Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
File: UltwWpHbww7RDrciK3eXuDTgGGM.mft (raw, json)
Hash identifier: V3OKezx0GtwM2jAm64Zq33MJ+Uk4CVqHxksxEutVsac=
Subject key identifier: 88:46:04:83:6F:60:95:2E:79:73:48:05:24:88:4D:3C:E4:5C:4B:CF
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 01A05968B1DE355BF42644BD48F6A53F92FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
Manifest number: 1A34
Signing time: Mon 31 Aug 2026 20:00:28 +0000
Manifest this update: Mon 31 Aug 2026 20:00:28 +0000
Manifest next update: Tue 01 Sep 2026 20:00:28 +0000
Files and hashes: 1: KlL1K6iOrdNgSybgFClw1upWqbU.roa (hash: W7OttyGx9EuMgenKXewm+r+hTp3kZdfJ3JB/6T3yysg=)
2: KoJ_nmd6FhgPRet_uL_gm2vuT4k.roa (hash: i8hpoMRnwQX0Wjdn2y1MP/kZ1J8Pgc2t0t702D6K4a8=)
3: UltwWpHbww7RDrciK3eXuDTgGGM.crl (hash: 6ncqzeWHpqjjLtcyvSQctn6G5EcFj6mouuSNqnXlP5Y=)
4: pa_3nrQU9sw7OgTjd5yx0VmvRCA.roa (hash: RO+47JjxuCYnZ9Bz/vNN2VIRL6JJUsDg7rwYhEHWFsY=)
5: zNKUtHAFTtLYqLumLGcRzG27f7Y.roa (hash: 872Fq4m0qhsFSDlfogdNcIFhv8haNEfuUjtryb/YTr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:b1:de:35:5b:f4:26:44:bd:48:f6:a5:3f:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Aug 31 20:00:28 2026 GMT
Not After : Sep 1 20:00:28 2026 GMT
Subject: CN=884604836f60952e7973480524884d3ce45c4bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:d0:15:a6:d4:03:f3:14:cf:8d:95:d7:43:
68:28:93:e9:76:5d:58:a9:d8:16:8b:30:cc:de:98:
33:3e:69:05:c9:70:00:2c:d7:45:a4:da:82:10:cc:
75:b0:68:ec:43:6e:68:c7:12:44:2b:0f:ec:2d:e2:
1a:7b:30:99:c3:b3:07:c1:07:01:49:a6:51:ba:f6:
43:68:23:1b:48:85:d6:ef:63:52:18:11:d1:82:4d:
d1:40:29:dc:6c:6c:3f:90:44:a3:78:2e:14:6a:54:
1b:ae:8a:0c:fa:31:73:a2:c2:4e:b3:f4:51:f6:ac:
d4:a2:cf:43:74:25:54:28:a6:eb:c2:01:bc:88:c6:
64:f2:19:8c:94:f2:9e:00:8e:d0:b2:48:7e:08:b1:
40:b0:57:0d:02:f7:29:94:f2:b2:b0:dd:79:52:0d:
ef:83:27:a8:1a:c9:7b:ba:06:7f:86:1d:99:ac:53:
08:44:51:36:e6:b0:74:f4:3a:e1:6c:f6:d8:0b:83:
c3:6b:7e:cb:56:3f:d4:8d:7d:5e:ae:d9:4b:82:f7:
2b:d5:73:45:33:ab:22:9e:a8:96:09:98:a1:d9:39:
0e:c8:fb:76:32:50:29:41:ed:89:b7:a7:b7:9c:98:
4b:ab:5e:f1:07:2f:24:66:fa:28:19:54:ec:c6:04:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:46:04:83:6F:60:95:2E:79:73:48:05:24:88:4D:3C:E4:5C:4B:CF
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ef:d4:cd:63:67:34:d4:a2:44:c4:2c:15:36:85:44:7e:00:
57:a1:70:45:78:07:ca:f8:66:e6:91:2b:ea:cc:f7:29:6f:2f:
cd:12:20:f0:23:bc:5b:81:59:41:d2:35:df:de:4e:39:b3:62:
52:52:b3:9a:6b:d4:d7:5f:54:76:04:97:51:75:ea:7e:08:84:
8a:54:f0:5d:9a:2e:43:4f:ab:1c:d3:b4:b0:93:cf:80:cd:87:
a6:96:e5:fa:0b:08:8a:71:2a:a2:79:4c:74:48:e5:c1:e1:01:
dd:0e:ed:8e:21:4e:ee:6f:13:ef:3e:3c:5f:53:1b:11:72:31:
11:b1:bc:eb:07:d4:bd:ed:61:d4:40:01:2f:50:ec:a2:7a:f9:
47:67:82:6d:d8:99:ce:6f:fb:51:9e:ec:3a:cd:8b:72:fa:2c:
7c:e4:c9:15:12:b8:86:97:46:c9:7d:9e:7b:46:72:28:a0:22:
a5:e3:0f:44:b2:0b:52:d3:9f:c5:9e:25:a5:a7:00:85:7f:f2:
35:1c:c8:36:1d:90:55:74:25:65:9b:42:74:a7:75:1f:eb:e6:
39:83:c6:83:f1:9f:72:52:cb:90:33:4a:2e:f9:55:8b:26:f8:
6e:d0:33:43:06:fe:93:e0:d8:56:d3:d9:a3:53:3e:b8:09:1b:
b0:a7:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:33:03 2026 by rpki-client