Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: kieNYIw4v8TXYfDRC6EZqm3ZF2A9JYq7DXboxhZMunk=
Subject key identifier: 75:93:E4:4A:DB:D8:4D:53:F9:62:6B:C2:75:D6:16:72:31:57:4F:48
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01A136DA41B3B003F37AED07E2AA3E00B636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 20:00:35 +0000
Manifest this update: Tue 13 Oct 2026 20:00:35 +0000
Manifest next update: Wed 14 Oct 2026 20:00:35 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: mZDHVSpjYfGNHzGzREU27Hh49WaKFmEE5yyHvqc9UzE=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:da:41:b3:b0:03:f3:7a:ed:07:e2:aa:3e:00:b6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Oct 13 20:00:35 2026 GMT
Not After : Oct 14 20:00:35 2026 GMT
Subject: CN=7593e44adbd84d53f9626bc275d6167231574f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:82:57:d5:61:c8:90:4e:c4:6a:0d:56:5f:
f4:1b:f5:f7:64:cd:94:83:21:26:e5:d0:04:bb:ac:
6d:d9:16:26:51:cf:eb:69:28:79:ef:c4:8a:32:cf:
0b:d8:58:f9:1a:8a:f3:cf:e1:fe:86:dc:cd:91:05:
7f:6f:81:47:6b:94:fd:d8:26:aa:e6:95:e1:82:3b:
37:ca:53:ff:7d:47:64:71:61:7a:6b:46:40:6c:f6:
96:b5:5a:fa:95:d4:61:32:2a:28:1c:7e:1c:23:fb:
4d:c4:41:e2:c2:73:e4:38:fd:3a:f2:25:b2:b3:bd:
dc:8d:f1:54:38:85:6e:20:96:28:06:a1:30:2f:6e:
87:de:d8:e5:10:53:43:3b:de:37:2a:7b:44:7b:9f:
28:ea:0d:f3:d7:7c:1f:26:15:31:37:e7:cd:22:69:
d1:5c:65:2e:2d:e5:d4:c5:ef:3d:65:80:9a:6c:23:
d7:60:42:89:ad:81:00:9c:c2:a3:91:45:89:25:99:
70:e4:4d:b6:2b:f0:34:0a:f6:e5:32:a4:43:d7:1a:
27:4f:bf:96:c0:b1:51:68:d0:f4:5a:d0:b8:1a:7a:
b8:26:a5:b6:c6:a7:9e:64:9f:ab:dc:e0:6d:fc:fa:
10:6a:38:9d:fe:0d:9a:dc:47:8f:a6:99:fd:68:ba:
6e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:93:E4:4A:DB:D8:4D:53:F9:62:6B:C2:75:D6:16:72:31:57:4F:48
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:63:81:e3:84:c3:f9:d3:f2:c6:57:2d:e4:52:3b:11:0d:
5b:44:da:b3:6b:83:f4:91:96:26:12:50:ea:24:ba:47:7e:84:
c4:c5:1f:4e:d4:bc:3b:a0:2a:61:cf:dc:46:38:a8:d1:e7:52:
90:7c:96:85:9b:32:91:f5:09:17:f3:fd:51:3d:a6:cc:23:6e:
f6:f6:cb:af:89:18:49:fb:4f:71:dd:59:ca:90:a5:e9:32:a9:
38:81:ef:bb:c5:81:01:12:a0:96:02:ea:60:c3:b5:18:73:a5:
e3:f5:60:31:f3:c7:f7:d1:40:11:58:67:31:f5:0c:84:ef:bc:
e6:6e:96:5c:72:05:b8:a0:9b:73:2f:e5:aa:fa:8a:cb:47:8e:
57:0c:56:ed:20:0c:65:dd:42:da:0e:1a:29:5e:19:08:e6:30:
a3:d1:97:b5:b3:5c:c0:6d:f1:f1:1d:21:60:1e:88:56:79:17:
f2:27:45:f6:01:c4:1c:f1:fd:76:f7:a6:01:52:de:74:1e:99:
1b:a2:03:1e:91:fd:4e:5c:0d:34:cb:5e:ee:e0:5f:23:3f:9c:
23:9e:a3:9f:2c:85:d1:2e:fc:9b:c3:55:dc:31:a2:fd:f3:61:
3f:70:10:02:88:e7:1f:4a:db:14:84:c2:b2:03:0b:7a:a7:bd:
34:94:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:29:28 2026 by rpki-client