Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: 6IfYEzZ7mrlKwIW6Cjkgv5BGWD0g8EApYcO3RbfgUnA=
Subject key identifier: 6D:C0:C0:99:A3:28:F8:6A:C0:1C:9D:EC:E0:C8:2C:97:77:FD:4D:DE
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019CACB4A1D9C050B42B4C778B8C8856E126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 10A7
Signing time: Mon 02 Mar 2026 04:00:44 +0000
Manifest this update: Mon 02 Mar 2026 04:00:44 +0000
Manifest next update: Tue 03 Mar 2026 04:00:44 +0000
Files and hashes: 1: GTNj1uopxhcFHlYEIMNdLURp3bo.roa (hash: sNXrtC73S3XHslCegvtHnqUIQVTOhSUYsSYlbuOfH4o=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: VjmGA4agMG+bn2R5us0zi2f8RztUVONbCTQV/G2AhHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:a1:d9:c0:50:b4:2b:4c:77:8b:8c:88:56:e1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Mar 2 04:00:44 2026 GMT
Not After : Mar 3 04:00:44 2026 GMT
Subject: CN=6dc0c099a328f86ac01c9dece0c82c9777fd4dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:0f:97:10:6e:a4:52:e6:34:94:4d:16:1b:
cd:75:ea:4e:e2:4d:2f:10:77:0c:42:ea:72:46:09:
41:16:d8:58:29:99:34:aa:78:cf:2c:14:ce:97:1f:
a4:f2:f9:1f:94:a3:66:15:2b:67:22:16:ad:35:5c:
b4:e8:c8:b7:23:2c:22:6b:6b:4c:92:a5:0a:a4:7d:
71:b8:95:97:96:ae:c6:ce:72:45:c5:07:72:c0:98:
c7:39:e4:d0:7d:2c:5e:9b:bf:1e:b5:21:c8:a3:25:
0c:f4:9b:bf:76:e0:f8:e0:aa:e1:a1:73:a6:72:8a:
71:73:36:03:75:f8:a3:aa:ef:db:e6:d3:69:41:21:
07:49:83:a5:c5:d8:8b:6f:6e:be:7c:92:b9:37:29:
eb:d9:f2:8a:d9:e4:34:8b:a4:07:b4:1d:3b:8e:be:
90:0d:a8:df:91:c0:11:2e:11:52:e1:1f:fa:3f:6a:
0a:e3:ff:98:98:b4:ca:76:9a:7a:69:78:35:68:99:
2c:64:73:23:13:25:0e:9e:b6:c0:0a:11:7c:5c:ed:
45:9a:b0:c2:7f:40:06:2b:27:5a:44:34:ac:3d:7d:
19:c7:a3:15:21:d4:fd:2c:e3:a5:34:04:da:e8:2d:
cc:84:20:1b:e3:4b:7b:8d:d6:6c:6c:4d:b9:1e:7f:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:C0:99:A3:28:F8:6A:C0:1C:9D:EC:E0:C8:2C:97:77:FD:4D:DE
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:63:30:7a:26:2b:16:6b:3e:0d:de:b0:80:48:9c:4a:7a:59:
cd:f3:34:9f:9c:d9:26:10:58:9b:42:52:9b:18:b6:4c:5b:97:
51:21:f0:93:cb:0a:a4:6e:05:4f:a6:7c:1a:6a:6a:b5:5d:5c:
4c:77:e3:6d:b3:6a:63:4e:e9:cf:42:8d:83:e5:a8:2b:7f:5e:
9b:bc:f1:44:45:a6:d3:e9:59:6a:d0:1b:51:58:e4:03:2e:d9:
8b:c6:16:e9:16:45:c9:ec:c6:e1:d4:4b:9c:d1:1e:ce:63:d4:
ff:9f:c3:98:d6:95:ff:46:c4:a6:ba:fe:98:c3:26:d5:b4:25:
95:13:4e:1f:a0:10:a0:e6:93:0a:10:db:0f:fa:23:33:55:f5:
24:e9:9c:5d:57:55:5c:54:73:2b:11:4a:53:9a:93:6b:ed:f3:
98:5c:31:e1:19:2c:cd:20:1b:f5:f6:07:98:ab:4f:3b:12:c7:
7c:43:8e:0a:fd:ad:60:93:84:89:87:06:59:f8:12:15:ac:83:
84:18:9f:7e:5c:b0:c0:75:e0:53:46:1e:de:6e:d9:09:9a:77:
7f:9d:ab:1e:27:98:0d:a4:e0:36:f2:cc:a5:5a:57:7e:4f:e2:
23:aa:b7:23:08:0c:1d:d1:86:2c:36:dc:43:37:18:c8:75:8b:
45:89:94:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:04 2026 by rpki-client