Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: 2Ylp1eLah4KC03z0xXlFngeYm1xvNyr+rxlbU8T+hh0=
Subject key identifier: 0A:85:17:21:F8:38:6F:D0:5E:B9:95:5E:77:03:4E:4B:9E:CB:2E:43
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 01A13F0278FFD7178FA53CD7386C8E26D9F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 10:01:28 +0000
Manifest this update: Thu 15 Oct 2026 10:01:28 +0000
Manifest next update: Fri 16 Oct 2026 10:01:28 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: PSXsohp1dWIhIJdLkZY8V1fQy3o01bi+ZcqMlE+bBmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:78:ff:d7:17:8f:a5:3c:d7:38:6c:8e:26:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Oct 15 10:01:28 2026 GMT
Not After : Oct 16 10:01:28 2026 GMT
Subject: CN=0a851721f8386fd05eb9955e77034e4b9ecb2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:ba:ad:1e:19:c0:24:74:71:74:61:eb:69:
af:fa:1f:8d:da:c8:9b:89:ca:d6:06:d4:31:24:32:
d2:8d:6e:69:a0:ba:44:73:bc:23:a2:70:c7:a6:d8:
59:72:9c:f5:98:1f:51:81:2e:45:13:af:5b:d4:9c:
6b:30:dc:4b:1f:24:dc:25:de:88:cd:38:de:03:09:
52:47:97:81:84:92:d0:e8:db:91:76:08:84:76:f8:
77:7e:ae:3b:b4:26:6c:c5:bd:85:76:3e:8a:61:0e:
c3:ea:79:0c:a9:db:ca:9c:de:30:1b:bb:d3:ac:6c:
b0:37:76:de:48:7f:f6:14:f9:a6:5c:82:aa:c2:9d:
ea:66:ff:dd:49:8a:43:02:78:e5:de:10:fd:3b:aa:
16:9c:7c:50:0e:aa:07:dc:15:05:69:40:7c:e4:02:
c6:67:1f:5f:6a:33:07:0b:e9:6b:9d:8d:bc:3c:eb:
16:e3:ee:96:17:35:5b:aa:28:a2:5f:eb:0d:81:cf:
28:55:8d:fd:6e:50:e5:19:42:05:66:9b:be:a9:68:
2d:9e:3e:4d:40:f5:47:a7:c9:85:3c:50:30:d3:ca:
04:7c:25:00:b6:11:0e:62:18:f9:9f:b9:b6:55:98:
87:83:77:8b:7f:73:ae:79:5a:46:ed:7c:4b:39:40:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:17:21:F8:38:6F:D0:5E:B9:95:5E:77:03:4E:4B:9E:CB:2E:43
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:51:49:16:75:9b:2a:cf:62:c0:e9:9e:94:18:d0:19:28:8f:
f8:20:d9:b7:de:18:87:83:8e:f3:80:61:3b:78:73:09:15:e5:
7b:26:d7:3e:98:da:d2:d5:d9:76:32:9b:2d:bb:cd:e6:c1:c5:
27:71:0b:23:ac:a3:99:da:b1:ce:f3:90:ae:4c:c0:bf:05:9f:
d9:13:60:7f:96:23:e1:46:dc:41:53:9c:8e:ed:a1:02:83:8e:
ac:91:6a:89:df:6c:2f:88:dc:6b:ff:ed:2d:73:36:b9:a3:2e:
82:ed:2a:2f:7f:c8:73:82:aa:3f:51:ee:a4:78:47:a9:34:0e:
dc:37:c9:13:e6:a3:09:30:24:39:d2:83:ff:64:7c:56:43:1a:
81:6b:f7:ad:44:e4:e0:af:a1:20:56:33:eb:91:c0:d4:f2:c6:
62:ec:91:43:5f:39:af:d3:8c:60:d8:c1:e6:2e:2a:ed:e2:ad:
0b:ae:cb:7c:d8:16:16:ba:21:69:0d:28:84:b0:63:4f:69:d1:
06:a4:50:08:c7:6d:5d:58:b4:33:7c:a0:88:5f:d7:34:6b:4c:
6e:92:59:e9:ea:c1:99:0b:02:c9:11:b2:07:2c:25:4d:5c:71:
cf:02:c7:2c:9d:9f:26:7e:cb:2e:05:d4:c8:90:a9:60:c6:a9:
70:ed:32:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:14:09 2026 by rpki-client