Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: BRwEU9QFkEBZRAMIohm/0CcmuxoTdvw3gqSuAeoU0Hk=
Subject key identifier: C5:83:D8:7D:EF:94:37:CB:C1:78:A0:53:CD:8A:46:6E:A4:4F:FD:6B
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 01A08CB175245905F89B0A7822DB308A66B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 19:00:35 +0000
Manifest this update: Thu 10 Sep 2026 19:00:35 +0000
Manifest next update: Fri 11 Sep 2026 19:00:35 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: MG3HgBT9/2u3AiofUGbV1fI/b/oFDjMExPWNQa5GQUs=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:75:24:59:05:f8:9b:0a:78:22:db:30:8a:66:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Sep 10 19:00:35 2026 GMT
Not After : Sep 11 19:00:35 2026 GMT
Subject: CN=c583d87def9437cbc178a053cd8a466ea44ffd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:bc:84:3f:31:31:a8:47:57:9c:02:28:90:
d9:1f:04:97:a7:4e:78:9b:77:05:a0:77:bc:d8:70:
a7:c8:37:8a:26:35:70:f6:e3:cd:1b:e2:14:1c:76:
b0:05:27:2f:e5:09:58:f1:2e:ec:24:f2:65:ba:57:
73:60:ec:f3:27:7c:68:82:df:7f:c1:f7:f9:d5:f3:
3c:ba:e9:95:bc:8c:93:43:9b:21:15:20:81:d4:93:
5e:19:7f:7f:9a:1e:df:73:0d:5b:59:a1:cb:02:cb:
06:51:0f:ea:07:1e:43:49:9d:09:a6:66:7e:50:06:
00:00:e4:d6:e6:82:ee:57:47:21:22:de:85:e2:67:
ae:a0:16:88:40:6c:fb:83:4a:5d:cc:e1:ae:f0:46:
8b:d8:8f:7f:cd:7a:03:f6:61:68:6d:34:cd:76:f4:
70:9c:fa:d0:27:c2:d1:bc:db:36:a3:66:7c:9b:a7:
35:85:c6:a5:4a:d5:bd:4c:ab:30:cf:b6:eb:63:86:
3d:be:de:9f:72:df:3d:22:c8:95:73:b6:ef:31:6b:
ea:5b:cb:33:5e:cc:92:aa:d3:38:72:e1:54:12:ef:
74:a3:e1:47:14:49:75:1a:cb:7e:52:97:64:ff:77:
19:d6:7e:a2:18:e5:85:74:1c:e6:cb:97:86:e7:b7:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:83:D8:7D:EF:94:37:CB:C1:78:A0:53:CD:8A:46:6E:A4:4F:FD:6B
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9f:da:5e:ec:57:f3:0d:9d:20:0b:3d:c4:a9:a0:b2:97:65:
1b:c4:c2:9a:df:b1:c0:74:5f:4c:75:66:05:b5:46:09:b7:a3:
63:ed:83:fa:b9:8c:26:7a:03:27:fe:0f:92:7b:81:da:d7:65:
0e:e1:2b:6c:f5:8c:4d:08:3d:87:ec:55:32:c5:4f:06:b0:3f:
be:cc:94:dc:fc:e7:8f:0a:58:19:65:7e:3c:29:ef:81:07:e6:
1c:09:52:fc:a1:27:a8:7c:f7:a5:e4:45:43:f4:7a:53:c5:b6:
fb:42:00:93:d7:f4:de:5f:50:e9:01:41:5d:72:45:6e:fa:67:
17:c0:23:7b:c5:3f:40:f9:8f:03:f4:d9:c9:81:6f:23:88:d0:
f0:f2:43:6a:10:91:f9:76:3a:44:da:cd:96:7f:15:0c:3e:34:
c6:d4:0e:b4:44:2e:db:fe:26:2c:88:e9:23:82:9a:f4:bf:73:
c0:a2:bb:d8:17:92:7a:bf:32:9c:2e:2c:cb:b3:d3:73:58:33:
98:f6:2d:82:be:96:53:9a:2a:bf:7a:b4:ac:38:d6:0a:bc:18:
85:f3:1e:8f:ae:f0:12:77:77:47:c0:21:dd:1c:19:44:5c:bf:
82:84:b1:14:82:80:15:15:35:8b:50:c9:f1:36:56:08:4a:89:
33:0e:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:53:57 2026 by rpki-client