Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
File: uaY9guJ4W32wBSjcVacGncUQpC8.mft (raw, json)
Hash identifier: 7oc8nOePeouiTVuGNS760i1yD5kneICeLytmVFJFHHw=
Subject key identifier: 99:73:3E:20:3C:A9:EF:54:5C:1E:18:DC:4A:E3:FE:A5:92:CF:2A:E1
Authority key identifier: B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
Certificate issuer: /CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Certificate serial: 01A17B4D92AD25F2F432346D1AB81A0618C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
Manifest number: 0975
Signing time: Tue 27 Oct 2026 03:00:43 +0000
Manifest this update: Tue 27 Oct 2026 03:00:43 +0000
Manifest next update: Wed 28 Oct 2026 03:00:43 +0000
Files and hashes: 1: uaY9guJ4W32wBSjcVacGncUQpC8.crl (hash: Xd0KuJoaqzWovsUe5WFzegXMjFWU8lDukl2jh/UhYD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:92:ad:25:f2:f4:32:34:6d:1a:b8:1a:06:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a63d82e2785b7db00528dc55a7069dc510a42f
Validity
Not Before: Oct 27 03:00:43 2026 GMT
Not After : Oct 28 03:00:43 2026 GMT
Subject: CN=99733e203ca9ef545c1e18dc4ae3fea592cf2ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f1:0f:da:5a:d9:71:c4:68:33:36:5c:3d:95:
74:d7:79:c2:aa:94:8e:76:2b:f8:c7:e0:43:85:62:
2b:72:50:3c:9c:05:a9:98:9a:d9:9e:2d:e1:79:53:
0a:f1:ad:fe:f4:7c:92:c8:d7:04:76:a4:54:82:58:
9d:9e:2f:92:ac:a1:8a:12:a0:80:e9:90:6f:8e:51:
33:d7:2f:70:89:e3:2d:65:2d:0f:ef:e5:bd:6c:dc:
fa:96:4c:90:e1:55:67:89:51:c5:f0:47:61:2b:08:
e8:99:6d:5b:c4:73:e4:e7:f7:45:16:2e:4b:0c:53:
c7:48:4e:3b:70:54:01:6b:14:ba:29:ae:d4:cf:19:
ee:31:09:b9:dc:56:dc:f4:81:10:86:95:3f:34:02:
f5:47:c6:0b:6a:be:61:6a:64:80:ea:22:ff:db:22:
c6:39:87:14:a1:6f:c8:2f:f4:33:83:f2:a0:e3:a7:
33:17:1d:a2:0d:ff:b2:6e:ba:b9:d7:1a:02:7a:8f:
63:18:d6:5b:19:69:22:8f:40:63:98:ae:9f:1d:0c:
d9:de:5b:11:e7:76:20:f1:47:6c:8b:1d:77:3e:a8:
b8:bb:b3:e0:08:82:48:62:e2:ba:be:be:b2:46:8c:
e5:b8:2e:e5:42:1a:d2:8d:3c:df:ef:53:15:08:5c:
6e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:73:3E:20:3C:A9:EF:54:5C:1E:18:DC:4A:E3:FE:A5:92:CF:2A:E1
X509v3 Authority Key Identifier:
keyid:B9:A6:3D:82:E2:78:5B:7D:B0:05:28:DC:55:A7:06:9D:C5:10:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaY9guJ4W32wBSjcVacGncUQpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8a06f4-986e-4669-bdf9-8ee2f9dcb1ed/1/uaY9guJ4W32wBSjcVacGncUQpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:8a:1a:18:99:63:44:46:8b:da:8c:7f:c7:12:6a:ad:b1:a7:
ed:50:79:6c:93:5a:c0:d9:11:fc:68:8f:17:74:e2:5e:a1:23:
3c:57:f3:5c:83:a1:0c:aa:80:43:33:d4:d6:57:40:e7:97:8c:
b7:8d:9b:86:fa:2e:b5:41:57:46:e3:51:5e:ae:64:5f:8b:c4:
70:91:2d:85:06:2a:04:4e:8e:30:87:e5:c6:6e:26:91:a1:d4:
90:5a:03:12:9b:a8:04:46:dd:76:d5:e2:be:d6:92:f7:d4:65:
9b:ff:e7:45:8b:17:7e:39:e3:d0:a3:16:43:4e:52:59:61:a6:
52:4b:6c:14:ea:a8:95:6f:d8:6a:39:0b:ae:f8:e7:89:7a:68:
12:bc:02:7a:7c:57:02:5e:ea:1d:28:52:a7:84:67:58:9a:f7:
30:6c:01:5d:c4:86:dd:cf:14:a7:43:4f:32:3c:2d:3c:23:32:
27:79:6c:f6:5c:8b:d0:e0:ef:c4:21:52:0d:1f:7c:21:3d:98:
ff:85:c2:89:13:74:f3:e5:0c:85:4b:0e:b4:2a:06:fb:65:dc:
67:0d:c5:0d:41:d3:fb:4e:de:86:36:d4:7c:9d:82:25:0f:57:
f4:28:bc:d9:ed:f5:41:09:c3:5b:e0:8f:34:48:30:21:42:92:
15:67:9b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:54 2026 by rpki-client