Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
File: UnB4bxfEG9AWJvctsjnyCLUYm7A.mft (raw, json)
Hash identifier: nuPckjDFYG/ddfDezsYNEfEF9oLl7miayiclE5Kn8EI=
Subject key identifier: 09:FC:AC:58:E9:9C:0E:1E:7D:5C:8A:D2:F3:34:C7:C6:E3:8C:5D:CB
Authority key identifier: 52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
Certificate issuer: /CN=5270786f17c41bd01626f72db239f208b5189bb0
Certificate serial: 01A0CC363327F6183FDD7A217C485DF24173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 03:01:39 +0000
Manifest this update: Wed 23 Sep 2026 03:01:39 +0000
Manifest next update: Thu 24 Sep 2026 03:01:39 +0000
Files and hashes: 1: UnB4bxfEG9AWJvctsjnyCLUYm7A.crl (hash: i+y2kE2wKZuNrexJIjPLZm1ASNYZ2gqCxOf3IE1kbJo=)
2: X1sqaOrwTlRea4PTO-bEVyyZxO4.roa (hash: 4Hp7TjPy2qpQAZmmlctfISCQD880xKjDbZIgwRkmGhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:36:33:27:f6:18:3f:dd:7a:21:7c:48:5d:f2:41:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5270786f17c41bd01626f72db239f208b5189bb0
Validity
Not Before: Sep 23 03:01:39 2026 GMT
Not After : Sep 24 03:01:39 2026 GMT
Subject: CN=09fcac58e99c0e1e7d5c8ad2f334c7c6e38c5dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:e0:8b:d5:ba:79:fe:0c:25:f7:3b:88:57:
e2:39:68:bd:b3:a4:41:91:c3:32:6b:99:21:0b:fb:
91:f6:a5:b0:7e:8f:db:bc:b2:72:35:ba:59:b0:84:
b2:bb:ac:79:7c:30:ca:27:c9:6e:28:63:3f:9b:23:
ee:2c:2b:93:68:50:76:a5:9a:36:0c:2d:40:1a:bd:
55:75:3f:e6:0f:33:24:f3:eb:fa:57:64:89:f2:c3:
22:cd:fb:bc:c1:27:6e:10:cb:74:57:30:59:0e:28:
e1:df:6a:d4:b2:d3:df:97:ab:c2:9a:d6:67:c1:a0:
26:58:d2:21:8e:71:c6:fa:6a:53:97:a7:e2:2c:90:
5c:c0:91:05:29:26:10:33:25:91:2e:01:4e:e3:f0:
05:e4:68:81:b1:e3:34:33:00:bb:1c:cd:13:a9:63:
f7:ce:62:9f:af:44:aa:67:b1:72:dd:88:58:e7:10:
0c:cd:2e:73:57:48:f5:35:ef:37:56:86:94:3d:bd:
6e:42:13:06:6e:65:87:ad:a2:a8:64:b5:c8:93:ae:
26:d6:e2:ff:1d:69:1d:c1:3a:6c:02:00:b6:70:98:
2e:b2:dd:df:2f:e8:f9:f1:00:71:c6:c7:6d:4f:07:
f7:f4:c2:6d:15:47:a9:59:06:f5:95:0f:f2:72:47:
c9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:AC:58:E9:9C:0E:1E:7D:5C:8A:D2:F3:34:C7:C6:E3:8C:5D:CB
X509v3 Authority Key Identifier:
keyid:52:70:78:6F:17:C4:1B:D0:16:26:F7:2D:B2:39:F2:08:B5:18:9B:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnB4bxfEG9AWJvctsjnyCLUYm7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9d43cb-841c-40f2-9d9f-75f47f07c4e3/1/UnB4bxfEG9AWJvctsjnyCLUYm7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d1:cb:d0:fc:b1:19:85:25:48:36:d9:2c:11:f3:07:1c:50:
4a:eb:0b:85:76:73:24:55:5f:3e:a0:54:ba:6e:5d:cb:9e:47:
5e:b6:8d:23:f7:57:fa:14:39:78:11:0d:14:ce:d9:6e:16:12:
56:ec:af:c9:f2:52:5e:cb:ba:d8:e1:6a:d6:11:bf:c7:94:9d:
b5:fa:40:90:17:af:5e:ab:ac:9c:67:86:65:af:29:22:54:d5:
12:a7:29:7c:cc:e3:04:a8:97:61:3b:18:f7:36:0d:fc:fc:0a:
13:4e:ff:86:f7:19:5b:86:01:8c:26:51:7b:52:8a:d3:93:e4:
88:7d:e0:8b:c4:62:01:5d:b4:7d:64:8b:3a:13:f3:65:3c:08:
21:07:a3:df:23:6e:33:30:2c:1f:db:36:07:3b:46:77:57:20:
b8:f2:73:c6:c9:42:fa:fb:5f:d6:e2:c2:98:3e:a8:69:23:e6:
15:68:9f:7d:d8:87:d8:2c:d8:1e:43:d8:69:ce:a7:f8:d8:d6:
c7:09:56:da:9a:7d:5c:31:3b:62:ec:d1:f9:71:c6:fe:8e:d1:
46:d2:85:37:81:bc:db:50:53:cf:3a:68:7f:a6:d6:dc:4d:9a:
4a:ca:ad:e8:3c:e8:fd:28:b7:e7:0a:c9:c2:45:d5:71:08:8e:
87:8f:1f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:16:57 2026 by rpki-client