Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: OycoUccxaX/y9tVEnVgdNSsG0GWq+UNsk3vDUawYo3o=
Subject key identifier: 5F:9E:85:A5:93:1A:27:FF:B4:FE:A0:38:0E:EE:55:A0:BD:E9:95:FB
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01A10693A559E9C9B21E50CF3BC8851CF7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1A8A
Signing time: Sun 04 Oct 2026 11:01:41 +0000
Manifest this update: Sun 04 Oct 2026 11:01:41 +0000
Manifest next update: Mon 05 Oct 2026 11:01:41 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: 00PhMvhhDcYTd6EwNf5DrRWN7agILuRSNpE5PFnMM/M=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:a5:59:e9:c9:b2:1e:50:cf:3b:c8:85:1c:f7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Oct 4 11:01:41 2026 GMT
Not After : Oct 5 11:01:41 2026 GMT
Subject: CN=5f9e85a5931a27ffb4fea0380eee55a0bde995fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:48:83:28:1d:f0:9e:92:d6:5b:59:64:e4:19:
48:59:1b:34:19:bd:c8:75:6f:1f:7b:4f:d0:47:d3:
c9:b0:7f:0a:74:ea:73:8a:69:7d:3c:88:e6:cf:96:
5c:95:03:fb:af:47:0d:48:54:27:c1:26:94:a0:be:
c5:19:18:56:77:0a:fd:b9:7e:da:0c:47:cc:06:9e:
db:3a:4e:b0:8c:6e:b7:2f:0b:f5:d8:7d:70:bb:eb:
41:46:f6:61:4e:87:30:d5:4d:ee:10:8a:72:f5:b3:
9e:6f:c2:ba:5e:d1:c5:7c:9c:d7:6a:c9:d7:74:62:
29:d8:1d:43:0c:91:2f:11:9c:2e:b5:f5:a9:75:20:
e2:ec:b0:b6:0f:a4:30:bc:65:12:38:20:c3:13:e9:
55:b1:e4:ca:9a:c2:08:95:1c:ed:91:1a:46:6d:f1:
bd:30:a8:5d:28:9a:41:c3:ad:aa:b1:1b:fe:aa:b2:
86:1c:2c:e9:a3:e6:f2:68:7f:00:2b:bd:eb:92:14:
5f:fa:ee:c0:72:c8:76:7f:8f:b1:13:1f:45:a9:fd:
ba:51:2e:01:91:36:49:a2:64:d0:49:b9:a9:5d:d5:
87:1c:55:d3:7b:53:c6:a8:9b:63:fd:75:68:2c:25:
37:fe:8c:8d:73:65:2a:80:67:8b:27:9f:51:d5:d5:
eb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:9E:85:A5:93:1A:27:FF:B4:FE:A0:38:0E:EE:55:A0:BD:E9:95:FB
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:af:95:8a:93:63:f6:f4:05:2c:09:45:98:d2:fc:03:f8:7f:
3e:3d:03:6b:f8:80:97:b0:c0:04:a8:0a:ed:aa:9b:f9:fb:b8:
cc:b6:59:8d:9c:53:ef:f2:01:a8:cf:cb:89:dc:5c:16:07:5f:
3d:dc:07:40:db:17:50:a8:f4:10:ee:78:72:79:71:3e:72:e5:
b8:e7:63:d2:c0:55:dd:23:b1:f6:38:38:14:a0:1a:a3:35:55:
98:39:34:f8:7a:8e:c8:48:9c:65:59:79:f3:c3:92:e7:f1:12:
ff:e7:19:8f:79:d6:a9:49:b1:35:a3:1e:be:e5:07:ff:b9:5f:
36:f8:d3:0c:f4:29:23:11:ba:25:46:f9:f3:b9:50:32:d6:8a:
81:75:72:d0:ee:a1:ad:6d:ec:79:a4:9b:3f:b9:94:d4:28:c6:
96:62:11:51:25:01:bc:ea:5c:9c:78:4a:19:47:9e:28:52:93:
e7:62:7e:eb:5b:e4:fc:ef:54:28:35:25:30:b1:6e:43:67:23:
67:f1:b7:5e:79:ce:f4:0d:fc:af:9f:0b:04:b5:5f:47:7b:9e:
99:ff:91:8e:cd:d4:6d:5b:67:c6:45:e0:75:70:44:e0:43:77:
2f:38:b8:83:e7:c9:11:ff:b4:71:bc:3f:df:21:9b:82:f9:f7:
48:06:45:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:16:04 2026 by rpki-client