Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: SHYu+On2+vHMy7TJrruFkMRIT8Lwlbrrw8mbfOZsjM0=
Subject key identifier: 3B:9D:25:92:2F:C5:5B:98:85:ED:BE:14:A7:8E:E7:31:96:01:F0:71
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 01A0CFA4D741D0B8BC81677BF016D2525F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 09A1
Signing time: Wed 23 Sep 2026 19:01:21 +0000
Manifest this update: Wed 23 Sep 2026 19:01:21 +0000
Manifest next update: Thu 24 Sep 2026 19:01:21 +0000
Files and hashes: 1: K1qLnnrsBytcCd672tmGsMqXxYM.roa (hash: chgkC32Z3UMGB9mkkwLQsJIKs1LFl1ohHwqbg9qIaPw=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: hWniyAxr6UGQP7rgp5EldMEis32nxq/n477dqUoREEQ=)
3: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (hash: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a4:d7:41:d0:b8:bc:81:67:7b:f0:16:d2:52:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Sep 23 19:01:21 2026 GMT
Not After : Sep 24 19:01:21 2026 GMT
Subject: CN=3b9d25922fc55b9885edbe14a78ee7319601f071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:47:67:e6:67:ae:90:9a:90:e5:bd:9f:77:
8d:2f:35:fb:11:df:c3:c5:87:ab:c9:b3:cd:fd:25:
ee:13:b4:d8:bb:77:23:7f:e3:d8:fe:3a:8a:3c:79:
a6:b5:9a:9c:a0:c3:9f:5a:ef:43:1d:2a:7f:a0:47:
eb:04:c4:f6:94:19:01:90:36:09:0e:42:66:f6:2d:
7b:10:b5:20:80:c4:70:cf:83:93:cc:5f:b6:cd:9e:
66:a1:6e:c4:6e:94:48:7c:f8:2d:ae:83:5b:3e:60:
a9:ce:d5:3a:e0:bd:87:a8:e1:54:4c:f5:08:39:9e:
9e:44:5b:ab:f6:d3:06:70:fd:fc:fc:c2:9b:80:9b:
f2:63:95:19:f7:9f:8d:0d:5d:3f:28:a4:4f:d0:40:
51:40:7f:83:35:70:f8:dc:9b:bf:30:3c:36:63:f2:
f3:0a:ff:77:8c:24:0b:11:2e:58:76:91:9a:bb:7a:
46:4b:77:9e:89:04:1b:bc:63:b0:38:67:b4:aa:6f:
64:9a:6a:f1:77:4f:94:a6:2e:fc:86:9b:13:ea:22:
e8:92:de:9b:8d:3e:24:be:9a:66:51:0d:fc:f7:02:
f0:f9:ae:01:96:0c:8a:9e:0b:9c:6c:ce:ed:a6:ce:
b9:f8:9f:59:3b:8a:03:83:40:56:f6:db:b9:0c:0b:
97:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:25:92:2F:C5:5B:98:85:ED:BE:14:A7:8E:E7:31:96:01:F0:71
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:41:c3:30:b1:63:65:28:d2:9f:c7:3e:35:54:51:eb:c6:eb:
d9:a5:c6:0c:7a:dd:eb:da:57:57:28:fa:bf:7f:4d:97:ac:6c:
94:6c:8d:ec:89:d8:2e:ec:81:cd:ef:a0:70:b6:d5:f8:4a:64:
55:61:8e:7b:c5:ea:d4:6b:7e:1a:2a:9c:98:f0:e3:eb:4c:49:
27:b1:90:8e:42:a9:a8:c7:09:a4:cf:f6:5a:4a:b9:bb:80:8d:
4b:35:de:b3:ca:1b:84:74:ac:b5:25:f8:30:d0:56:b2:1a:fa:
60:9a:22:9c:53:f4:f0:f2:c3:74:82:a3:ff:56:e3:cf:56:b2:
48:30:eb:2b:10:5c:8c:3a:51:5f:d2:6d:92:fc:43:63:27:f7:
18:e6:94:e9:00:e4:5f:19:d8:c4:13:a1:91:d1:b1:02:d6:2b:
9c:2b:15:9b:b8:8b:74:17:7d:42:21:cb:75:2e:37:df:aa:59:
da:3f:e2:e4:82:3e:ba:a2:f7:0d:4c:72:38:11:d7:3a:d9:05:
5b:65:83:37:b4:0a:74:51:4b:c2:aa:62:16:05:4d:99:c5:5f:
ac:26:a1:8f:03:17:b8:5d:80:1a:93:51:b8:59:5b:1d:bb:cd:
30:75:ac:75:b5:0c:4c:d1:b9:ff:24:44:06:10:7f:51:bb:63:
c1:29:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:31:33 2026 by rpki-client