Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: XKFR2t2zjFE0z+RC2SGngQdtxS5GA6aop1j+eHPb8X0=
Subject key identifier: 93:C7:6B:95:14:19:2F:C9:1A:28:EC:F1:D5:11:0C:3B:77:1F:6C:7C
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 01A0D2A65B74D1DE9AF5AB0A7D226564633D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 09:01:52 +0000
Manifest this update: Thu 24 Sep 2026 09:01:52 +0000
Manifest next update: Fri 25 Sep 2026 09:01:52 +0000
Files and hashes: 1: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (hash: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: FRmR2+YL8wA1xnwhJLQDoHWDzC1ervrZDCBgFW64nK0=)
3: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:5b:74:d1:de:9a:f5:ab:0a:7d:22:65:64:63:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Sep 24 09:01:52 2026 GMT
Not After : Sep 25 09:01:52 2026 GMT
Subject: CN=93c76b9514192fc91a28ecf1d5110c3b771f6c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:a8:04:6a:1b:3c:90:91:34:17:67:b7:df:
d2:e1:0a:2c:5e:92:98:e8:d5:47:c6:e1:93:46:e7:
65:42:51:04:76:8d:cf:ee:b6:3c:b7:4d:33:7a:65:
ff:6d:b9:c5:d3:9a:43:9e:29:c5:4b:db:76:72:c2:
01:59:08:1b:6f:52:48:d3:20:c6:d9:5c:7c:5f:65:
5f:c2:4b:36:33:61:05:2b:5f:15:4e:89:4a:62:1f:
57:e8:a5:20:ca:b2:f6:f9:d8:0e:e6:b9:66:b5:63:
da:4f:1b:c6:0d:3b:8c:ad:e2:a8:87:af:85:b1:18:
4c:77:c4:c8:5a:1c:bd:71:bf:52:33:0e:54:a3:f3:
5f:d9:35:6d:9a:6b:ae:7d:ee:8d:3d:0d:8d:79:2d:
b4:fc:4d:e9:01:99:95:a1:b1:78:22:e1:30:fd:08:
79:fd:7c:47:77:66:31:81:8a:21:19:0a:82:c7:93:
c4:3c:b9:68:ba:95:58:fd:b5:22:26:db:3f:93:fa:
ea:f9:ca:e8:f4:c7:e0:57:94:28:35:a5:72:d8:dc:
f9:4f:e6:56:fe:58:19:2e:ed:94:2c:24:4e:8c:01:
83:09:11:1c:c2:dc:8c:24:f0:07:ac:f0:18:43:59:
cd:31:f0:9b:00:75:bb:41:13:83:ef:4a:c6:da:6e:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:6B:95:14:19:2F:C9:1A:28:EC:F1:D5:11:0C:3B:77:1F:6C:7C
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:15:50:d9:85:e9:cf:8d:bd:cb:d2:ce:46:5e:a4:1e:30:de:
88:27:e9:ea:b2:04:c2:4d:46:ea:cd:3d:fd:0b:dc:43:ad:28:
77:b2:3b:b3:59:e0:c1:85:68:cc:ed:1e:6c:19:62:9d:33:23:
84:e1:0d:95:f7:cd:c3:75:25:26:66:f7:44:f9:44:b7:d3:f5:
4b:26:e5:25:6c:21:22:e2:b8:6e:ee:32:ed:2b:94:53:91:21:
41:50:1d:af:90:5a:d8:11:d2:8a:96:38:93:cf:bf:47:28:f6:
ef:b8:1c:56:f1:bf:a3:87:f6:9e:80:d5:29:28:94:f4:9e:f4:
92:b7:27:08:b5:b1:00:df:77:82:35:1a:23:67:6b:a6:3b:0f:
c6:f8:fe:9b:2f:a2:a9:b1:4b:13:56:9f:34:81:cb:6a:9f:49:
b9:dc:37:bf:b1:a8:ff:a2:27:2c:4a:d1:89:b8:4e:6c:b5:a4:
bb:f5:3e:50:8d:86:29:98:22:0d:d9:c6:c8:a0:46:1c:7b:d7:
b4:58:2a:1a:89:39:24:35:27:c9:fa:18:63:41:2e:54:50:42:
1a:0d:2b:04:4e:a2:df:fc:5a:9a:f0:8f:37:11:56:64:c4:ee:
52:6d:5f:1d:e8:4f:18:2f:ea:64:87:00:7e:dd:19:7a:c3:c0:
b5:56:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:40:09 2026 by rpki-client