Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
File: UvYp80zQg7xoBUBpscxe55cfi7s.mft (raw, json)
Hash identifier: 6lZ+GGYtxsp9jIOcggjZjgEg4nEaeY4ArYAx7rUbyvs=
Subject key identifier: 7C:7F:90:67:3F:D2:99:AC:97:64:BE:49:B7:F7:8F:1F:04:04:1C:9C
Authority key identifier: 52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
Certificate issuer: /CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Certificate serial: 01A174A6C472D13E3CBE90A81F3EAC5CB0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
Manifest number: 1AC1
Signing time: Sun 25 Oct 2026 20:00:48 +0000
Manifest this update: Sun 25 Oct 2026 20:00:48 +0000
Manifest next update: Mon 26 Oct 2026 20:00:48 +0000
Files and hashes: 1: LNb42L1m0tMsBxluQXFH9OE79jc.roa (hash: Y27U9YGM/gKMGQyY9CcVkyZMB1i0H4sQ3s5bCFoh+RM=)
2: UvYp80zQg7xoBUBpscxe55cfi7s.crl (hash: MA5dsQcNCuUJcP4XXD9EnvVNKMMnwoF77RzPoHCCKwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:c4:72:d1:3e:3c:be:90:a8:1f:3e:ac:5c:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f629f34cd083bc68054069b1cc5ee7971f8bbb
Validity
Not Before: Oct 25 20:00:48 2026 GMT
Not After : Oct 26 20:00:48 2026 GMT
Subject: CN=7c7f90673fd299ac9764be49b7f78f1f04041c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:d7:86:29:47:01:c7:22:75:cc:5b:24:fe:
87:e9:21:8e:c6:36:78:b5:30:99:a2:13:d9:67:47:
3e:b0:f3:6a:89:1f:96:43:d3:8f:8b:d2:00:06:30:
fb:c8:ca:34:fc:6c:cf:16:27:02:af:0a:8f:e0:6c:
68:75:38:4b:c1:1d:d9:4c:e4:02:ba:e3:86:72:06:
6f:94:46:50:93:03:bd:b4:12:94:a0:a8:34:2d:43:
ea:4c:f5:5b:fd:e4:43:7e:52:f5:d1:29:be:3d:0c:
77:b2:53:9a:1f:9d:ec:60:c3:55:5d:e6:35:fa:dd:
52:2e:cd:a1:ac:e9:2c:91:a5:e8:cf:dc:ec:74:af:
76:26:75:7c:b7:7b:1c:09:b1:24:ad:d2:d5:ec:c8:
1c:63:53:63:67:c0:ea:63:31:48:62:b1:9f:52:a0:
fa:5c:15:0b:05:03:5b:36:c4:4c:eb:11:a6:4e:24:
f5:94:2b:28:3d:10:cc:a6:76:fd:e4:8d:f5:53:26:
6b:b3:67:d8:ed:9a:88:84:66:b0:3f:5e:1d:30:34:
3d:c1:9d:f7:5d:81:f8:42:cc:c5:7e:97:28:88:6f:
25:92:ab:df:c2:18:9a:2f:1a:bc:6a:6d:2b:11:15:
ba:15:4e:01:8c:3a:85:e7:33:72:89:ab:6c:41:a5:
53:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7F:90:67:3F:D2:99:AC:97:64:BE:49:B7:F7:8F:1F:04:04:1C:9C
X509v3 Authority Key Identifier:
keyid:52:F6:29:F3:4C:D0:83:BC:68:05:40:69:B1:CC:5E:E7:97:1F:8B:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvYp80zQg7xoBUBpscxe55cfi7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/932fb7-db05-409c-a16a-97a4283b6292/1/UvYp80zQg7xoBUBpscxe55cfi7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:e5:ad:52:c7:9c:ab:4f:94:be:18:90:22:5e:32:ff:2b:cb:
a6:66:5e:d8:95:5c:11:db:79:e1:89:90:61:11:f8:cc:c4:5a:
9f:9d:34:52:08:fc:84:b4:f0:0f:4b:b1:cc:2a:5e:3a:b7:45:
e7:83:a9:01:44:b6:ea:87:f7:ed:10:04:d9:88:d8:62:0f:50:
b6:e9:b3:74:3c:0b:ef:8a:b2:a0:4d:f6:15:4d:65:63:ff:4a:
d9:a6:45:01:68:bd:e0:f9:5c:cd:54:a5:72:9a:6a:ee:36:d6:
0d:7b:08:ef:81:68:eb:67:47:e5:f3:54:76:f2:8d:a2:d4:34:
bf:85:89:e0:f9:71:f0:cd:a8:1f:a4:d7:5e:67:8d:0b:b9:2a:
5a:e3:fa:3a:38:9e:81:36:35:20:46:2d:82:8a:0d:2d:8f:22:
a5:6f:f0:d2:56:89:54:a8:ab:de:85:06:07:b3:08:7e:d1:f5:
7d:a5:0e:a7:47:f2:83:e8:77:21:0d:ff:78:64:d0:26:03:8b:
d3:1e:aa:b3:96:fb:82:2b:dc:78:6f:87:a5:d7:ce:3b:f1:e9:
c6:6f:4e:7c:9e:ca:c6:6e:3a:4b:04:c6:85:f3:95:68:d4:54:
26:a4:54:85:65:ae:23:ba:2c:a6:2f:8c:fc:24:70:68:0b:df:
ad:6e:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:22:39 2026 by rpki-client