Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier: cpZx1SZvVhluTM/WxHgCFiT3DPPzkb5cOYjZnCpRbSU=
Subject key identifier: 35:5B:3D:75:CD:D3:2C:47:38:D5:41:B7:CD:5E:A8:13:AD:BF:FD:BA
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer: /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial: 01A0DDCE559D5E4C7E90B4927595458707FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number: 0278
Signing time: Sat 26 Sep 2026 13:01:22 +0000
Manifest this update: Sat 26 Sep 2026 13:01:22 +0000
Manifest next update: Sun 27 Sep 2026 13:01:22 +0000
Files and hashes: 1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: SwOoRmF3xESpgM5VaD1gfoWgTXnjWjB04Y1BC9mBdJc=)
2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:55:9d:5e:4c:7e:90:b4:92:75:95:45:87:07:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Validity
Not Before: Sep 26 13:01:22 2026 GMT
Not After : Sep 27 13:01:22 2026 GMT
Subject: CN=355b3d75cdd32c4738d541b7cd5ea813adbffdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8c:e3:8f:24:1c:ce:8b:83:9f:51:6e:e8:aa:
99:88:ed:64:6a:27:d9:39:4d:8b:90:52:75:3e:77:
cc:e7:99:3e:fb:1c:a0:6d:c3:f3:68:c4:32:94:5b:
92:c7:9b:60:39:f4:e3:60:a7:4a:23:a6:23:47:e8:
ba:b6:e0:2a:04:01:b4:95:92:57:5d:01:a5:df:cd:
76:80:07:33:2e:84:f4:b5:36:c0:9f:ac:16:8a:22:
03:f4:72:ba:8f:dd:b5:6b:49:dd:7d:99:f6:7e:86:
25:15:93:9f:b5:e7:51:21:38:dc:3e:26:6e:20:30:
0f:49:82:2b:70:60:8e:34:ab:2e:ce:f2:46:e4:ef:
0e:3d:ce:16:ab:31:ef:64:b5:e2:07:3d:2b:0b:e9:
3c:89:e9:cf:0a:fc:0f:f3:21:e6:ae:d8:ae:4d:b7:
04:2d:b4:4a:6c:0e:15:6d:9d:81:cf:4a:2d:f4:a0:
cd:fd:27:1d:96:09:55:b9:c6:cd:3e:ab:50:9e:af:
63:b0:f1:58:90:9d:65:b7:a6:4d:c7:9c:ca:33:8c:
7c:5b:b4:77:18:32:67:08:e0:76:ed:31:80:b2:47:
0b:b7:ba:79:17:6d:09:ae:dc:c9:34:57:7a:ee:10:
f6:fe:42:c7:dd:a4:7e:26:2d:85:2e:47:0e:6c:a8:
ff:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5B:3D:75:CD:D3:2C:47:38:D5:41:B7:CD:5E:A8:13:AD:BF:FD:BA
X509v3 Authority Key Identifier:
keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:cb:01:a9:31:0d:20:88:cf:41:e4:da:00:1b:66:80:ed:8c:
f8:7f:6e:76:5d:a8:da:8b:10:23:d6:ab:fe:83:0a:4f:d7:09:
c5:5b:8c:40:e6:67:22:f7:3f:9b:58:20:3a:95:39:43:46:1b:
c1:10:37:5d:92:31:16:fd:10:ff:93:81:b3:33:70:09:ea:2b:
2f:4c:95:3c:af:39:88:c6:d4:40:ad:b1:e0:4f:4d:45:12:76:
b7:10:60:9c:c5:11:91:46:cd:96:01:1c:03:0c:db:94:3a:1b:
f7:26:9b:24:0b:b5:ae:e1:51:8e:8b:2f:9a:50:5c:ae:15:8e:
a9:35:8e:f9:55:46:bd:6f:e9:a7:39:7f:01:1f:ee:b8:bb:f3:
85:24:cf:84:70:1d:d5:03:d3:42:6d:71:5a:bb:e4:fb:9e:89:
b4:63:74:e5:d4:ea:2b:97:28:89:d0:90:cf:87:31:de:be:a8:
f0:d2:57:d4:e1:60:58:8b:5c:13:94:94:ec:99:97:e7:67:a6:
4c:9c:ed:0d:e6:ba:1a:b9:8b:d1:c4:1c:17:95:22:e0:61:06:
71:ec:63:71:3f:06:29:6b:d7:f7:bd:e6:54:da:06:c3:01:69:
78:5a:87:99:97:03:a9:35:10:be:a7:0a:1c:38:35:1b:46:91:
51:be:c9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:01:26 2026 by rpki-client