Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: KnCKozIS3f+3A6xj7UYy9dqEAHseRlf3l+x58v79ow4=
Subject key identifier: 57:9F:02:91:FB:D4:BC:2E:C3:A3:F2:63:0E:0E:50:CA:B6:F7:F2:FB
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 01A16B6CE2B33E1E7DD065AC443C89E380F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 01:01:00 +0000
Manifest this update: Sat 24 Oct 2026 01:01:00 +0000
Manifest next update: Sun 25 Oct 2026 01:01:00 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: VURLspkKJGQYwiLDBffD+xY+hnOPI1AoQAQQNd77Mcw=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:6c:e2:b3:3e:1e:7d:d0:65:ac:44:3c:89:e3:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Oct 24 01:01:00 2026 GMT
Not After : Oct 25 01:01:00 2026 GMT
Subject: CN=579f0291fbd4bc2ec3a3f2630e0e50cab6f7f2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:15:18:f3:4a:c2:09:83:92:80:2d:90:ba:
9a:2e:0c:b3:90:f7:61:7d:bf:ae:ad:7e:15:e8:8e:
42:cb:53:b0:bc:fb:da:17:fc:b4:b6:d4:89:fb:e7:
8e:25:f5:2e:ae:06:a3:a5:72:95:e1:a3:90:0a:44:
02:02:17:8f:3b:56:bd:b1:e6:15:08:73:37:75:1e:
5f:29:d1:50:6f:dc:c1:7b:00:fa:6f:ef:a6:2b:88:
f4:ec:c7:93:be:2b:67:6b:39:11:c5:14:3b:2e:19:
2d:38:80:a4:fa:fb:87:d4:95:96:42:34:59:b0:d5:
62:06:ff:d9:1a:84:f3:63:89:6a:71:68:46:89:e7:
19:90:e7:f8:e7:93:65:2c:37:47:d2:0f:e0:d1:60:
25:cb:46:72:86:cb:2f:86:99:a4:ec:9f:40:5f:bf:
fa:71:89:a1:28:75:84:64:e2:13:cd:cf:bc:68:53:
e2:79:2b:cf:c2:0b:24:ee:88:e7:3d:63:a4:b9:43:
7a:33:f0:73:47:18:bc:21:c6:27:5c:e3:5b:a3:8d:
6d:8a:22:dc:f6:31:be:87:49:4b:eb:7d:11:c3:da:
d9:24:16:0f:1c:74:c1:c8:ac:33:e2:30:39:e7:a6:
27:e6:d6:7a:6c:08:c5:ab:02:30:0d:e5:f6:98:c5:
4b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:9F:02:91:FB:D4:BC:2E:C3:A3:F2:63:0E:0E:50:CA:B6:F7:F2:FB
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0c:37:11:4b:28:e3:d1:85:9f:09:a0:91:66:c8:d5:47:ac:
b1:0a:96:99:82:8c:cb:47:1f:18:1f:ba:2a:b9:af:7d:1c:2c:
99:71:fe:05:a7:61:65:7a:17:5c:15:3a:51:66:23:ec:49:f6:
1e:d1:20:75:60:6d:66:ec:56:94:a8:b1:98:5f:f3:cc:6a:34:
b3:2c:62:91:cd:e5:f4:37:32:55:e2:69:7f:e1:1a:55:07:f5:
b7:ad:e0:ec:59:32:7c:36:f3:a7:18:53:2e:84:74:7f:e1:97:
3f:c9:ce:b8:e5:84:27:23:d7:0a:c9:35:cc:7c:c7:ec:1e:63:
2d:0f:52:a4:47:e1:73:0d:31:1d:f8:b2:57:97:c5:3c:b0:a6:
df:bb:01:51:df:f6:c5:b6:0e:89:4b:9e:31:87:0b:6f:f1:bb:
9b:d2:19:df:a2:ab:74:50:16:9a:7d:c0:5c:33:af:a4:72:c9:
5f:50:a1:79:36:e2:3f:54:41:95:b6:9d:c0:4f:89:9f:87:46:
a8:5a:3f:b4:92:8a:80:88:af:6b:e3:9b:70:94:4e:5b:a7:28:
5e:dd:3d:d4:bd:fd:39:88:2a:74:f2:a7:24:61:e0:32:39:cc:
3c:95:fc:e4:fe:fd:f7:92:77:00:47:26:83:ff:cc:94:4b:77:
34:8b:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:18:05 2026 by rpki-client