Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: ji4otFngxCLH7slAzIpTqMRq3IcRROablyKpIqtoEDM=
Subject key identifier: EC:E8:71:F5:04:09:70:DD:8C:15:75:42:B9:26:DE:AE:D6:C2:1A:49
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 01A1732644B3D74E7EC63FEA26BE0F8C245F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 13:00:50 +0000
Manifest this update: Sun 25 Oct 2026 13:00:50 +0000
Manifest next update: Mon 26 Oct 2026 13:00:50 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: DN205IpILFeSCCD/9p2uSQhUvFCACxyD77CxfQGq70E=)
2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:26:44:b3:d7:4e:7e:c6:3f:ea:26:be:0f:8c:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Oct 25 13:00:50 2026 GMT
Not After : Oct 26 13:00:50 2026 GMT
Subject: CN=ece871f5040970dd8c157542b926deaed6c21a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2f:d4:a6:ad:ac:77:c5:77:36:8a:a4:97:6a:
be:d7:e9:16:f8:4e:64:06:d7:3e:ba:16:fb:52:b8:
c8:f9:1d:64:d8:c7:8d:dd:70:4f:80:43:97:79:54:
2b:86:39:3f:20:6e:d2:cf:a5:98:e0:24:56:14:3b:
aa:a5:fd:35:82:2d:9e:6b:78:a7:49:65:81:ea:20:
18:ca:3a:82:3e:a1:58:a4:e9:18:1e:e1:6a:56:ab:
aa:13:6a:5e:10:d7:8b:50:c0:7b:d0:b5:c0:1d:3c:
82:92:31:cc:8c:7f:62:95:20:5b:f9:ef:50:fd:74:
c5:ee:85:a3:bd:56:bc:be:1a:80:59:f0:34:93:fe:
dc:5f:66:ea:e9:30:75:9f:13:92:00:02:41:66:e1:
8e:93:eb:9b:5d:e4:78:b4:f3:1e:8f:23:16:c3:99:
ba:a4:a8:71:66:58:86:cc:cb:f8:78:62:dd:47:1c:
c2:cb:8d:af:46:3a:6f:61:db:fb:6a:40:8a:00:af:
b3:30:c5:a1:fe:9f:aa:42:07:9f:ce:68:87:42:47:
d4:c9:5e:fe:c9:1b:a8:2e:71:4f:52:e2:05:b5:f6:
e7:5f:2b:18:d5:56:4b:1f:10:28:72:70:2d:7a:48:
1c:18:b2:3e:d7:89:ff:28:c9:89:0e:42:25:e8:11:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E8:71:F5:04:09:70:DD:8C:15:75:42:B9:26:DE:AE:D6:C2:1A:49
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d1:46:fb:4a:72:01:0d:46:06:be:76:c5:27:5e:50:41:ce:
ab:6f:3c:35:23:70:ef:b2:ce:38:72:0f:4d:89:a1:f1:cf:8c:
60:e1:9d:28:0b:83:c0:ef:5a:b7:db:71:8b:a8:a4:7a:90:d1:
22:b3:cc:ee:c1:4f:b3:75:ec:eb:92:ef:23:65:33:10:f1:2c:
13:da:22:5d:52:7d:aa:7b:39:78:5d:36:44:67:2f:9b:4c:16:
3f:77:9f:f2:80:5b:d3:e5:75:1f:26:7f:38:7b:1e:df:78:8b:
c3:01:fb:1d:9f:ac:a5:98:0d:9c:b4:24:87:96:77:13:de:1d:
86:56:63:4e:9f:57:22:5c:01:24:cb:39:4d:2d:d3:e5:0c:a7:
78:52:92:c1:73:fc:e4:a8:c6:24:6c:4a:64:93:75:d8:0e:c5:
8b:4c:6e:c7:35:54:a5:c8:45:8e:95:0a:d3:2d:8a:fb:42:20:
1f:85:a4:e1:61:ca:aa:dc:7a:59:ec:60:b2:f3:84:f7:12:17:
4e:9c:46:ba:eb:e0:31:e3:a4:c9:da:b1:e6:4b:69:f2:c0:c3:
9a:03:a9:50:c2:d8:3d:9d:17:9e:47:13:e6:89:a0:61:1c:53:
0a:a7:bc:5c:9b:66:81:61:a3:7d:70:f6:65:33:84:67:95:2f:
0e:9a:33:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 17:58:22 2026 by rpki-client