Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: 7KPEuwc5Sv2CZYu0q5HKx7eoOPyQP3i2rEZmpuXNZUA=
Subject key identifier: 41:66:E0:47:F0:E4:87:A5:78:94:EE:96:F9:A1:11:78:9E:B2:7F:15
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 01A17694EA20FFDBBB7C86A9F3B1207B3D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 05:00:33 +0000
Manifest this update: Mon 26 Oct 2026 05:00:33 +0000
Manifest next update: Tue 27 Oct 2026 05:00:33 +0000
Files and hashes: 1: If7ufj-_b2EUoFRKwbI33h0oDZE.roa (hash: aOxlUZckeVrxmkXquW/EMNwg7hPa/yLX7xjosCstJGg=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: nR7091OWnOPF218pb3jA2a42VyCgipLwONZiIaBiO/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:94:ea:20:ff:db:bb:7c:86:a9:f3:b1:20:7b:3d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Oct 26 05:00:33 2026 GMT
Not After : Oct 27 05:00:33 2026 GMT
Subject: CN=4166e047f0e487a57894ee96f9a111789eb27f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:d5:68:0e:d3:1f:b7:48:f6:c5:6e:b2:d0:
68:aa:f5:88:4b:15:63:ec:64:46:85:f6:99:ec:9b:
1a:13:5b:5f:6b:71:dd:5a:93:13:77:90:0c:07:15:
34:b4:b8:b1:15:57:74:0d:82:f2:b3:d2:86:de:e2:
01:3d:3f:e6:c1:37:79:2d:92:4c:f5:b8:f6:b2:36:
54:f9:85:22:02:aa:6c:19:f0:ba:d7:b6:7f:ba:d3:
99:4a:bb:1f:0a:61:23:1d:27:07:f9:5c:f7:c3:34:
b0:41:0d:c0:8d:a4:26:0b:2e:c5:4e:04:d7:c8:9d:
37:b9:69:6b:07:7e:fe:ef:75:ca:35:83:5e:f8:d3:
a6:da:ec:85:8c:3d:fe:79:84:8b:33:e8:36:3d:cb:
4e:2d:83:cb:03:37:0c:53:75:e2:f4:26:5e:b7:46:
c7:ef:07:e9:59:7a:bf:66:34:74:e8:47:8e:53:62:
f9:4c:41:1c:78:69:fa:c5:72:f3:d8:b2:e3:37:dc:
02:fe:cf:59:b0:0c:9a:98:18:65:d5:e2:c8:f1:28:
bb:0d:df:82:15:ab:90:46:6a:9d:8c:86:d5:d0:b3:
12:20:08:dd:51:ee:ee:71:e1:ff:01:ff:14:f9:50:
28:2b:68:4c:ed:84:62:70:76:e2:32:15:16:e5:50:
f2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:E0:47:F0:E4:87:A5:78:94:EE:96:F9:A1:11:78:9E:B2:7F:15
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:79:58:fa:1e:96:6a:d9:ce:cb:e0:6b:68:74:0a:6e:03:ea:
ba:21:f4:bc:d7:ea:dd:0d:0a:da:40:5d:ea:b3:32:1a:53:a1:
4e:2f:10:4a:44:e5:d1:91:b9:c3:3d:b8:d5:1b:75:0b:35:45:
45:31:f7:bf:45:b4:28:1b:2d:78:79:17:cb:61:52:a4:87:2d:
78:9b:fb:15:46:64:48:91:c5:45:9f:e7:15:46:b8:00:a5:73:
a1:51:68:0c:0d:f1:92:27:57:73:0b:a3:fc:40:7f:e3:a0:03:
f1:74:c8:93:2a:d6:35:ac:dc:a7:fb:e9:70:13:bc:e1:15:20:
09:4d:65:18:55:d8:cd:77:6a:f8:f5:55:77:d4:cb:3d:5e:9b:
2a:27:e4:07:cb:9a:7c:ea:6a:22:9f:29:7e:71:42:0d:2f:65:
4c:24:81:d3:c1:73:1a:f0:4c:27:e0:b2:ca:4b:26:c6:f9:8e:
83:ef:1a:01:85:db:39:6a:55:a5:45:aa:8d:c1:e8:8b:b1:20:
c2:52:29:bf:32:8b:0d:57:14:54:96:aa:92:1d:24:45:50:7c:
32:d2:56:ee:08:84:9a:55:99:21:a1:2f:ce:63:94:63:60:19:
eb:c6:2f:fc:7c:0d:7a:a0:8b:c3:de:cb:93:df:5f:de:c2:94:
be:ce:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 18:02:17 2026 by rpki-client