Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: tHqvt3OCSXyxjxh2gIkJJeBoCw7WpC/14F+c/kNgY5o=
Subject key identifier: 13:AB:A6:1B:31:CF:A7:A9:A6:3E:F2:54:C0:F1:96:7C:5C:F0:17:AA
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01A114BCF352EF23238498A1B87D1B239E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0A67
Signing time: Wed 07 Oct 2026 05:01:29 +0000
Manifest this update: Wed 07 Oct 2026 05:01:29 +0000
Manifest next update: Thu 08 Oct 2026 05:01:29 +0000
Files and hashes: 1: 3dGXQaAN8gyj0pfiUomGURLr8Gk.roa (hash: 29zMKU+zr2s5hhxmBkhcbzVqYD9Bjs33k2kXOnQbPmk=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: CNlPD1tkHEoIsBYPQvp0jxfQlxiiugp+cEMW3Bz6Bpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:14:bc:f3:52:ef:23:23:84:98:a1:b8:7d:1b:23:9e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Oct 7 05:01:29 2026 GMT
Not After : Oct 8 05:01:29 2026 GMT
Subject: CN=13aba61b31cfa7a9a63ef254c0f1967c5cf017aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:83:ab:99:29:98:ed:b0:ae:1d:cc:e1:2e:
8c:40:66:42:e5:77:94:01:6d:a7:7d:1b:57:a5:f0:
50:fb:14:90:d9:5e:a5:57:40:d7:2f:db:fc:6a:20:
96:15:cb:16:cd:75:5c:7b:d3:b5:fb:14:37:e1:2d:
1f:23:f1:fd:0c:ba:f9:9e:da:56:40:e5:99:39:11:
17:86:a8:76:14:c9:11:16:31:f8:e6:98:21:47:16:
b8:9f:04:15:8c:47:f1:3c:1f:7f:f5:9c:fe:81:0f:
02:09:b4:50:43:ad:77:01:aa:60:16:3d:08:1f:e9:
f6:a1:ae:01:d9:83:8a:4f:6e:d9:ea:b0:6e:47:6a:
00:1e:14:29:7a:9e:f9:5b:98:1c:b5:ca:27:2a:b4:
9f:c8:30:94:40:26:e8:d8:89:68:49:32:28:73:b7:
4b:a2:de:da:0d:34:da:9f:70:37:fb:20:92:f4:84:
82:b1:30:29:99:63:40:40:87:80:94:b4:85:d8:3f:
f3:e2:1a:7a:35:8c:29:ad:9c:32:11:a6:bb:9e:74:
af:75:fa:dd:b2:6a:b5:ee:ff:fa:82:3f:ea:e2:2c:
27:6f:2c:85:f9:4d:ad:46:97:56:39:26:2f:d9:f8:
69:79:9c:96:8b:f3:8e:53:f6:25:c7:b9:63:06:f0:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:A6:1B:31:CF:A7:A9:A6:3E:F2:54:C0:F1:96:7C:5C:F0:17:AA
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fe:23:ca:a2:32:31:52:9c:04:31:47:6e:46:8b:29:2f:87:
80:29:fb:cb:7d:d1:58:39:3a:c7:c5:a4:6b:36:a6:6f:66:4c:
40:7b:9e:02:e0:9e:a8:e2:d3:01:dd:28:6d:bd:c5:63:26:fc:
58:f6:a8:84:b7:9d:b5:ea:25:97:5e:16:03:ca:01:e1:7e:2b:
93:2d:9f:c4:b4:a5:32:87:e4:c6:39:28:dd:81:3a:ca:7a:2a:
e4:33:0d:1c:d8:0e:82:e9:03:19:f1:51:d6:0f:0f:f7:27:fe:
6b:58:7c:bc:d9:24:0b:02:9c:a3:ea:6e:d6:42:97:4e:4f:d1:
d3:68:7c:c9:5d:42:99:54:9f:a5:70:81:d8:5b:db:40:e0:12:
20:49:66:64:ad:e5:89:e9:77:f2:2a:f9:20:27:0f:56:37:fb:
44:54:a3:05:81:1a:40:19:21:02:4e:67:bd:05:a3:f8:8a:99:
ee:c6:76:d3:8b:8b:97:c7:46:94:38:ac:29:48:d7:11:ba:4e:
89:05:ab:13:e8:c2:a3:b6:47:8c:93:78:de:a7:4d:9a:51:c3:
5a:4c:63:e2:81:ab:e5:71:ab:d6:ee:c8:40:e8:2b:2d:bb:2b:
00:53:3c:37:da:16:57:8d:34:16:29:46:65:53:04:be:88:39:
07:79:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:19:18 2026 by rpki-client