Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
File: kUJchq_U--IqaeAELgB2I0IxwpM.mft (raw, json)
Hash identifier: wV8JbwIGsnItUwLT28LIrnnUsiC1PcT1ooBTPc58rWg=
Subject key identifier: 77:9D:40:71:C1:07:6A:6E:54:D2:72:D1:7C:3B:27:4C:09:6A:A2:80
Authority key identifier: 91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
Certificate issuer: /CN=91425c86afd4fbe22a69e0042e0076234231c293
Certificate serial: 01A11B62CAD21E14A45F585CB1D96EBA2A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
Manifest number: 03BA
Signing time: Thu 08 Oct 2026 12:00:21 +0000
Manifest this update: Thu 08 Oct 2026 12:00:21 +0000
Manifest next update: Fri 09 Oct 2026 12:00:21 +0000
Files and hashes: 1: i5hoQe1WYdmDRK93QhXSWo5DbcA.asa (hash: g4XW1rM0XwOC9gNiLBr0l5Eh7TR7jPk/IHmrYLGtPAk=)
2: kUJchq_U--IqaeAELgB2I0IxwpM.crl (hash: 0uVdumnTR51n7mMBhM8krKjIPSklbWscKBuRhQuMGas=)
3: koj8nEAhEbwLOtJWdl4dLHaxVeU.roa (hash: //uRIlijDFSI2Idtl9AfpbSmA1tZpNH4c/UlKhrcxxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:62:ca:d2:1e:14:a4:5f:58:5c:b1:d9:6e:ba:2a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91425c86afd4fbe22a69e0042e0076234231c293
Validity
Not Before: Oct 8 12:00:21 2026 GMT
Not After : Oct 9 12:00:21 2026 GMT
Subject: CN=779d4071c1076a6e54d272d17c3b274c096aa280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:c7:7e:4d:0e:ba:4f:43:6e:85:4b:5a:53:
f7:4a:23:c1:5f:48:58:2c:ec:ae:a0:59:0f:1a:4c:
17:02:86:9a:6a:bb:62:bc:09:ca:28:e2:3f:40:8e:
cc:54:77:82:ec:c8:eb:f3:c1:de:ef:b7:5f:44:16:
fb:4d:49:91:e9:7e:42:ed:45:29:3f:a9:06:6c:50:
ee:1c:f2:3c:fe:cb:a3:7e:81:3f:bc:53:ed:80:3a:
b7:1c:47:4b:0c:d4:5a:2a:3f:11:dd:89:c4:5b:3e:
2f:21:5c:66:f9:74:90:28:df:63:5e:4d:38:f5:5e:
ef:71:cc:17:db:1f:7f:61:5a:a9:66:d6:c2:f7:b6:
c0:c3:4f:ca:42:52:31:8b:cc:3b:a8:65:cb:00:92:
4c:fc:fb:41:7d:cc:47:74:9c:00:02:31:84:13:82:
02:6c:2d:2e:5a:69:39:8a:56:75:cd:b8:a4:ec:97:
60:f4:7b:3d:47:42:86:90:ea:21:85:78:dd:96:25:
c7:34:e7:15:8f:50:2d:1a:2f:f3:f7:22:eb:2b:d2:
6b:c7:5b:2b:78:b2:90:12:b3:fc:af:46:54:dd:8f:
ae:21:1c:66:d5:60:7d:fc:b6:06:9a:2a:6e:15:86:
5a:5f:55:05:a3:98:08:b5:32:1f:83:4f:ff:8e:6e:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:40:71:C1:07:6A:6E:54:D2:72:D1:7C:3B:27:4C:09:6A:A2:80
X509v3 Authority Key Identifier:
keyid:91:42:5C:86:AF:D4:FB:E2:2A:69:E0:04:2E:00:76:23:42:31:C2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUJchq_U--IqaeAELgB2I0IxwpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7508cf-4198-42cc-9f25-821db0026738/1/kUJchq_U--IqaeAELgB2I0IxwpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:51:84:97:9a:c5:c2:c5:c0:30:dd:03:d6:b7:75:77:6f:23:
ed:2c:f9:bc:a9:03:6b:6a:2c:e4:45:a5:65:95:73:54:f1:aa:
7e:50:ea:11:4c:63:1d:da:f6:20:8f:93:be:6b:b1:5c:bf:f2:
7b:99:22:5c:42:96:70:8d:a7:b0:02:79:96:47:b9:d1:3f:bf:
e3:4f:71:75:41:f8:69:77:33:34:a7:72:24:2f:c3:c7:20:12:
70:1c:eb:cf:e1:d5:3f:cb:36:c9:23:3c:90:39:4e:ce:5b:25:
60:b2:ab:82:75:ed:b7:b9:39:28:9c:8b:28:41:69:c0:77:e9:
40:c2:03:09:65:f8:d4:5a:3f:50:e3:22:1c:8e:ed:e2:5c:bc:
b8:5e:75:75:3c:9b:b4:6b:e1:27:67:d0:59:f2:6d:1b:01:6f:
35:0a:fd:e8:e5:1a:c1:7f:38:af:0d:52:70:2a:b5:cb:dd:e9:
ac:c9:c5:93:2c:60:63:ec:ad:a8:c9:6c:6e:bc:a2:5b:2e:da:
e3:87:b5:81:04:2e:23:32:ce:cc:80:21:fe:85:4c:68:0f:c1:
d7:46:af:bd:c3:49:0b:04:dc:1f:83:93:fc:69:0e:b7:57:ea:
e8:22:fc:d1:75:f6:65:17:b5:9d:1c:16:63:c5:ac:64:20:e3:
da:67:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:06:40 2026 by rpki-client