Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: KsyMxQ56s5ZKZdO0v93dkBnzlMFvNsHYovJsoCLcDrk=
Subject key identifier: AA:1F:D1:0F:A8:07:09:1B:D6:F2:6D:A4:47:14:76:AA:FA:63:C7:6D
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01A0C8FD02BD11726977D3C6DADEEACCD30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 12:00:19 +0000
Manifest this update: Tue 22 Sep 2026 12:00:19 +0000
Manifest next update: Wed 23 Sep 2026 12:00:19 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: cgHIPZf53C5swFBDF7ram6tqrfMMv9lvVaOTaad+kDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:02:bd:11:72:69:77:d3:c6:da:de:ea:cc:d3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Sep 22 12:00:19 2026 GMT
Not After : Sep 23 12:00:19 2026 GMT
Subject: CN=aa1fd10fa807091bd6f26da4471476aafa63c76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:ce:35:e6:a1:38:5b:66:ae:77:a6:e4:d7:
cc:69:91:07:dd:79:b6:e0:9e:bf:28:a1:c5:98:1d:
87:cf:ad:52:70:e6:3f:29:98:85:35:39:4f:ef:50:
fd:95:65:92:10:8c:2c:bb:d7:3c:93:00:b5:27:a7:
6f:9f:c6:97:cd:f2:1d:35:96:da:26:d1:13:38:4a:
2b:11:e0:a6:86:1d:ae:92:32:63:38:8a:d9:44:9a:
92:a0:73:d9:b1:b4:67:d8:a7:1c:62:6e:79:d9:0c:
8e:84:a0:9b:48:d9:63:56:72:39:44:b3:de:87:13:
41:f0:0b:93:dc:f8:39:d0:79:5c:7c:7c:9a:db:f9:
71:32:11:e1:3c:63:ec:23:47:ec:e4:71:12:fc:2f:
17:55:e0:cf:c6:a2:5e:ba:e0:d8:e5:42:ef:58:27:
20:48:4b:f8:7e:ca:1b:2b:c8:93:30:32:aa:d9:dd:
dd:33:49:4d:32:50:06:ab:72:0c:3a:0a:79:32:f4:
57:45:4b:8e:9d:4c:7b:ef:ed:80:1c:8e:08:e8:22:
d1:4c:69:89:41:fc:24:19:b6:7c:8b:31:94:c3:0c:
c5:0b:5c:03:55:1a:81:4a:b8:36:c6:f2:fa:4c:0f:
2e:e9:bc:33:83:00:38:b3:61:c2:47:33:c6:58:f3:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1F:D1:0F:A8:07:09:1B:D6:F2:6D:A4:47:14:76:AA:FA:63:C7:6D
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fe:c2:bd:74:41:b2:a4:19:c0:7f:3b:04:2a:9e:d2:6d:71:
33:0c:6d:d6:a1:d4:7c:69:e9:0b:c6:7c:9a:e8:a9:15:3f:d6:
3b:a4:e9:65:06:d4:83:1b:6b:80:2d:50:53:42:d6:8e:86:aa:
fe:ea:ef:17:1f:12:86:af:29:7f:52:2e:11:7f:b7:54:56:01:
4c:71:5e:8c:b7:24:b8:c7:15:6b:4a:e1:8a:2d:76:e5:0c:88:
16:82:9b:4e:f9:a1:c2:25:c4:6e:ce:28:7a:96:df:05:bc:47:
77:1f:c4:be:fd:64:71:7c:b2:67:85:4b:b5:fd:f7:29:13:03:
11:fe:5e:56:8b:0c:c8:4d:8f:a4:36:4c:04:36:02:18:b5:02:
8c:c7:bb:b1:fc:e0:24:10:c8:ed:2e:2b:4a:d4:68:87:9f:1b:
66:79:f3:e1:75:df:b6:2f:f2:05:fe:8b:e1:a5:11:6c:af:48:
74:1c:49:ed:20:c0:a0:75:b1:3f:33:97:3e:ee:34:d0:c2:dc:
e2:a0:8c:f6:ad:3c:24:af:66:89:8d:d3:df:1a:c4:82:20:bf:
de:0d:2a:2e:3e:fb:65:c3:6e:48:ce:58:3e:ff:a9:51:ed:28:
aa:01:41:06:b7:b5:02:59:9d:81:5f:23:e4:89:32:05:cd:61:
1c:8b:39:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:22 2026 by rpki-client