Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
File: UgE1Q57tNQX3iGMmZ22r83zrvzY.mft (raw, json)
Hash identifier: 5sQLExg2XEK1++4Ks17oYrv2OZty5aUmkBI/Yd/5/aE=
Subject key identifier: D2:4A:F6:47:F5:0E:CC:55:5F:E1:C9:EA:41:07:23:00:3A:2B:A6:8B
Authority key identifier: 52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
Certificate issuer: /CN=520135439eed3505f7886326676dabf37cebbf36
Certificate serial: 01A0E92E826A668566B6836E1D0F12B22B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:02:14 +0000
Manifest this update: Mon 28 Sep 2026 18:02:14 +0000
Manifest next update: Tue 29 Sep 2026 18:02:14 +0000
Files and hashes: 1: 60JuUSTouRU0NgMTspFmcLL6UNI.asa (hash: hRKCOYUhKmouY4DU6/XK7YCHELPIORSd+VCaf267/OI=)
2: UgE1Q57tNQX3iGMmZ22r83zrvzY.crl (hash: EM5v2oKvhT3ZGBzq4kq4bW4Heqld92dNsUl6m8C576o=)
3: hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa (hash: cWZgtl6Fe0hqFBrcZyuN1x8H8xcw1ByuFigP7rHanh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:82:6a:66:85:66:b6:83:6e:1d:0f:12:b2:2b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520135439eed3505f7886326676dabf37cebbf36
Validity
Not Before: Sep 28 18:02:14 2026 GMT
Not After : Sep 29 18:02:14 2026 GMT
Subject: CN=d24af647f50ecc555fe1c9ea410723003a2ba68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:67:d3:ed:31:34:06:95:59:cc:fd:40:64:48:
6d:27:a0:f6:a5:65:c5:cd:13:12:78:28:b7:4c:16:
7c:58:8b:d8:1d:a3:24:2b:84:80:a8:22:a0:c5:1a:
d8:6e:98:89:0a:e1:39:38:b1:91:9c:1d:59:8e:62:
39:c1:d4:e3:39:6b:37:83:e7:88:2c:0d:60:8d:7e:
08:a5:ef:46:79:54:eb:46:29:dd:a9:4c:d1:2f:7a:
31:ae:44:b0:a9:3c:ea:42:a4:4e:a2:fa:7f:c1:42:
2e:55:64:cc:04:e3:fe:b4:c6:e4:8e:17:fb:2d:65:
28:15:72:cd:a2:d5:7d:b0:63:b5:e7:98:93:c8:3a:
15:ca:d3:67:db:91:e9:0a:53:5b:4b:2b:a9:f1:0a:
41:40:e5:95:0c:a3:a6:15:39:43:2d:cf:70:22:fa:
fb:d9:e4:09:80:11:aa:c6:03:c1:9d:f2:d9:a5:3e:
bf:36:e3:d7:0f:11:6a:4d:bc:8f:37:77:78:8a:03:
5e:f5:4a:4b:dd:2e:70:04:85:41:1a:87:76:08:2b:
dd:59:64:70:9e:11:4d:05:ae:67:2c:90:55:49:74:
30:60:94:b2:6e:eb:d6:b2:f7:f6:0b:d2:96:56:23:
e6:ca:d1:f7:2f:84:23:4b:bd:db:77:ff:97:bd:07:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:F6:47:F5:0E:CC:55:5F:E1:C9:EA:41:07:23:00:3A:2B:A6:8B
X509v3 Authority Key Identifier:
keyid:52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8c:d1:f0:91:e5:e7:73:4b:f2:52:c3:ad:fe:ad:a7:e7:f3:
75:73:86:23:72:4b:c2:9c:0e:73:a9:9f:f8:38:78:24:a0:3b:
87:18:46:aa:5e:73:b2:f7:5f:4c:45:2c:ef:37:a3:9b:8d:46:
bb:94:5e:27:25:6a:ff:7f:37:2c:f2:70:3d:92:8b:73:b5:0d:
41:19:df:2f:82:8e:c9:5a:62:ed:f8:fc:fc:53:da:81:d9:ec:
b7:b7:e5:c7:f6:79:2e:01:21:bc:4e:c1:69:25:42:24:93:ea:
3b:a3:52:71:47:4d:b8:70:9b:84:d8:f6:61:fe:79:bb:7c:75:
07:42:43:e4:da:65:7d:63:75:2a:53:1f:b6:a2:8c:a9:72:8a:
ad:9a:a3:bf:eb:d2:ef:83:ad:3b:c2:af:f4:2e:21:ac:bc:09:
93:3f:f6:e7:74:4f:b5:5f:14:30:ea:1d:c7:67:09:49:48:fc:
ec:d7:8d:31:7f:00:70:50:b3:43:70:83:a8:36:22:9e:e8:db:
6e:80:46:66:ce:86:0d:22:35:b0:e2:34:0b:6f:a2:c1:b6:a9:
b8:b6:42:d2:ef:64:48:75:be:65:9f:90:43:d7:07:37:c3:d6:
3d:b2:e0:41:48:5c:df:df:ef:53:2b:5e:01:20:31:c2:8f:bc:
27:ac:7d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:40:17 2026 by rpki-client