Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: xwhyxYRYIOsByabiWwlvryo4Lz0i1IdvcLtamkJ20Tg=
Subject key identifier: CE:10:18:4C:4C:67:C4:59:36:BA:B5:F3:49:DD:EA:BD:F4:01:2A:F5
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 01A08D569DD41628822C413B4F9A3362F688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 22:00:58 +0000
Manifest this update: Thu 10 Sep 2026 22:00:58 +0000
Manifest next update: Fri 11 Sep 2026 22:00:58 +0000
Files and hashes: 1: 0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa (hash: tftG+mQIphk3FNSPZp40EyRTZOVpuoMSFbhQMapxPC0=)
2: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: Wumw7dWT1VCOO98tcAyhVZ6lwiIb3yFI6KIGK/mSggk=)
3: j2_V5BwB6zWowKkrqo3IR1AI3TY.roa (hash: v2GJYRFtHtKuk3djB+9NlbqHwSDbHuYB27XPregGwCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:56:9d:d4:16:28:82:2c:41:3b:4f:9a:33:62:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Sep 10 22:00:58 2026 GMT
Not After : Sep 11 22:00:58 2026 GMT
Subject: CN=ce10184c4c67c45936bab5f349ddeabdf4012af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:e0:2e:14:a5:3a:ae:b7:04:95:71:47:a6:
f2:25:f2:60:7b:e4:b4:21:4c:53:26:08:ad:9a:ee:
8e:b4:df:96:b3:cb:8f:90:29:20:b5:06:fa:72:d8:
54:e4:c3:dd:32:73:7e:88:df:c1:8c:d2:ce:83:ec:
bb:5b:15:07:1f:bb:67:3b:2f:ae:e1:0b:91:77:77:
22:73:f6:62:0c:90:b2:46:a2:8b:8e:d0:c0:d8:ef:
64:7c:b4:7d:b4:14:87:d3:ec:d8:6e:6f:2d:e2:05:
b4:6e:a7:10:e6:45:5c:15:b6:35:0f:34:03:61:3c:
88:6d:f3:ef:ce:9c:ac:60:10:6c:d7:64:5b:11:4d:
d3:5c:59:52:05:15:16:66:a0:ea:92:49:73:1c:55:
71:49:02:c6:5b:b1:b2:b5:4d:44:fe:ff:2f:8a:89:
70:c3:bc:14:5d:d2:a7:65:0e:bd:8c:76:1f:0e:77:
d6:3c:cf:de:1d:b5:f5:6f:5f:6b:3b:63:5a:11:04:
fb:ac:b7:05:9e:4d:e6:99:31:f2:c2:11:2f:ab:5f:
9d:2f:66:75:49:aa:42:44:ee:61:3b:64:10:b4:95:
c6:35:06:a8:3d:77:e1:f3:f1:63:f2:62:8a:62:9c:
3a:8d:5e:5a:b8:55:4f:a7:bf:85:0a:44:b4:70:27:
ad:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:18:4C:4C:67:C4:59:36:BA:B5:F3:49:DD:EA:BD:F4:01:2A:F5
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:63:42:90:20:f5:ef:bd:0c:74:49:90:1b:a2:45:67:84:a1:
0e:65:86:d0:97:a3:5a:a8:fb:c9:4f:99:3b:3c:26:a4:5d:99:
d9:98:e2:37:af:8c:ed:c9:fe:f8:45:6e:0b:b8:65:9e:67:64:
97:fb:52:9f:d2:d2:45:42:12:13:e8:c1:86:8d:92:eb:ed:dc:
59:ab:56:0d:6d:a7:b4:8a:6f:11:c5:27:19:1b:63:75:d5:81:
13:6d:2c:34:81:1a:c4:a1:0c:f9:40:6a:bd:17:75:fb:cc:cf:
ee:3a:fb:4c:66:8e:8e:cb:a5:ff:13:b7:c0:65:5f:bc:de:ee:
6a:c7:16:d6:c1:bb:46:81:50:65:04:05:c6:08:6c:4d:09:41:
c2:c3:ef:d4:7b:8e:fc:ed:d3:5e:41:05:a6:9d:33:7a:b1:1d:
d7:be:99:8a:d8:2e:01:fc:2c:ca:14:6f:d1:78:0f:83:a5:49:
7a:8f:ce:9b:0d:c7:74:83:4f:bd:55:a9:c5:81:31:d2:a0:a1:
67:ea:ee:bf:fd:46:de:55:63:3c:8c:ae:e4:d3:7f:72:d2:4e:
5e:55:50:a9:3b:52:3e:54:9d:09:43:d1:a5:91:a8:9e:76:31:
75:17:20:93:76:43:ee:84:7b:1d:d4:d7:f7:b3:b4:d0:4a:30:
80:96:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:25:49 2026 by rpki-client