Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: MqTDaWjkQisIr2jpH82ubI1uWRGmoinGB+VuUXvnlGk=
Subject key identifier: AF:CD:1A:42:55:DB:3E:E0:FB:67:12:2D:84:E3:16:64:3D:DA:CC:A7
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 01A183758B60F7B5252B0F68DE01E54AB466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 1AD9
Signing time: Wed 28 Oct 2026 17:01:21 +0000
Manifest this update: Wed 28 Oct 2026 17:01:21 +0000
Manifest next update: Thu 29 Oct 2026 17:01:21 +0000
Files and hashes: 1: GIKwXPgpp9tYu44qAWsgouqavSk.roa (hash: U0ZjuWOGhkNCjwceAqeYAxKQDQUWsJyAsTBPjUkaiJM=)
2: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: Jl0LM+pitALn/IaVmBGaFAc1H1ytDPEyfH9yr6JzP2g=)
3: VqkPXAim399Lgu1GyCQGuOl6sF4.roa (hash: YamfP1/Nh2RGvSHwsQesyL4V2NU4cfv5sboXH/GdBEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:8b:60:f7:b5:25:2b:0f:68:de:01:e5:4a:b4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Oct 28 17:01:21 2026 GMT
Not After : Oct 29 17:01:21 2026 GMT
Subject: CN=afcd1a4255db3ee0fb67122d84e316643ddacca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7e:b7:df:78:01:7c:69:93:56:84:c3:1b:01:
bf:bf:a5:61:1e:b6:ef:c1:c5:4e:b8:a5:98:c5:62:
74:b0:1b:5b:00:60:2d:d9:ba:0d:1e:21:66:75:89:
13:a0:58:ff:72:fb:ae:a2:19:ed:cc:c2:f3:a6:02:
5c:3d:5e:dd:a1:ba:84:be:8f:50:31:7e:8c:31:85:
3a:90:ae:aa:2e:24:52:18:18:d2:7d:d7:c4:af:e1:
5a:81:de:52:93:0b:57:8f:c7:61:9f:dc:33:0b:13:
09:af:42:11:ba:f8:23:fc:43:8c:5f:95:25:ff:0b:
55:07:52:e7:69:9f:c3:52:86:91:46:f6:89:02:07:
78:5e:68:01:ae:37:e9:ad:fb:4a:78:11:dd:20:a4:
24:e5:43:c3:21:b4:91:7c:1b:be:8c:e2:f0:c3:5b:
82:1f:a3:06:80:6f:d6:4a:4f:56:e9:bf:1c:ba:e2:
2a:dc:51:ff:ab:bb:a8:66:d5:60:4f:04:cc:a7:76:
b8:61:83:50:18:5c:bf:da:63:b6:cb:86:d0:66:9e:
85:6e:10:a1:d4:fb:dc:90:b1:1c:9f:1d:aa:f4:cb:
4d:49:1d:51:4b:6b:34:db:9c:71:c7:01:bd:4b:05:
45:13:d3:ed:c7:60:4d:eb:55:e8:3e:21:5f:42:d6:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CD:1A:42:55:DB:3E:E0:FB:67:12:2D:84:E3:16:64:3D:DA:CC:A7
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ac:9c:78:ff:81:b4:a9:b8:0b:71:be:da:2a:df:e7:a4:cf:
a6:aa:12:9e:fa:f8:e7:53:c2:53:e5:be:3a:45:c5:8f:eb:c0:
9c:34:4c:7b:51:62:2c:65:15:4e:26:fe:9f:16:56:c4:1e:94:
32:b5:4a:52:c5:ad:f0:1a:b4:3d:44:92:61:28:d2:c3:38:42:
1c:84:57:ea:fd:07:ed:b9:94:aa:8f:a1:20:de:d9:bf:c0:b1:
f1:6d:93:1d:aa:b1:59:bc:c3:a1:a3:d6:0a:fa:6d:2a:6f:5e:
24:10:59:87:b6:2c:aa:dd:f5:41:fb:6d:48:2c:21:8b:be:54:
6a:72:ec:d5:d0:39:08:39:d6:e2:e3:ad:ae:70:0d:a4:88:2c:
e5:b1:54:fc:94:f8:7b:12:2f:11:e2:30:4b:47:3a:07:d2:e8:
4d:33:b6:97:bb:c3:fb:80:96:ab:b1:d1:76:37:78:cb:7e:d7:
74:4f:a5:ee:b4:71:dc:89:c1:7a:d9:74:95:36:36:3e:53:63:
3d:06:91:86:62:4e:3d:8d:5c:52:0b:db:5b:5d:a8:8b:c5:9b:
e8:40:4e:94:52:4d:b8:c6:47:46:6b:c9:6e:71:ce:96:d2:fa:
3d:df:0d:aa:5b:52:38:6e:8e:b8:5f:77:ee:eb:8d:3c:1b:87:
eb:b0:e3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:27 2026 by rpki-client