Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
File: UgO7TxlYEfjXcjygGgsv-963Whs.mft (raw, json)
Hash identifier: luCxpwIRmxVwOyn+YROz5sxRsusi+/YuPK5XKOXC2H0=
Subject key identifier: B1:18:D0:9A:A0:54:AF:6F:89:91:23:6F:D7:45:0C:52:C2:29:4A:F1
Authority key identifier: 52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
Certificate issuer: /CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Certificate serial: 01A18AF72FE1C59B19E122713A43CD2E36E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
Manifest number: 0701
Signing time: Fri 30 Oct 2026 04:00:17 +0000
Manifest this update: Fri 30 Oct 2026 04:00:17 +0000
Manifest next update: Sat 31 Oct 2026 04:00:17 +0000
Files and hashes: 1: AcOd55sVqvOO3XHczvl-zosJmzk.roa (hash: e+MSkkLADvHFn1+ehMsTrvhCUFfbRzhM94S4F/DWLXY=)
2: UgO7TxlYEfjXcjygGgsv-963Whs.crl (hash: dVeiLAjAitP+ysIEckAhxM9e5dHTL6OBF6NScIspwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:2f:e1:c5:9b:19:e1:22:71:3a:43:cd:2e:36:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5203bb4f195811f8d7723ca01a0b2ffbdeb75a1b
Validity
Not Before: Oct 30 04:00:17 2026 GMT
Not After : Oct 31 04:00:17 2026 GMT
Subject: CN=b118d09aa054af6f8991236fd7450c52c2294af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3a:95:2c:6b:06:dd:8d:64:ae:d7:12:ce:6c:
66:7f:df:d8:90:b6:bd:90:96:0f:c6:46:a5:13:c5:
89:31:f8:4f:10:6c:c4:c0:4b:4e:e4:70:66:be:a3:
5e:0e:72:e7:87:91:e8:9d:66:a5:67:51:a5:51:e1:
db:65:cd:08:b5:46:84:09:a8:cd:c4:00:3a:18:87:
4e:23:5e:01:4a:bf:50:46:f1:61:57:7f:69:ad:0c:
43:9a:6f:80:3b:28:c9:b7:27:e2:ae:e7:6c:c9:13:
41:a9:cc:a1:23:7a:96:93:65:b2:15:ac:d9:24:e5:
3c:cb:87:cd:1d:76:18:3c:32:5d:39:ee:bd:94:80:
c8:39:b3:24:f0:a8:cf:f2:01:22:6c:4f:b5:eb:7e:
56:b0:98:60:35:c4:cc:4b:f4:c5:f5:16:c4:26:53:
86:d1:42:c3:c1:21:f4:50:ed:44:fd:e4:bd:36:90:
ee:b0:57:e8:a5:79:64:d4:a5:cf:5b:e7:aa:fc:89:
ac:7c:16:6b:76:68:2e:aa:78:f9:d2:55:05:c8:76:
e8:ab:6b:12:13:26:ca:26:9a:ea:e4:d1:d6:a7:64:
b0:ab:ef:04:f8:f2:fd:c5:dd:bc:bf:6e:d5:89:96:
62:11:4b:8e:4b:3c:66:49:f2:de:66:dd:3b:03:92:
e9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:D0:9A:A0:54:AF:6F:89:91:23:6F:D7:45:0C:52:C2:29:4A:F1
X509v3 Authority Key Identifier:
keyid:52:03:BB:4F:19:58:11:F8:D7:72:3C:A0:1A:0B:2F:FB:DE:B7:5A:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgO7TxlYEfjXcjygGgsv-963Whs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0a92a1-e594-41ee-855c-2ba6a022d4c9/1/UgO7TxlYEfjXcjygGgsv-963Whs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b9:fc:ae:e9:db:92:ad:15:cc:08:da:f7:5e:dc:d1:04:9d:
8c:f3:11:da:1a:51:18:4f:1d:9d:60:ae:00:86:19:d9:28:5a:
0c:76:ca:16:3e:55:b6:bd:d7:db:8c:73:0f:b9:e1:87:6b:d2:
56:30:1c:3c:ba:03:f6:fd:ec:43:c0:c4:03:b0:11:c4:96:b1:
f0:71:d5:1d:d7:56:ee:8c:31:10:a2:a7:ef:9e:16:d8:4d:86:
d5:63:3b:62:61:a6:7e:d2:29:5c:bd:02:7a:dc:56:6b:08:70:
65:96:f3:00:22:1c:79:13:6f:e4:b4:25:f0:bc:42:3a:1c:70:
f1:17:6c:15:e7:5f:68:5d:83:be:80:08:35:c5:83:ea:1c:14:
57:38:b8:1b:9c:41:30:57:9f:9e:c8:eb:53:3e:ab:d6:a8:b2:
83:d6:8e:34:02:a7:24:16:e9:25:8d:b3:2f:a5:9b:82:20:55:
83:40:7a:af:9d:f9:1f:cb:1a:4b:f7:e1:f5:49:46:d6:1e:33:
f5:53:6b:16:79:60:9b:a3:72:4c:d0:1e:74:8b:96:e8:a0:4a:
73:c9:3a:ae:d6:b8:5b:f5:ef:fd:8e:8d:19:71:c1:06:ba:a9:
02:48:0c:80:59:1c:15:61:bb:8b:c3:d7:53:99:b0:b1:cf:9e:
5c:cc:3d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:25 2026 by rpki-client