Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
File: ug1zjdKP8lSUVs5m50SJg3L8UD0.mft (raw, json)
Hash identifier: 3F8uUQTgySZUv09EAL07UrW3Yol9d6zEuaHtdCL3t8k=
Subject key identifier: B5:87:C5:3C:12:89:18:CC:B7:35:75:3A:64:1B:8A:8D:8C:AD:BE:90
Authority key identifier: BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
Certificate issuer: /CN=ba0d738dd28ff2549456ce66e744898372fc503d
Certificate serial: 01A1114DCDB21FE71BA10C1B3E208C7551B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 13:01:13 +0000
Manifest this update: Tue 06 Oct 2026 13:01:13 +0000
Manifest next update: Wed 07 Oct 2026 13:01:13 +0000
Files and hashes: 1: AlKyY1UFKLIiSwkNxpsgmdrM60E.roa (hash: RVsM/xgSLkhzfMVV3ZGsMCowRm3BI62GEPj6ptHzyso=)
2: FG47vsukPFFVqGR7bOnjAT2rp7w.roa (hash: awpRf5Q5mKob7svn8oYO+jlkoCbAPExf5Adoe8FOrnc=)
3: G6A1KhUGyTv_ayk63fXoZcf-2FU.roa (hash: FvWxPy4xmiHLhgfYS33DaG1bqGpWvGhVoY87fJXbboE=)
4: ug1zjdKP8lSUVs5m50SJg3L8UD0.crl (hash: yOS9JfXQI8sagtMzj1w9/SIJzrjyPLReBHxM/DOJWNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:4d:cd:b2:1f:e7:1b:a1:0c:1b:3e:20:8c:75:51:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0d738dd28ff2549456ce66e744898372fc503d
Validity
Not Before: Oct 6 13:01:13 2026 GMT
Not After : Oct 7 13:01:13 2026 GMT
Subject: CN=b587c53c128918ccb735753a641b8a8d8cadbe90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b4:18:98:af:d6:09:8f:8f:20:88:81:ad:2a:
48:1e:7f:77:d9:06:95:2c:c8:13:60:c9:a5:6a:a5:
7c:29:0c:7f:65:41:5e:25:c8:ec:12:d4:4a:3d:93:
a7:fc:fc:90:64:70:66:0c:58:69:d6:a4:2d:93:c6:
f3:1a:b2:ed:57:15:80:52:e4:cc:e3:66:52:4e:16:
14:04:bf:cf:ae:d4:d7:0d:78:9e:38:05:9f:f4:ce:
42:9b:b1:63:f8:24:b4:4a:3b:ea:7a:71:ea:e4:a4:
9a:b5:14:0f:59:84:3a:fb:db:c6:1a:c0:8a:09:2b:
8e:70:53:54:a8:cf:de:b2:3e:dd:cf:e0:8e:b1:7f:
6c:75:87:db:2e:b7:68:93:32:45:29:90:31:5d:93:
f8:74:e7:18:33:4d:6d:f9:20:a2:8b:80:6a:98:79:
61:30:26:fd:04:5e:89:73:48:76:0d:40:a7:a0:62:
3e:b4:b9:f4:6e:40:1b:ca:25:dd:bb:b4:c0:67:6c:
6b:11:7b:dc:2d:5d:6a:6f:73:98:ee:a6:b4:fa:a3:
d2:cc:e3:f9:b8:cf:8f:a4:84:f2:a2:df:c4:2b:b9:
12:eb:e5:9d:e9:ba:93:2f:23:b0:dd:86:88:60:f9:
d0:ae:9b:c5:21:39:36:e8:75:bb:1d:0c:94:d9:2c:
07:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:87:C5:3C:12:89:18:CC:B7:35:75:3A:64:1B:8A:8D:8C:AD:BE:90
X509v3 Authority Key Identifier:
keyid:BA:0D:73:8D:D2:8F:F2:54:94:56:CE:66:E7:44:89:83:72:FC:50:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug1zjdKP8lSUVs5m50SJg3L8UD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1cd76c-0201-4703-8ed6-beb6da03755e/1/ug1zjdKP8lSUVs5m50SJg3L8UD0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0d:7f:5d:72:07:36:d3:44:07:8c:3d:8b:4b:1a:14:1c:d7:
e2:88:74:ef:ea:d3:48:db:62:7f:bb:52:06:1d:32:11:ba:bb:
7b:7c:b3:b7:0b:80:cd:56:54:73:68:09:36:b6:c9:cc:31:c3:
1b:1f:7c:7d:21:a4:c4:46:c9:af:a6:de:de:f8:01:e2:16:11:
ab:ba:b2:cb:60:da:ef:3e:61:cf:9e:f7:cf:d2:61:8e:76:8a:
5d:aa:4c:d5:3f:92:a3:4b:c0:79:e7:b3:d1:8f:43:70:14:67:
de:11:a5:32:8b:b3:38:09:16:9f:b0:49:cd:07:7a:39:29:a4:
c5:85:90:05:00:c1:75:9e:e0:b3:cf:eb:e3:db:c5:24:da:80:
1d:36:e1:80:b7:10:54:82:6d:ec:38:8a:18:4b:cf:52:b2:6f:
b1:6d:3c:81:05:66:15:2e:c8:5a:d4:c0:92:aa:a4:4d:da:fe:
09:65:91:8e:0f:ba:7e:dd:93:e8:c5:e2:2f:4a:51:4e:09:21:
66:e6:eb:4a:c3:c6:9b:a7:48:f7:71:58:c9:5d:e9:dc:2e:5c:
65:ae:35:b9:f4:04:d4:0b:f3:82:7d:b2:18:89:f1:98:e9:b4:
15:fb:26:54:4c:bc:4c:48:a0:0a:db:c5:2f:b4:8b:53:07:73:
b9:3c:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:04:53 2026 by rpki-client