Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: VYk91NZrmhMjAfkHwQIxZ09yKlG/Ll3XxeKZDwJ4aN0=
Subject key identifier: 86:72:38:94:E5:D5:51:25:15:29:C4:A7:66:B4:64:6B:C0:87:51:28
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 01A1B4983D51F088CA5B2EF23A1734C8503D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: 035D
Signing time: Sat 07 Nov 2026 06:00:38 +0000
Manifest this update: Sat 07 Nov 2026 06:00:38 +0000
Manifest next update: Sun 08 Nov 2026 06:00:38 +0000
Files and hashes: 1: MYaYUHXegH6A3meVfIW9b0WZCQI.asa (hash: HCtWYbG0IxlPZ6Hn3ACDheREE8y6xefhsWjII5d7rK0=)
2: dcA5xgteJEJ9aMLw225S3-nx-h4.roa (hash: z7piRrqugGjAJ7uT9crImJCEsS3kLzcSgad2tmhglfk=)
3: uJz8z4Q0oUlleeflsxzEnIK-9kM.asa (hash: 6nsFJqq7HKkxWtHFVswySkHYGpiF7GkqrYA6SppLdXc=)
4: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: F9UvOfwgA6Zi40HdR/aVelTy2L6BwNQQsvLV7IuiVxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b4:98:3d:51:f0:88:ca:5b:2e:f2:3a:17:34:c8:50:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: Nov 7 06:00:38 2026 GMT
Not After : Nov 8 06:00:38 2026 GMT
Subject: CN=86723894e5d551251529c4a766b4646bc0875128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:f0:7f:ec:d8:b6:0b:01:9c:99:66:12:53:
07:d7:43:e0:02:7c:c6:db:51:2c:59:56:f4:4a:01:
b1:cb:a5:81:49:80:dc:7a:09:e1:e9:5c:3c:73:d4:
a2:c3:50:29:cc:52:23:2c:20:af:cc:1b:c6:40:98:
80:8a:ae:d7:f8:2c:57:1c:fe:d3:ac:44:0b:01:46:
be:04:9e:ca:4a:5a:be:85:a5:59:e3:71:1f:36:24:
a4:d0:a1:b4:2a:4c:ff:0c:68:2e:72:f2:ab:45:53:
48:3a:de:3c:9c:fa:10:16:9a:cc:c1:1b:0b:1b:dd:
fa:13:1a:24:f3:26:50:61:e2:9d:65:e4:25:fe:b7:
bf:41:13:c2:eb:51:85:73:0d:f6:7c:0b:56:1c:19:
d0:6e:8b:1c:b5:50:a8:7a:15:21:1c:af:b5:01:2b:
2f:d6:45:16:3c:b5:a2:ad:dc:0a:c6:bb:4f:17:58:
7a:a2:55:8c:53:4d:45:82:89:be:f6:27:c9:8a:71:
c5:ae:27:9c:1e:99:46:59:51:c4:51:8d:1f:21:cd:
d0:2d:2f:64:b9:2f:70:f4:e6:19:f7:b1:2e:b8:21:
8f:00:ab:32:98:6f:d0:fb:87:8c:49:9a:08:d6:c2:
b2:92:88:db:9b:33:f4:ef:68:03:1c:9b:b1:e8:55:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:72:38:94:E5:D5:51:25:15:29:C4:A7:66:B4:64:6B:C0:87:51:28
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:43:40:87:03:c2:5e:79:81:4b:09:05:b5:92:77:21:db:ba:
69:0f:c3:18:b4:ca:9e:fd:57:09:8e:9d:fe:0d:3d:d1:a6:f2:
2b:37:a2:34:3e:45:af:90:2c:9b:a5:9e:bd:69:e5:c9:67:46:
04:1a:60:c8:2c:5a:4b:de:86:d9:8f:21:d8:64:f7:6b:0b:61:
1e:2d:d4:e5:dd:03:a4:03:21:5a:8b:e6:5f:43:f9:9e:d5:0d:
5f:12:85:d1:1f:a8:6b:b2:ec:5b:78:13:6a:8b:ed:a1:a9:28:
7e:25:d6:b8:fa:02:49:1b:99:a1:78:73:a4:6d:8a:40:b9:dd:
b3:f0:4d:be:d1:02:3c:e9:57:87:ab:af:9a:85:61:f6:4d:9c:
fb:76:9a:83:6b:6e:25:a6:04:e0:f2:fa:9f:af:d0:41:d4:c6:
54:d4:b2:7c:6d:ab:8d:b1:cf:d1:ce:d8:39:ca:e6:d2:d0:3a:
2e:c8:7f:d9:22:82:9f:c5:0d:22:e0:b5:8e:2a:2a:e2:22:a5:
d3:fb:f2:61:40:03:67:78:ed:e0:3e:6c:cf:bd:90:e9:8d:71:
b1:36:89:55:aa:d5:15:02:5d:8f:ee:69:5a:4d:94:24:17:2a:
14:fa:86:0c:1d:0f:80:0e:0b:b5:8e:c2:ed:84:d7:e4:d6:13:
8a:63:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:45:53 2026 by rpki-client