Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: 9m4ZiOvD+gvlSTnZQxtbCUcOL0kJizoA9nx2uefu2R0=
Subject key identifier: 98:4C:18:F0:9E:83:43:88:6A:AA:23:51:13:83:C1:1B:E6:A2:81:20
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 01A06D94E83FD7198AE5BCF833EBFADB5A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1A48
Signing time: Fri 04 Sep 2026 18:01:10 +0000
Manifest this update: Fri 04 Sep 2026 18:01:10 +0000
Manifest next update: Sat 05 Sep 2026 18:01:10 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: FK2MifN5XDk6FjerH5b6BYoZuv1Ye5vdOKt/U7vMDm0=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:e8:3f:d7:19:8a:e5:bc:f8:33:eb:fa:db:5a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Sep 4 18:01:10 2026 GMT
Not After : Sep 5 18:01:10 2026 GMT
Subject: CN=984c18f09e8343886aaa23511383c11be6a28120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:37:0c:be:d4:62:a9:a5:6d:93:cb:90:98:f2:
d7:7b:63:4c:59:30:45:11:07:a7:a2:8e:16:34:30:
53:85:39:71:b5:2a:86:ad:29:80:4a:e3:93:59:b1:
a9:5d:bf:ae:e1:be:72:02:b3:b7:50:f2:e5:a9:05:
3b:4b:11:83:26:2d:10:bf:ed:b2:2a:03:5f:c5:a5:
3a:ae:75:de:4e:ce:da:16:83:62:60:60:23:3b:cc:
0d:80:aa:3f:c9:9b:fc:7b:9c:31:fd:ca:42:61:77:
9d:cc:98:52:39:d4:ad:21:f7:f5:4f:b5:9c:a4:81:
c2:cd:f7:c4:b2:16:e1:46:82:8d:51:74:a5:23:e4:
2b:70:4f:38:1c:30:07:63:3b:fd:b8:08:da:46:e1:
73:73:5e:d1:38:54:de:81:50:8d:de:26:8b:0a:3e:
6e:54:cb:c6:5b:d5:40:82:f8:9f:b9:20:5b:9c:c9:
dd:23:a0:b8:ab:14:5d:f9:8a:20:79:03:89:0d:c6:
26:1d:db:ea:8e:ab:50:ae:fa:4f:b8:fc:7f:aa:cf:
f0:72:24:3c:87:b6:e5:05:a8:3a:d7:94:48:d8:dd:
38:89:a9:5d:83:84:63:29:56:7d:3f:d5:bc:b8:1c:
ab:9d:30:f3:87:63:8b:fe:bc:62:6b:f7:ae:ce:34:
a7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4C:18:F0:9E:83:43:88:6A:AA:23:51:13:83:C1:1B:E6:A2:81:20
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:7b:3d:e2:20:43:55:35:27:15:fa:71:8e:5f:f1:00:05:
b7:f1:b3:49:6c:cc:b2:f7:4c:b4:f8:a8:72:56:b2:06:fb:6c:
19:26:01:f9:3c:85:95:30:e4:80:18:32:a7:77:41:41:73:05:
36:f2:37:24:8d:06:3e:7a:52:50:f5:0f:37:ab:0c:1a:12:d0:
54:ed:82:ef:43:3a:eb:7e:28:ae:f0:18:bb:55:6e:2c:f8:b1:
db:e4:ec:90:6d:6e:22:6d:99:a0:c2:c0:3a:a5:b4:7f:38:ed:
3a:63:21:1f:c2:ba:ee:b9:8e:a2:a7:7c:c9:20:9b:85:36:8c:
93:50:17:69:65:e2:89:4e:f3:48:c4:e0:ba:b4:08:93:c4:39:
e1:ea:24:d2:81:da:90:a3:cc:68:d7:75:f8:7c:de:dc:1b:ae:
44:f9:1c:79:35:3c:84:cc:74:33:5f:9c:ce:58:a8:e5:1e:b0:
2b:11:3c:17:62:d9:a4:49:3b:43:0e:37:3c:d5:28:c4:1a:bb:
98:e7:33:23:71:69:a5:70:ac:d4:17:77:21:59:4e:c4:90:38:
67:3d:93:ac:73:ec:ee:79:c2:05:91:e6:f0:f5:45:0b:53:c7:
4a:cc:e5:43:aa:43:54:77:52:2e:49:7c:12:b0:a8:c1:e4:52:
29:a2:6c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:33 2026 by rpki-client