Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: hNQ/ZZwv1oiQKSKT4d+30RcOsn+e6/wxG9QmbSEbUvc=
Subject key identifier: C1:46:0E:F2:95:E7:8E:91:B7:21:D3:3F:F2:4B:53:3B:E8:36:A2:96
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 01A0EEF9D1D13576C20B72CEDFEBD762F98F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 1337
Signing time: Tue 29 Sep 2026 21:02:24 +0000
Manifest this update: Tue 29 Sep 2026 21:02:24 +0000
Manifest next update: Wed 30 Sep 2026 21:02:24 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: 0XAB4iEcP6ryEaKQSgH6Y9bvjyB67KvhY5+tp3zznUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:d1:d1:35:76:c2:0b:72:ce:df:eb:d7:62:f9:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Sep 29 21:02:24 2026 GMT
Not After : Sep 30 21:02:24 2026 GMT
Subject: CN=c1460ef295e78e91b721d33ff24b533be836a296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:90:32:7c:e2:fa:29:90:7a:cb:72:d5:1e:
53:0f:c6:0f:2b:33:b6:78:47:0d:bb:31:6f:b1:67:
fe:62:02:ef:e5:23:1c:8c:cb:fc:02:f8:87:2c:31:
fd:6f:44:4a:d0:50:97:4c:06:c1:7c:b7:27:6e:e4:
ab:ed:cf:53:b1:14:c6:fd:0e:9a:bd:dc:f2:d9:3d:
f0:59:39:bf:c1:15:f0:35:37:fc:a9:ab:a9:0f:cb:
bb:2b:e4:3d:d6:29:76:ab:6c:7f:ed:83:76:0c:b4:
6f:d9:8c:19:2f:04:09:ab:da:fc:63:bc:2e:c6:b2:
11:f1:f5:1c:4e:98:7b:0d:c7:ff:a3:4c:ed:d1:ba:
54:dc:a9:70:12:5d:d5:1f:ed:6f:74:a6:ee:22:b4:
1d:13:4e:8a:8f:50:c2:ee:36:d9:dd:35:34:f1:a1:
1e:49:5d:71:60:b8:39:12:c5:80:2f:ec:96:1e:94:
97:4f:91:8a:33:d2:3a:ed:6a:f2:2f:bd:b6:77:cc:
1d:7a:34:ec:11:96:fa:30:5f:bb:d5:b3:dd:d9:f8:
5b:6f:4e:59:0a:0c:55:8b:b6:d1:8f:ab:94:c3:96:
47:53:7e:4d:ca:f8:78:ce:7f:4c:1f:fe:43:ab:5b:
2d:a9:30:07:00:f8:3f:0d:28:f8:d7:d0:e1:cc:83:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:46:0E:F2:95:E7:8E:91:B7:21:D3:3F:F2:4B:53:3B:E8:36:A2:96
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:90:85:4e:10:fd:09:6d:92:84:b7:f2:fa:85:ef:e3:76:
2f:1b:91:62:6f:8a:c0:c2:61:1a:da:18:09:7c:95:72:3a:f7:
40:16:39:bb:43:0a:bf:f2:f7:b3:bc:0c:d9:65:8e:95:2c:48:
50:aa:54:fe:24:e5:1f:3e:d0:a4:5a:c6:4b:c6:a4:1c:e7:0f:
a6:57:79:7e:34:33:01:58:26:34:38:f7:a1:7a:78:c5:87:a8:
f5:80:32:49:1a:a7:50:00:37:97:f4:3e:e0:e9:ee:c3:4e:7f:
42:e1:56:50:89:b5:60:1b:cb:87:e1:f8:41:91:f9:9a:93:6c:
2b:8d:63:07:c7:2e:5d:8a:b2:6b:91:fe:da:28:66:cc:6d:ba:
18:1d:fe:1e:40:eb:44:02:95:4c:7f:84:7d:10:23:ec:86:9a:
19:de:30:f7:85:0c:31:f6:0c:c2:c1:7f:e1:81:7e:27:2d:74:
3f:89:f5:56:ab:c8:1c:59:92:70:4a:b8:3c:3d:43:77:d9:c0:
27:26:36:d9:70:ae:31:0f:75:5a:6d:93:1e:b4:e2:2b:29:f7:
64:f1:db:bf:3d:97:25:1f:90:dc:d1:94:54:ab:a8:00:8c:fa:
9d:3e:7c:2b:48:f9:73:50:b3:c7:e1:bb:0d:ac:ed:22:70:3f:
ac:53:b4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:27:04 2026 by rpki-client