest next update: Fri 28 Aug 2026 03:01:16 +0000
Files and hashes: 1: HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa (hash: T+Ay/vI5FtgSJpMrAE1oWUA6OzWQjny9x3es6X3cTlg=)
2: U0phq7_QFizvAP9DEIp63y5Bf2M.crl (hash: Phc0dHFlN9m8JbrpsAGGP3IXcHLie6OZLTdl64+WQTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:26:d6:82:d6:c5:f2:5b:db:bb:52:41:1e:11:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Validity
Not Before: Aug 27 03:01:16 2026 GMT
Not After : Aug 28 03:01:16 2026 GMT
Subject: CN=47e17a37f2d2948ea602ea22de02b4c6cd2de7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:49:45:0a:8e:e6:c5:1e:72:2c:c9:06:dc:
f9:5c:f0:0e:ad:74:14:85:89:5c:7b:0a:05:b3:f0:
c7:9d:8a:68:94:f1:d4:24:04:91:3d:df:73:d3:6f:
99:8a:c4:67:91:b0:50:b2:37:63:2b:20:00:ad:89:
81:ca:e8:2d:35:e2:30:d0:58:65:18:2e:c3:a2:76:
03:e7:d9:e3:e8:8f:88:17:db:6a:87:a2:c4:47:8b:
68:91:39:c3:ad:bd:b4:c3:68:a6:d5:e7:87:65:9b:
b4:57:61:45:cd:82:e6:b0:04:05:67:82:4c:56:e7:
55:6f:91:1d:d7:1e:2b:56:9c:a3:ad:23:23:ea:a6:
ec:38:90:ba:69:29:40:88:62:16:8c:33:9b:a1:f2:
a6:2c:5a:d4:00:4d:aa:df:57:2e:0d:07:38:2a:99:
d5:d8:c3:a8:60:a9:3a:a3:dc:94:cb:8f:68:c2:ce:
c4:cf:5e:dd:1b:25:c7:cc:47:4b:2f:39:55:b3:15:
87:46:83:6d:62:08:8d:e9:6d:0b:30:e6:15:4e:2f:
20:c7:61:cd:41:48:77:db:3a:b7:c8:c0:f9:73:0e:
6e:c0:f1:b9:a5:ef:fb:23:c0:51:ad:90:7f:4a:8c:
5b:38:8b:0e:67:cc:b4:74:92:ed:92:32:30:f1:50:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E1:7A:37:F2:D2:94:8E:A6:02:EA:22:DE:02:B4:C6:CD:2D:E7:DA
X509v3 Authority Key Identifier:
keyid:53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:7d:01:2c:50:79:fd:03:84:28:98:76:a3:9e:3c:a4:dd:
59:6e:c6:48:d8:ad:de:b3:4a:8e:ca:0d:4c:97:2c:8f:08:5d:
4b:f8:fa:ad:34:dd:d9:67:36:db:84:52:f7:c6:d8:59:de:05:
98:a7:05:38:59:f8:c0:6e:be:a3:b4:aa:45:7e:47:ed:a6:b6:
3b:3b:1a:1c:92:fb:f9:ac:73:33:c8:de:7f:97:df:22:64:10:
da:ce:ec:b2:bc:de:ac:c2:35:fb:79:d0:8b:bf:7c:c5:4e:ea:
5d:56:a2:0c:69:80:ba:87:e1:a2:25:61:9f:95:bb:19:ff:15:
cc:47:1d:b2:7e:3e:7f:63:21:bc:c9:10:96:15:a2:82:a6:c7:
13:b9:7a:0a:11:38:44:7a:fc:ec:71:01:22:68:2f:d1:fd:fb:
77:0d:c6:fd:2a:8e:6c:f4:46:55:84:5f:9e:ee:d2:bb:3b:03:
08:87:e3:b0:87:f6:42:10:fa:ba:e3:af:ff:1b:91:9f:3e:48:
4a:75:ac:b5:b4:ce:b9:52:bb:bb:2f:57:49:6d:0f:0a:6c:eb:
52:f6:df:5d:15:f4:32:49:51:51:43:53:75:97:98:a5:9a:2e:
05:5b:9c:58:dd:3d:51:71:81:5c:05:3d:25:ec:6c:46:df:55:
fc:7e:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:26:58 2026 by rpki-client