Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: QI8pMIe/XdSPMewwvyfoZsXlG1lkGyYPTeNPksBNZgA=
Subject key identifier: CF:A4:86:60:5C:38:58:28:EC:7E:6C:93:6C:27:34:0E:11:64:2B:1A
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 01A192B1587BF02FCDD4867F22AA9A253528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 16:00:58 +0000
Manifest this update: Sat 31 Oct 2026 16:00:58 +0000
Manifest next update: Sun 01 Nov 2026 16:00:58 +0000
Files and hashes: 1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: FyBzAr7Je3la/xF/lnOTnA81yVGLtKtl0Z7lWbn9Gdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:b1:58:7b:f0:2f:cd:d4:86:7f:22:aa:9a:25:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Oct 31 16:00:58 2026 GMT
Not After : Nov 1 16:00:58 2026 GMT
Subject: CN=cfa486605c385828ec7e6c936c27340e11642b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:75:01:dc:01:8b:f8:55:1b:66:75:80:41:be:
85:5d:1b:2e:a3:4a:57:6b:0f:98:e2:55:79:50:a4:
d5:32:5a:01:3a:27:96:fe:41:8f:da:bf:58:9a:e3:
c4:14:51:27:17:1f:69:f3:52:24:ae:e8:08:2f:35:
16:d7:9b:0f:d4:73:88:75:ae:02:2b:e8:73:c2:6a:
05:e8:74:e7:21:ed:e8:d3:d5:8e:4f:82:3c:a3:9b:
42:a2:15:66:b0:32:81:7e:f4:19:78:f2:b2:bc:77:
cc:d5:a0:15:d0:b8:e3:b2:47:11:4e:65:03:46:ea:
5e:2b:72:24:8d:45:30:da:aa:53:0c:86:60:a5:88:
c9:8d:c3:0c:31:1c:17:1d:99:62:9c:4e:22:8e:3e:
00:de:59:6b:4a:4f:fa:d3:24:3c:f5:78:c6:b1:6d:
0a:8f:a2:e8:6d:07:c4:83:2c:30:80:85:27:04:53:
b5:f9:b5:23:83:bc:ef:a0:9c:bc:5c:75:69:11:54:
88:97:be:70:f1:66:6f:30:86:83:c5:58:98:a8:fa:
72:23:06:c2:20:59:ea:95:a6:6c:4b:c0:68:a0:16:
f3:07:4f:6a:20:ee:44:09:a1:c9:04:d9:b9:c4:af:
16:a3:e0:ac:9b:02:bc:40:0d:fd:28:aa:48:1c:b1:
e8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A4:86:60:5C:38:58:28:EC:7E:6C:93:6C:27:34:0E:11:64:2B:1A
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4d:8a:60:28:cf:c3:6d:ad:08:11:52:2a:8e:a5:7a:33:2e:
4c:73:04:27:23:80:75:b5:28:1c:04:56:1e:5c:14:13:f6:b8:
66:08:7d:9f:13:a9:47:d2:ed:e8:9c:c5:3d:85:52:84:3e:03:
03:5c:c9:9f:6e:99:77:c9:3e:4d:cd:2e:86:9e:df:1f:ca:38:
38:92:50:f2:ce:6f:e2:e6:fc:3a:5e:c5:bc:ee:db:ef:00:36:
3e:ac:04:43:1a:bc:f9:86:6d:84:61:81:95:75:59:ae:71:12:
f5:ec:bb:49:74:50:5a:75:9c:4b:1b:b0:88:85:fb:fa:70:41:
15:ed:05:74:cb:03:28:3e:a0:e5:bd:e9:4a:9a:ad:5b:21:fb:
36:53:d6:88:9e:7e:8a:85:ee:a7:20:09:2e:48:34:dd:92:5b:
d8:81:54:7a:64:b6:6b:04:27:6c:a8:24:b6:d7:cb:69:01:6f:
0f:bf:a2:8d:8b:df:bb:59:f1:a1:20:a3:23:28:90:8f:5a:a3:
1a:f4:71:bf:36:0d:76:43:0c:0c:89:a7:a7:0f:f0:c6:d8:80:
d9:eb:5d:ce:67:1d:c4:5b:64:c5:62:7c:ab:af:09:3a:38:bb:
86:ee:b8:a4:7c:1b:75:2c:b5:5c:f3:91:aa:b9:96:a7:d2:d3:
1e:96:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:51:23 2026 by rpki-client