Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: rWi9GfvuvRIz/VziwM/+Sp6Z34FHga4g+S/eDU8L4pE=
Subject key identifier: 23:91:97:0A:07:A3:48:01:E1:DC:02:15:91:7E:E0:8F:B1:49:B5:6A
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 01A17C9773F3128DF583F599F5711D2B83CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0A7E
Signing time: Tue 27 Oct 2026 09:01:02 +0000
Manifest this update: Tue 27 Oct 2026 09:01:02 +0000
Manifest next update: Wed 28 Oct 2026 09:01:02 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: lWXH5O3eaY2SYogi1w2hvPm+7ZZjPSgPfB7k087AHz0=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:73:f3:12:8d:f5:83:f5:99:f5:71:1d:2b:83:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Oct 27 09:01:02 2026 GMT
Not After : Oct 28 09:01:02 2026 GMT
Subject: CN=2391970a07a34801e1dc0215917ee08fb149b56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:f1:be:4b:4b:e9:a8:62:82:29:ef:62:51:3e:
0f:b9:6d:dd:b8:ce:f1:91:ee:36:d8:6e:c7:b3:a6:
5f:68:c4:ed:89:c0:59:c0:b3:55:b1:ff:33:d4:d7:
f6:a1:13:3c:2f:9b:2e:bc:28:52:58:1e:03:0f:6a:
22:8a:35:01:1f:a1:12:04:96:ab:f6:37:be:6b:16:
1b:15:30:c7:23:43:71:b7:58:c4:a2:c1:5c:79:2a:
97:4f:90:7e:5e:7a:4e:ac:48:97:63:8c:a3:c0:aa:
92:8b:32:f5:10:be:cc:8b:35:3a:f1:a7:76:30:77:
3a:d4:66:3f:e3:df:1c:41:91:cf:f9:84:a9:b5:7a:
af:d1:94:5a:c7:9e:8d:ac:96:ed:89:b7:42:44:59:
eb:9f:40:70:a7:d5:40:9d:87:57:a3:70:53:d2:92:
ac:1f:70:c1:ca:d2:2d:1d:b0:f8:6d:f3:d7:38:64:
74:c8:65:bf:c7:e0:b1:49:96:4f:c5:73:8d:6a:a4:
41:d8:4a:fb:8e:d6:10:47:9d:d8:55:29:cf:0e:6a:
d8:ac:49:61:4b:4b:b8:5f:9f:5b:88:bd:8e:85:a0:
9e:89:f4:7a:10:fc:c0:71:8c:65:4f:5b:0e:be:de:
a4:61:6a:25:e9:3c:18:b7:10:20:5f:a6:8b:bd:e5:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:91:97:0A:07:A3:48:01:E1:DC:02:15:91:7E:E0:8F:B1:49:B5:6A
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:52:78:a1:fe:68:c2:1a:4a:91:62:98:a7:94:1e:fe:af:34:
33:ca:29:55:e9:fc:8a:81:76:d2:7f:88:0d:2a:de:50:a3:0c:
a7:65:20:b2:ad:a9:f2:c2:9c:34:8a:a0:98:3a:31:ac:f5:59:
54:b4:96:cd:b2:64:d4:99:d0:11:39:c9:d0:94:5d:86:52:50:
8f:c0:03:79:5a:a5:14:c2:a0:17:56:7d:2f:c3:28:e3:70:69:
85:9c:f2:2c:ca:b3:24:bb:69:d6:41:9f:2a:25:e3:9d:02:0d:
97:a2:8a:2a:ee:fa:c3:05:88:e9:50:39:5c:c3:ea:79:19:38:
4b:7e:0f:79:d4:05:4a:f0:bf:ab:11:d4:f8:d1:ea:38:a1:cc:
15:4c:17:05:60:7f:25:11:ee:5a:28:e2:e8:ce:45:b9:b7:5a:
60:00:83:f9:d4:97:d0:03:56:80:95:b2:8e:8a:a9:88:b5:b0:
e9:8a:16:2c:1f:15:2b:af:d2:fc:b5:17:cd:23:bd:47:3c:12:
fd:8e:f7:96:81:2c:b3:f0:ac:20:a1:62:41:00:28:74:08:47:
c0:a1:8f:cd:a2:f8:bc:a2:86:08:3d:b0:c8:a3:f0:29:7d:40:
da:84:a7:69:20:28:4d:15:ca:67:b4:16:7f:15:b7:0b:62:7b:
2d:95:60:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:36 2026 by rpki-client