Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: /erZk3moHlMHk7LNQfnVFiV+pN2p14YokSEMjs05mKo=
Subject key identifier: E2:13:5F:A8:0E:F1:E3:05:20:9D:91:1A:1C:8A:4D:EB:0B:09:50:AE
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01A0C74646B521A6FA8B1DDCAA20392C7553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 17C2
Signing time: Tue 22 Sep 2026 04:01:06 +0000
Manifest this update: Tue 22 Sep 2026 04:01:06 +0000
Manifest next update: Wed 23 Sep 2026 04:01:06 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: j2LIxThgU/CdAeyGwZRzl5uRalSKCit5MAeCJcjXnZ0=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:46:b5:21:a6:fa:8b:1d:dc:aa:20:39:2c:75:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Sep 22 04:01:06 2026 GMT
Not After : Sep 23 04:01:06 2026 GMT
Subject: CN=e2135fa80ef1e305209d911a1c8a4deb0b0950ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:36:99:97:cc:90:6c:3d:e7:29:36:71:86:
74:b3:49:a0:44:3c:b7:a1:f6:61:0f:3e:09:7b:a6:
b8:60:ed:83:9c:38:7f:1b:67:6e:ee:93:a5:f9:db:
51:82:4a:43:66:88:a8:2b:d1:76:b8:8e:e1:c6:01:
f3:67:77:2d:91:75:8b:a4:ff:37:6c:85:ed:ec:d1:
a7:81:3d:3d:9d:c6:a0:5f:2b:7e:f0:91:5b:c6:db:
18:bd:bb:42:35:13:36:3e:69:f5:44:e3:a2:5b:40:
61:12:4d:e9:f8:24:3c:d2:ee:5e:f2:bd:f9:88:70:
9d:fd:24:85:6f:53:ab:bd:67:30:21:d2:52:f1:6f:
12:d5:25:30:de:f3:b5:4e:5f:5f:af:81:46:7f:e1:
84:ec:05:eb:eb:cd:b0:ec:95:eb:0a:80:ab:f2:48:
53:1c:7c:cd:5c:3f:76:79:3e:ed:46:69:27:87:0c:
7c:d0:0d:96:1d:67:04:e5:55:83:e6:69:5d:24:1c:
a5:4b:0d:23:d8:4b:5e:db:c8:d1:26:d6:cd:d0:93:
ba:2a:a7:13:c0:eb:95:7e:2b:ca:ed:ed:29:57:62:
24:f2:8c:8e:f8:0a:e8:26:ea:37:16:d9:cd:6b:3d:
95:7e:7d:92:6d:07:4c:44:26:1e:ae:a5:2f:32:52:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:5F:A8:0E:F1:E3:05:20:9D:91:1A:1C:8A:4D:EB:0B:09:50:AE
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e0:6e:d4:f5:0f:be:8c:de:93:66:8b:dc:5c:83:c3:80:60:
0f:52:67:aa:76:9c:3d:50:91:e1:80:18:05:36:bb:0f:8d:54:
b0:d7:cd:66:50:c2:5a:d5:85:2c:59:b5:52:8d:e9:75:ca:4d:
64:f3:f5:b4:6e:fa:de:7b:51:ab:7a:9a:5d:db:8b:32:c6:61:
ea:05:82:43:ae:d9:ea:80:7d:1b:aa:32:5d:f2:9b:39:9a:9e:
67:cd:23:69:89:30:9b:6f:a6:18:41:01:13:48:f0:7b:92:39:
4c:56:1b:96:4e:d1:89:23:31:7f:ab:29:96:b9:1a:ac:a0:04:
d5:fc:47:55:43:97:77:be:f9:ac:e0:ce:71:f3:6f:95:a3:ef:
99:fd:17:9c:c5:2a:30:bb:df:1a:d5:ac:ae:e8:e8:68:95:3d:
20:13:b0:8e:7e:d6:6b:45:3a:03:db:ea:34:80:62:04:f1:b1:
b3:3c:73:99:99:c2:58:5d:cc:eb:3e:47:c3:91:b1:1e:d9:7d:
df:9e:aa:0e:9c:1a:83:05:5c:fa:ca:bf:fc:49:bb:78:5b:d6:
b4:d3:83:e7:0b:8e:0f:c0:42:2a:ee:93:82:3b:af:3b:1f:1f:
04:f7:5e:a7:27:92:a7:92:02:c8:14:a0:54:42:4b:a3:a6:c7:
9d:0a:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:53 2026 by rpki-client