Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: FCsslvzKnj0bE37sAfKQ/6Iu0U/q7hJsElJPGrk6jQs=
Subject key identifier: 5E:10:9E:0E:14:F6:06:7F:0D:69:3C:72:46:D4:E9:6B:42:88:95:C1
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 01A043870FEB37B33785CF2C5F8619A7EBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 1129
Signing time: Thu 27 Aug 2026 14:01:59 +0000
Manifest this update: Thu 27 Aug 2026 14:01:59 +0000
Manifest next update: Fri 28 Aug 2026 14:01:59 +0000
Files and hashes: 1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: lumKa9BEJZgjRzhmqtXJ2LAXKWosYkK6xvIdziS08A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:87:0f:eb:37:b3:37:85:cf:2c:5f:86:19:a7:eb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Aug 27 14:01:59 2026 GMT
Not After : Aug 28 14:01:59 2026 GMT
Subject: CN=5e109e0e14f6067f0d693c7246d4e96b428895c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:4d:25:35:78:88:0f:f7:f9:b3:f4:8c:08:
29:20:8c:d5:43:35:5a:d2:d1:8f:18:51:bb:73:22:
c2:e6:4e:6b:a0:5b:d3:18:85:b5:f6:bc:7e:e0:70:
d2:6f:29:75:40:d6:21:31:a5:48:aa:e3:af:b6:1a:
70:40:e4:d0:1e:89:c1:b9:71:71:b9:78:26:f1:a9:
0f:15:05:35:e1:c5:55:c3:bb:52:26:85:83:e5:f9:
da:f3:83:7b:6e:49:95:7b:1b:26:e3:c8:0f:ff:db:
55:f0:e6:0f:fb:2c:94:cf:c1:ea:e7:bd:57:50:4c:
f9:f0:1f:51:5f:71:9c:80:ab:75:8c:e7:6a:e9:66:
3e:ff:e1:65:b6:76:74:e0:0b:0a:0c:01:89:79:05:
03:9b:38:b4:bb:98:25:cc:e7:e6:13:b2:65:09:61:
3a:2d:b6:87:5f:98:f6:e4:59:8b:1b:9a:22:a3:da:
64:4d:21:bb:ef:64:24:3f:0b:9d:80:66:0f:12:ee:
47:3a:c4:99:5c:e5:b8:95:51:9b:dd:b1:0b:67:70:
59:03:ef:2b:1c:cd:c6:99:44:44:a2:f5:b3:0f:c4:
e4:c0:0f:a6:32:d1:c5:1f:0e:cf:16:26:d4:1c:7a:
a9:03:8f:e9:b8:50:cf:3d:03:cf:8d:75:51:c6:b7:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:9E:0E:14:F6:06:7F:0D:69:3C:72:46:D4:E9:6B:42:88:95:C1
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:93:97:3a:d7:c3:8b:2d:52:53:30:50:a4:a1:b0:e1:b3:4c:
fe:31:75:cd:ec:cb:15:00:67:9c:43:4d:a0:a6:06:df:30:a6:
45:7e:9a:ca:82:f1:b7:28:29:b9:78:31:c9:a2:66:68:cf:ce:
7a:9d:1f:6c:1f:86:4d:bf:b3:67:18:5e:91:1f:b9:c4:ea:4a:
ea:4b:3f:56:37:72:cd:d7:12:1f:2b:f6:8e:88:8d:9f:da:cf:
c5:79:ab:0e:7f:e3:54:10:e0:27:ab:be:d7:ea:80:ed:94:21:
c6:ff:94:da:de:c7:53:ae:af:7d:dc:50:05:e7:0c:91:01:bd:
2b:6a:5d:07:a9:7a:47:3b:18:ba:33:46:b5:80:a7:77:09:72:
ab:88:e1:82:7c:10:21:e8:78:8a:ae:8b:b1:a1:d2:7c:0a:d4:
08:5e:f6:44:30:47:c8:68:91:af:14:52:22:55:42:2f:d4:d9:
ea:b5:51:06:f8:e1:4b:91:4c:17:8d:9e:9c:9a:7f:cf:36:52:
24:36:45:24:94:82:c1:70:27:91:ef:3b:7f:5c:d5:30:4b:bc:
e2:d2:b8:1e:54:f2:ba:09:d4:5f:a5:fe:69:97:ef:c4:f1:12:
d1:8e:71:81:86:1e:78:cc:43:e3:6b:aa:10:06:af:e1:91:ea:
a7:0b:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:07:58 2026 by rpki-client