Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: YVeBz5XqZw/FGFq9ssxPp9sPiJ3vZWNvEjfurYtlrc8=
Subject key identifier: C5:D2:D5:CE:C6:A3:27:EF:BB:71:FA:61:62:9F:D3:D0:49:CA:BB:06
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019CAC10367A0E27109F17F3BEDF8A0A1EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 06A5
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: 2xNRbE545fm5B1ZqxGW6ai6yC9o3/qhkof2G4Bz/ivg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:36:7a:0e:27:10:9f:17:f3:be:df:8a:0a:1e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=c5d2d5cec6a327efbb71fa61629fd3d049cabb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:fd:88:67:58:13:93:b6:eb:61:d1:99:7d:
10:5e:68:8c:f3:82:1e:ae:b9:cc:cb:f8:c7:63:38:
bc:0e:a9:de:bf:ae:0d:2e:d1:32:36:2e:b7:77:7f:
d4:33:1e:d6:60:f8:ae:46:10:ab:d6:61:43:56:a0:
4a:2d:d2:e1:53:c9:44:8b:36:5a:e1:93:26:04:62:
d5:b5:1c:e2:ae:0e:64:80:6d:c2:53:1b:0b:be:05:
6e:9d:89:6d:7b:76:c6:cf:50:60:eb:07:4c:7c:aa:
ed:8c:b9:99:e0:9a:c8:f6:ca:3e:d9:1e:38:53:1d:
23:3b:bd:8e:2f:d9:8c:93:73:44:53:46:a4:88:53:
85:fb:97:a5:ea:c7:7e:da:32:c0:39:00:de:50:03:
7f:1f:42:95:d2:84:d9:38:09:6b:aa:72:4d:9b:73:
f7:73:67:60:41:97:3c:08:59:c9:7b:15:a4:fd:98:
20:eb:2a:2f:b9:e1:fa:1a:14:93:29:ab:95:fb:bc:
45:d6:65:e2:9a:8f:d4:d4:2f:20:fd:fd:64:75:17:
4c:3b:ba:98:67:a4:ab:e2:d3:83:24:f5:97:c4:ff:
09:92:29:95:93:2a:17:1d:a2:78:32:a2:8a:0c:9a:
bf:2f:ee:4d:35:0f:1f:47:96:98:0e:67:ef:53:96:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D2:D5:CE:C6:A3:27:EF:BB:71:FA:61:62:9F:D3:D0:49:CA:BB:06
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f8:78:93:41:ef:24:15:9f:b6:18:47:4c:e2:45:9e:a5:58:
40:00:11:53:16:9c:66:d7:56:2c:db:c4:2b:ef:63:f3:08:49:
c2:fa:42:26:ce:8e:23:45:dd:c3:b6:cc:ca:25:d4:c4:c3:87:
a9:dc:28:61:97:db:bc:f4:4b:8c:1b:ec:75:80:3a:d1:55:e8:
7b:ff:17:35:78:31:48:af:42:6c:78:95:40:d0:55:a3:c3:a2:
b3:42:8f:e7:6a:d4:e4:3d:c3:f9:58:8f:36:9a:ef:fe:ab:0b:
07:d8:56:aa:6b:64:fd:d5:81:d6:16:63:00:f3:34:32:7a:df:
4f:91:d8:ac:02:9a:19:7b:0e:2a:fa:90:0f:b7:80:2f:97:9e:
0a:dc:ba:8c:0f:56:90:15:5a:74:7d:97:aa:33:e5:61:07:b6:
ef:ad:6e:bc:9e:ec:37:fc:bf:24:5a:75:4e:73:53:10:ec:da:
e4:ef:3f:a7:cf:3a:9f:12:47:b1:60:ec:1d:32:89:3a:05:19:
a2:b1:11:e9:e6:7a:e5:a7:11:3b:35:5c:8b:ef:ff:13:79:0a:
a5:2c:89:0f:66:93:10:a0:04:78:ab:2b:00:66:5a:a6:f2:1d:
de:1f:fe:d8:83:c9:56:cb:0b:f7:1b:1c:19:ae:ab:56:cf:03:
1b:ad:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:59 2026 by rpki-client