Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: kCI1khnJ/aV51C0pOeOqi7eBA6z0qm6O6+PSwwuW/T0=
Subject key identifier: 2D:D3:40:F7:F0:66:25:BC:C8:18:0A:7F:9B:B7:25:50:4A:62:66:34
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01A003CC12360EA045B447182C3EBC2E6205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1A03
Signing time: Sat 15 Aug 2026 05:01:40 +0000
Manifest this update: Sat 15 Aug 2026 05:01:40 +0000
Manifest next update: Sun 16 Aug 2026 05:01:40 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: WHdhdRNzEjCanj0WYM5tu4Znr0r+qiFX9P9W+xRdGmA=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:cc:12:36:0e:a0:45:b4:47:18:2c:3e:bc:2e:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Aug 15 05:01:40 2026 GMT
Not After : Aug 16 05:01:40 2026 GMT
Subject: CN=2dd340f7f06625bcc8180a7f9bb725504a626634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:ba:52:81:a4:97:fb:c8:eb:19:18:b7:7a:
f8:c9:5d:2f:32:8c:12:77:89:1c:45:f5:d9:07:1c:
f1:d4:9a:3f:45:04:7d:76:4b:f0:87:4f:f9:a6:90:
1e:06:73:1d:f4:b6:cc:b6:36:90:34:07:8e:d6:08:
34:b0:bd:10:a0:0b:fd:3a:33:b5:e8:52:51:06:20:
16:8c:0b:be:cd:b0:6b:4e:f5:a0:d2:7a:8f:8b:60:
39:6a:d9:b0:69:e5:64:b1:3b:d1:a3:76:b5:75:63:
3f:8e:78:5c:0f:53:c1:10:77:3e:01:1e:f3:96:b8:
69:68:01:3d:0b:44:9c:4c:14:a5:e9:d6:d3:6d:d5:
dd:75:c1:0e:e7:d0:2c:bf:6f:1b:1b:ec:f4:28:59:
97:e7:ed:8f:56:a8:6d:02:fa:45:58:80:cb:3e:4f:
23:56:eb:7b:96:fe:62:b1:50:86:87:1d:87:28:60:
8b:49:f0:45:51:2a:69:24:25:84:54:f2:f8:aa:0c:
f9:db:5a:ea:18:2d:51:83:f0:05:ca:04:39:78:7d:
88:1a:d8:56:c4:ce:6f:4e:76:1c:b2:a3:84:61:06:
ae:16:0d:ad:b6:a9:01:41:cb:d2:c4:ac:1f:26:0e:
c7:0d:e6:57:f3:68:50:d7:d6:81:22:d6:ad:60:fd:
fa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D3:40:F7:F0:66:25:BC:C8:18:0A:7F:9B:B7:25:50:4A:62:66:34
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:2e:f6:09:95:2c:06:42:91:a0:2b:6e:fa:69:91:89:42:56:
4c:a7:ef:6b:b4:af:7f:b1:2c:de:01:b1:93:0b:75:35:4e:49:
32:35:c5:2a:84:27:f7:f6:e6:41:6f:24:87:65:5f:14:46:9f:
09:1a:7d:8b:b6:5e:1c:a9:ae:e0:df:8a:58:82:32:03:85:f7:
a7:de:8b:10:d4:9b:65:b8:95:84:5c:09:78:18:91:f7:fe:86:
ec:e8:9a:17:89:25:94:a5:f9:67:42:df:56:28:a0:32:a5:3d:
7d:26:44:cb:b7:08:91:01:60:ce:f1:ca:84:1f:ec:aa:46:1f:
9d:ce:4a:55:a7:09:c3:c7:03:b2:8f:b2:20:00:7a:8f:0d:9a:
1d:a1:a1:62:46:ad:ae:c2:28:8f:5f:84:93:b4:d9:42:10:8d:
57:da:dd:30:17:07:a8:e2:16:3d:47:d3:ac:cb:4e:9e:ed:e9:
55:7d:13:ea:86:a6:e7:ae:85:da:8c:50:f6:58:51:e1:d4:95:
5f:3d:44:d0:33:04:d8:96:fe:43:ea:61:06:d7:f3:89:11:e2:
44:30:c9:1a:76:93:a1:b6:d6:f4:c1:b7:62:d7:31:09:6a:e8:
47:a8:4a:31:c0:36:ff:d5:9c:2f:fa:15:ed:d9:4e:bc:36:87:
2a:10:4b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:49 2026 by rpki-client