Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
File: U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft (raw, json)
Hash identifier: m8vGXbf9D1Rmsy056r6oWsK6tfoWrBefPjkdINfwVEk=
Subject key identifier: 2F:E5:0F:F5:DA:76:0A:A4:05:47:5E:8F:AB:94:85:E6:EB:34:C6:4C
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 01A1250C362A1668A988A123ACD980B6FD5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
Manifest number: 0111
Signing time: Sat 10 Oct 2026 09:01:59 +0000
Manifest this update: Sat 10 Oct 2026 09:01:59 +0000
Manifest next update: Sun 11 Oct 2026 09:01:59 +0000
Files and hashes: 1: Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa (hash: Ds8FZooitJMNVsAEf1unNJvTN7eQbb92Gpc2ul39w0s=)
2: MHRuqT3ZxWiNPWjx1hFceo5038Q.roa (hash: duJLSAn68SgAgFK46x9nz8RGT1uXEmPsEIzG1iEF5y4=)
3: U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl (hash: LyNReIIWM+EjO1ufYhuS8sOL3HGjAC2KFimLyTRvpRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:36:2a:16:68:a9:88:a1:23:ac:d9:80:b6:fd:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Oct 10 09:01:59 2026 GMT
Not After : Oct 11 09:01:59 2026 GMT
Subject: CN=2fe50ff5da760aa405475e8fab9485e6eb34c64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:f0:ee:58:03:95:f6:f0:79:6f:f6:3f:0b:
63:34:82:27:2b:d0:f6:ee:fc:b0:97:d4:af:e2:3d:
17:28:ea:c1:df:36:9f:79:fa:c7:10:34:2a:1e:63:
f2:e5:2f:eb:45:51:dc:03:6c:38:d4:a8:70:f6:7f:
a8:87:9d:02:1c:3f:8b:1c:2a:0d:7f:0b:dd:c6:af:
2e:9a:0a:0a:88:c0:f7:75:41:4c:72:73:f2:0f:0e:
7d:a9:fc:4d:74:90:5f:e3:b2:a5:b7:c8:dd:22:63:
e3:47:94:e9:12:9f:0c:7c:e8:8f:0b:7d:d2:1b:de:
f1:85:1b:4d:fc:2a:66:4b:02:a6:e0:d8:f4:6b:6c:
1a:69:c9:cf:39:5b:b8:04:e4:0d:67:45:f1:7b:68:
12:ba:5a:6c:db:a0:b0:be:7e:ed:c4:26:be:0f:4b:
72:71:da:54:34:9a:2e:d1:02:ce:f0:d7:96:04:2d:
d9:5f:41:df:af:1c:00:3d:92:7a:47:7e:fb:16:e1:
13:9d:a6:b1:26:7e:d3:c7:1e:99:1c:35:ac:02:79:
e3:7c:11:9d:42:97:d3:e6:e8:45:60:4e:2a:e5:c0:
14:81:87:2f:ff:d1:5b:33:3a:10:63:0f:94:92:ef:
a4:e2:a6:03:39:95:c4:b4:09:74:03:04:db:fb:07:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:0F:F5:DA:76:0A:A4:05:47:5E:8F:AB:94:85:E6:EB:34:C6:4C
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:10:9d:89:2b:1d:b8:9b:4c:d9:cb:cf:5b:fa:b8:49:67:bb:
ed:6d:f6:8c:88:6c:a2:63:39:14:ef:98:26:bb:b8:7f:df:2b:
f0:66:0e:dc:d4:ce:7b:eb:79:98:cc:a0:43:3c:c3:5f:64:0f:
7b:c4:97:7a:a0:bb:c6:78:50:f2:b4:e5:ad:18:ff:d8:19:0f:
95:7a:25:2f:29:a9:d8:b9:6c:53:a8:64:7d:27:32:6a:43:a3:
45:6a:f7:6a:ce:07:98:01:b5:21:50:aa:70:18:2d:e1:0b:ba:
fc:0b:6b:2d:21:ce:77:b7:6b:63:4b:a4:46:3a:24:cd:de:3f:
2a:89:ab:55:d1:29:14:99:0c:e2:49:a2:cc:82:74:49:b2:35:
0c:4a:b9:4a:14:b7:35:2e:0c:65:ed:e5:f3:41:0a:ec:89:d9:
8e:c9:70:21:e2:96:23:6e:ae:38:b1:96:46:62:44:22:cd:fd:
ca:ba:20:0b:ba:69:29:83:38:9a:db:44:21:49:6e:a3:49:dd:
b6:12:93:9c:8f:27:5c:3c:eb:56:a1:d6:33:00:b1:55:2b:d2:
fb:ac:62:ae:b3:8b:22:ca:35:80:46:3d:e5:88:88:32:e1:55:
70:9c:67:aa:d0:0e:88:00:5c:4d:e8:7d:07:a0:ef:77:15:2d:
93:7e:19:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:15:56 2026 by rpki-client