Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier: 8y2FQUULccTCa4It9bedrPdyS7y2he4S7FeXy4jHkWM=
Subject key identifier: ED:71:E9:EA:C0:DA:6B:1C:A0:13:D1:60:FB:14:82:7E:F7:3E:10:90
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial: 01A12C208072488EC2BFB8E3D5D1A8E69FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number: 0B28
Signing time: Sun 11 Oct 2026 18:01:29 +0000
Manifest this update: Sun 11 Oct 2026 18:01:29 +0000
Manifest next update: Mon 12 Oct 2026 18:01:29 +0000
Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: OJ1NKsBEDWhwpuSbuWvCuqIUuXpujY2CmB6YGGw+1h8=)
2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:80:72:48:8e:c2:bf:b8:e3:d5:d1:a8:e6:9f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Validity
Not Before: Oct 11 18:01:29 2026 GMT
Not After : Oct 12 18:01:29 2026 GMT
Subject: CN=ed71e9eac0da6b1ca013d160fb14827ef73e1090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:62:3d:99:aa:5f:55:f4:92:35:52:74:54:
e8:13:88:17:2e:bb:28:b6:4a:64:7e:65:ed:9f:ed:
a1:f2:20:8d:db:29:b2:63:8d:2a:a2:93:35:41:47:
b2:f8:d8:aa:93:82:47:66:71:04:b3:d3:eb:3b:1f:
5e:4e:a8:0e:7f:c6:ac:62:e0:41:0a:2b:db:43:1f:
e3:d7:c2:2d:c6:91:b6:18:c8:bd:c5:93:1b:d0:dc:
34:f8:18:8f:e4:bb:53:e2:67:65:a8:da:27:51:e3:
c0:3e:9c:eb:c0:c0:ce:c1:22:60:f3:53:fb:ad:db:
6f:07:3e:1c:fb:bc:cf:7a:9d:f1:b9:4d:7a:5d:48:
bd:5c:05:68:ca:27:ac:c2:87:22:3c:d3:b4:de:a6:
6d:41:4d:33:21:75:06:72:fa:e3:a0:7a:2f:9e:cd:
22:44:1e:2f:22:bf:13:50:7e:e7:fd:79:6b:4e:92:
60:22:78:5b:17:60:fb:54:d3:be:a8:87:f2:2e:ec:
0d:f5:d7:43:79:ad:ab:77:fa:3e:94:df:9b:56:fe:
11:45:5a:c3:b5:47:db:9d:c3:4d:b2:8b:7f:c9:d5:
51:be:87:fd:37:e0:14:55:d5:90:92:96:55:1f:bb:
0a:8d:43:7d:6a:e1:c5:6b:87:91:04:77:80:64:51:
40:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:E9:EA:C0:DA:6B:1C:A0:13:D1:60:FB:14:82:7E:F7:3E:10:90
X509v3 Authority Key Identifier:
keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:72:64:70:94:49:b7:5b:42:cc:07:2b:eb:be:87:b9:a5:b0:
86:41:0d:93:c4:5a:33:34:5b:e6:32:b7:28:8d:7c:ff:ae:da:
52:bb:44:ea:cd:8e:89:ca:18:e2:75:28:52:e4:df:25:fe:25:
c3:7a:07:24:75:20:d4:c9:a1:a8:8c:30:74:c1:6a:7f:c2:83:
6b:f6:ef:f4:dd:e3:89:be:d9:80:72:e9:b9:1b:c5:17:0e:96:
43:f1:18:cf:9a:54:35:9d:36:d7:e0:91:79:f9:91:9f:62:25:
4a:63:41:79:a6:db:a8:ae:35:b9:33:76:d0:99:e1:e3:3c:e3:
33:df:fe:01:a6:d6:b3:b7:f2:1c:21:e2:ef:42:2a:f7:67:70:
9c:5c:78:b1:3c:af:64:bb:18:da:65:c1:77:6e:9a:2e:7f:a0:
59:c5:0b:bb:ff:9f:9f:84:cb:5e:7d:d7:16:c9:6f:9d:66:57:
3e:26:51:69:70:f9:83:1e:93:62:6d:b9:19:89:be:b7:38:f0:
8b:18:bc:ed:ed:3a:06:01:45:a8:d9:be:f5:59:e2:d2:59:28:
e5:d9:6d:f8:33:f1:4b:73:91:fa:a2:d1:49:12:12:16:92:f5:
5d:35:25:ef:17:fd:a0:c7:2d:5f:2f:d1:70:53:1c:35:cd:34:
11:a7:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:55:36 2026 by rpki-client