Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
File: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft (raw, json)
Hash identifier: cK3sfkxF1hcA9uUq4a3FEkMpu73qT6Th0FGZjOcwPdQ=
Subject key identifier: 33:E1:9B:8B:FA:AB:9C:D7:C0:59:CF:00:BC:73:AC:8A:30:B5:DA:AE
Authority key identifier: 53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
Certificate issuer: /CN=535a0905ad5684f414182c99e1ed998163093001
Certificate serial: 01A1599DEC630E502551DD6E79E6F7F3E77A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 14:01:24 +0000
Manifest this update: Tue 20 Oct 2026 14:01:24 +0000
Manifest next update: Wed 21 Oct 2026 14:01:24 +0000
Files and hashes: 1: 1-OdbV9pffyE-MtyJfK7HNQXo7NI.roa (hash: BTb2LGVfDU/NF7VOnzuEayBkQx1CY6SsEpcdjflREFo=)
2: U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl (hash: lSygswA3LqMuqCMTHuyKC8YtFsR8ZLfIWMNFQXZKVLw=)
3: dLJKUxaN6lGmKQZKOER9LafS-VU.roa (hash: avkp8AIkxpP6EiwxL7+BnoTzdDtAkOmhGqUZUTqV12w=)
4: kUCFqt07I3jOUhsa9vnLRiDNVxk.roa (hash: 5MGQy531WnFyAMvE7uD+I/swY7k4A1YC68qxb4dhi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:9d:ec:63:0e:50:25:51:dd:6e:79:e6:f7:f3:e7:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535a0905ad5684f414182c99e1ed998163093001
Validity
Not Before: Oct 20 14:01:24 2026 GMT
Not After : Oct 21 14:01:24 2026 GMT
Subject: CN=33e19b8bfaab9cd7c059cf00bc73ac8a30b5daae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:8c:c3:5a:c0:81:0f:1d:de:4d:9f:7d:80:
1a:4c:b1:59:15:72:d2:ac:83:a0:be:f2:33:8a:66:
6b:05:28:43:9c:56:82:1e:2c:82:a5:4d:31:1c:26:
7d:69:39:a4:eb:81:ba:c7:11:39:4c:2e:12:d9:24:
2e:c0:b1:9e:93:6b:67:52:5f:73:af:1f:c8:56:25:
1a:c8:54:ab:d0:08:2e:cb:28:76:63:08:92:cd:93:
45:4d:de:3a:20:3d:98:08:45:9e:30:d7:15:0f:ee:
3a:22:19:46:6a:19:60:81:1c:f6:7b:87:eb:96:e9:
61:54:f5:ac:cb:25:f5:8f:c4:33:0a:57:f7:df:47:
17:30:31:79:e2:40:ba:ad:3a:31:5a:87:f1:1c:be:
56:32:c0:27:46:ad:a3:04:21:3d:33:50:7b:4b:04:
c4:44:46:35:5d:d1:23:9a:a6:64:d0:6c:42:ff:e1:
8d:56:83:97:9d:a7:75:fc:5d:72:3f:d2:10:9a:37:
03:7e:08:1a:bc:b1:2d:52:eb:df:4c:50:b7:52:68:
a0:6c:02:4a:d6:1e:03:02:41:a1:f7:55:cb:96:f7:
56:d4:34:ca:18:09:05:59:fd:92:02:42:7f:f5:89:
5e:df:f2:e5:c3:1b:f9:a2:c8:61:05:17:f7:e4:ea:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E1:9B:8B:FA:AB:9C:D7:C0:59:CF:00:BC:73:AC:8A:30:B5:DA:AE
X509v3 Authority Key Identifier:
keyid:53:5A:09:05:AD:56:84:F4:14:18:2C:99:E1:ED:99:81:63:09:30:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b27baf-e681-4ab6-b903-6a10c6e3222d/1/U1oJBa1WhPQUGCyZ4e2ZgWMJMAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b0:06:40:59:27:8b:c3:65:5d:8d:7e:9a:cc:74:c7:d4:61:
7f:74:e0:95:a3:13:34:52:81:da:f7:a6:19:43:d7:b7:05:bd:
1d:ae:38:fb:d5:a0:8e:2d:1d:56:f5:ee:fe:b4:dc:61:af:d3:
c4:c5:2f:8f:31:a4:57:b0:54:fc:48:48:3a:5a:aa:69:3e:17:
05:c2:09:48:75:35:11:80:36:ff:ef:ac:d3:b6:8d:3d:80:78:
50:d3:1e:c3:a3:1a:1e:97:7c:71:bd:de:fb:b2:0b:a4:5e:87:
0d:7a:84:07:b4:97:51:3b:c7:a0:0b:07:48:0c:42:d4:93:fa:
e8:60:8e:81:34:29:4e:91:ac:78:13:00:bd:f7:9d:47:7f:32:
3d:47:e3:71:fd:d3:b1:4f:9f:84:4b:4f:99:d2:18:fb:5b:7a:
3d:16:2f:4b:77:05:12:37:eb:2c:bb:0c:28:54:13:49:e2:4c:
68:f9:e6:c2:c6:00:ee:3a:9e:f3:68:5e:27:fd:64:88:fa:41:
3a:9c:22:72:9d:b5:a2:8a:49:89:2d:ca:6d:5c:53:55:a8:17:
c6:8a:7f:a1:83:96:c4:99:6b:76:75:96:f3:16:14:bc:6f:ef:
a1:c3:d3:53:d3:c1:8f:7d:d0:d6:63:3f:a8:71:d5:2a:b6:d6:
a8:18:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:38 2026 by rpki-client