Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: 50mZvQREjHw57KDW+xxZg55tBYRUxFfRCgQXm8IzFAk=
Subject key identifier: 85:CD:B7:E2:24:68:1C:D8:13:62:F8:CB:B9:91:A3:6E:EF:FD:C8:D7
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01A14B73FE577AC8824935CBA6E01B5963FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0F0E
Signing time: Sat 17 Oct 2026 20:00:55 +0000
Manifest this update: Sat 17 Oct 2026 20:00:55 +0000
Manifest next update: Sun 18 Oct 2026 20:00:55 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: 4VKdlqipofIyG5uKSe5V/Bhm2Pz1RxGZ72ewNFLjlkw=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:73:fe:57:7a:c8:82:49:35:cb:a6:e0:1b:59:63:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Oct 17 20:00:55 2026 GMT
Not After : Oct 18 20:00:55 2026 GMT
Subject: CN=85cdb7e224681cd81362f8cbb991a36eeffdc8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:ce:bd:90:0b:63:1f:b6:11:97:66:cf:eb:
f1:d5:8a:7d:f7:99:7b:28:78:f7:3d:ae:44:bb:36:
fc:91:c4:b2:12:60:88:ca:c5:05:e8:09:41:af:56:
19:72:0a:59:05:63:83:74:21:42:22:64:1d:82:51:
0d:13:49:24:71:64:0d:0c:3a:ff:a3:9e:e0:ac:0b:
30:23:e0:77:96:36:a6:78:45:8d:38:86:1b:1d:e5:
1b:59:2f:8d:1c:2d:e3:65:4e:05:24:4b:fc:08:9e:
59:78:07:47:16:2c:81:fc:ab:2c:ed:b3:51:c2:c7:
1f:01:80:58:89:f7:0c:d2:a6:04:c5:03:b4:7d:cb:
62:3e:a4:61:de:65:6f:35:d1:86:68:af:8b:4c:6d:
b5:66:26:97:7a:c2:6e:87:f8:cb:df:d5:72:c1:a1:
b2:be:f3:f0:2f:b3:c2:72:13:21:da:63:5b:4f:07:
f9:00:eb:06:96:1c:7b:2b:f2:04:ae:2e:79:2f:f7:
03:66:04:ea:b8:65:10:8d:aa:63:73:c2:8e:bb:ff:
7c:ea:77:54:26:cb:ae:b9:63:de:e3:ef:96:1e:8c:
06:ad:2b:da:5e:44:c0:e3:ef:61:ab:aa:18:a8:f7:
33:4c:63:6b:3e:9c:0e:19:16:57:39:ea:e6:9e:76:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:CD:B7:E2:24:68:1C:D8:13:62:F8:CB:B9:91:A3:6E:EF:FD:C8:D7
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:87:f7:6e:27:8f:f4:10:d3:23:a4:b4:09:d4:7c:69:c9:1d:
2a:64:7e:ff:4b:06:3c:29:f0:fb:da:d9:f4:d3:b0:ed:fd:4a:
73:f4:ad:e3:ba:fb:ce:8a:2f:c7:fc:47:5c:e7:99:d1:e4:f3:
fc:f6:7d:bf:a9:c4:12:00:a1:65:fb:4e:cc:bc:3c:95:8d:64:
75:d9:3c:75:b0:4a:75:dc:00:2b:7b:e7:09:ee:69:d8:53:46:
0c:e7:64:78:b0:68:d3:4c:bc:5d:35:46:2c:0a:9e:27:38:a2:
09:f8:dc:23:7e:42:20:cf:d8:fd:95:d5:09:0d:66:bb:f2:07:
90:36:d3:2a:f4:22:22:3e:a4:2c:aa:81:7f:84:64:17:9c:a5:
26:61:1a:da:43:b8:80:b5:d2:1a:25:e8:4e:2d:50:48:81:24:
92:f8:94:d2:b8:50:67:37:02:80:04:65:24:12:5f:bd:b2:c7:
17:f6:6b:fa:7c:70:3e:84:b7:18:bd:a9:44:99:6d:12:b4:0d:
37:a7:bd:b6:b3:ca:13:4d:e1:75:3f:52:a7:bf:f3:b0:9f:fc:
95:77:8a:00:f4:45:05:42:5e:c7:85:83:d3:75:e1:48:25:96:
59:05:ea:b6:88:99:e1:a7:2d:b0:a2:0f:05:8b:fe:6a:06:16:
fe:0c:e8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:51 2026 by rpki-client