Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: S2+i8Zz4sf+qI0xtiUyc2GJuB7kGmORNNuVtVa1t6Mc=
Subject key identifier: DF:D7:DD:FF:EB:D2:F2:D8:DC:C4:74:1F:9C:1E:0D:9A:67:D8:CD:FA
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 01A06D95866AB0075AFA440AB1C23C7B2CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:50 +0000
Manifest this update: Fri 04 Sep 2026 18:01:50 +0000
Manifest next update: Sat 05 Sep 2026 18:01:50 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: 7KCQOB54+pOEyo5uHLqg34bsZFGN5ZgXDLEHIJEc9lw=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:86:6a:b0:07:5a:fa:44:0a:b1:c2:3c:7b:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Sep 4 18:01:50 2026 GMT
Not After : Sep 5 18:01:50 2026 GMT
Subject: CN=dfd7ddffebd2f2d8dcc4741f9c1e0d9a67d8cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:1a:75:b8:8d:31:83:0c:09:97:a6:ca:b9:
3d:8d:30:3c:7c:94:e5:00:d1:cf:8f:b2:e7:26:85:
7d:be:8d:fe:bb:6b:11:9d:f0:8a:1a:cd:d0:66:11:
70:dd:ed:d1:a6:0d:55:34:da:df:ac:c5:91:35:37:
25:d8:70:b6:48:ec:df:03:17:19:65:4c:a0:40:1c:
74:42:79:25:86:f5:a2:64:04:ab:04:38:22:e8:fa:
32:1b:e4:bc:43:e9:29:42:e8:8a:9f:95:15:65:2e:
86:5a:60:86:9a:15:43:59:3c:6e:bc:06:60:b1:0b:
c4:f6:ed:aa:a9:a8:74:75:3f:8d:93:82:8c:33:ce:
cf:7b:44:31:4b:54:1e:45:19:07:8a:df:02:23:1f:
b6:a4:3f:8e:5b:06:9d:d7:64:5b:69:21:d2:c7:38:
95:6b:e5:98:b7:0b:b9:60:00:d7:48:66:0c:5d:cb:
af:5d:d4:bf:bd:14:a5:e6:d6:62:62:a3:76:98:a0:
78:84:a9:3e:1e:ba:91:b8:da:c4:95:5f:6c:cf:c0:
02:32:93:7c:7a:dd:16:72:26:2b:c9:44:aa:d7:ef:
5d:80:57:7f:dd:4b:25:cf:6a:1a:c9:1e:d0:6a:62:
4f:02:e2:37:a4:f4:f7:f2:a0:a2:b3:03:7d:fc:8a:
f4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D7:DD:FF:EB:D2:F2:D8:DC:C4:74:1F:9C:1E:0D:9A:67:D8:CD:FA
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f4:8e:2a:1e:29:f7:ee:51:9b:8a:6a:47:c3:5b:ee:63:ef:
8c:8b:a9:e4:3d:bc:a7:3a:71:60:30:e4:34:c4:b3:ab:d3:0f:
d4:15:2e:78:df:9f:3f:95:80:09:aa:0a:f6:7d:e0:b8:d8:4a:
76:ea:2d:53:6b:30:1b:5b:96:27:1d:4c:03:0c:b0:7b:80:0b:
ee:2d:a8:d4:04:de:fb:00:09:74:1c:b5:cd:49:21:4e:99:29:
bd:b5:4a:05:79:62:11:2c:0c:fa:bf:96:03:49:f9:70:78:2e:
88:fa:9c:07:07:d5:7b:e2:e0:6a:da:a2:01:23:9c:aa:cd:d8:
6c:63:1c:c1:10:95:2a:39:42:40:21:c5:5a:bf:3e:bb:db:ef:
93:06:73:0f:3a:5a:41:4b:7e:2e:67:f1:89:d4:3f:bd:18:b4:
cd:c5:83:de:50:79:44:1d:3e:f4:5e:be:21:cc:8e:c9:3f:d9:
e7:be:df:34:77:ce:a2:7b:61:6f:79:fa:35:b0:6a:d9:9b:70:
d4:69:cc:99:60:0a:d4:7e:71:11:27:0c:08:68:04:f1:41:5a:
e4:b8:8b:99:2f:03:2c:b9:66:25:68:fc:87:31:f8:7d:a7:a6:
f4:e0:de:8c:3f:c8:1e:e1:d0:2c:92:ae:37:a8:2e:71:4d:d0:
02:f6:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:56:14 2026 by rpki-client