Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: Lb/BfVAgxgJ4zZ/GQ4ClJ7wLCCX94lpUDV/sWHdCnSg=
Subject key identifier: 78:7C:4C:78:81:58:FE:61:95:10:FF:A8:16:78:C6:A4:9F:7B:C5:8C
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 01A1A78200CCCA2E57C13C45EF8A92877B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 02C8
Signing time: Wed 04 Nov 2026 17:01:17 +0000
Manifest this update: Wed 04 Nov 2026 17:01:17 +0000
Manifest next update: Thu 05 Nov 2026 17:01:17 +0000
Files and hashes: 1: KstXJBTU9_95RgYAGgk0ocTiAAk.asa (hash: 1aWyFNHfdiDQ+9mjEacvi8VKbddcwrT5VsWI5r5oY/w=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: 3HSMvLWeCcKwPvrMjJ8lgSOyyvJkl1d9pATNLwRn2+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:82:00:cc:ca:2e:57:c1:3c:45:ef:8a:92:87:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Nov 4 17:01:17 2026 GMT
Not After : Nov 5 17:01:17 2026 GMT
Subject: CN=787c4c788158fe619510ffa81678c6a49f7bc58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:f4:da:fa:45:18:93:09:0e:a9:d9:24:2c:
ae:55:b9:2e:f8:40:9b:68:cc:37:fa:eb:90:49:fd:
18:24:0f:88:3e:84:ce:ef:cf:9a:a7:c6:50:21:6b:
6f:f8:e2:1a:29:2d:5a:fc:04:f6:c5:11:ad:2e:92:
5b:36:60:cb:f7:c2:47:96:b9:0a:c6:fb:55:61:6d:
00:86:02:97:7b:7c:63:7b:b2:60:26:e1:db:b8:74:
bc:4b:d6:a9:a0:6b:d8:6f:0a:97:a7:b4:22:08:f6:
c5:6a:50:3e:00:a7:8b:d9:89:31:bf:08:3d:70:fb:
4f:d8:f5:19:53:cb:18:e3:93:9b:d4:e7:f0:38:b9:
fc:33:c2:05:54:1f:55:26:84:30:9c:3c:2e:4a:f0:
ca:c0:2f:ba:7a:a7:c9:6c:ec:fc:d9:5b:ff:0c:d1:
f3:31:e6:e8:56:13:ae:32:68:8e:08:d4:09:af:a5:
b6:09:63:0c:32:24:80:e5:1e:36:5d:ee:69:1f:d3:
5a:1b:7b:df:7f:25:b7:18:a4:22:67:a3:3e:f0:8b:
4f:69:cb:e3:4c:86:0e:c3:bf:aa:dc:7b:2e:5e:2d:
47:76:74:29:84:42:4f:a5:63:df:6d:49:56:2e:89:
40:af:9c:2d:50:e4:8d:e0:b4:98:02:41:1a:bd:2e:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:7C:4C:78:81:58:FE:61:95:10:FF:A8:16:78:C6:A4:9F:7B:C5:8C
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7f:38:39:97:d6:fc:9c:1b:d4:2d:10:4c:d1:14:85:b4:48:
9c:04:9e:f6:e5:6d:94:40:25:7b:1a:13:53:9f:3b:7b:7b:d6:
77:5f:f5:df:8c:0b:3f:17:4d:58:78:80:5a:e4:3a:7e:07:7c:
54:44:69:76:40:3a:9d:52:1b:e7:7d:0e:03:eb:ed:e6:27:a2:
26:e9:4c:bc:09:fd:9e:26:25:f3:a0:c2:86:80:da:af:99:74:
6d:82:bf:cf:3c:03:bc:5f:93:f5:00:a2:dc:55:d2:23:92:44:
52:af:10:0d:6c:6f:c8:bd:68:90:e1:55:e3:d0:fd:10:e6:b0:
00:6c:3b:29:7f:3c:57:8d:2a:ad:71:d3:0d:63:4d:8f:7a:64:
75:bc:ba:7d:dd:e6:30:50:29:9d:62:f4:ae:19:93:13:97:c4:
58:30:47:50:1a:69:7a:2b:61:9c:89:af:57:64:81:ff:4a:20:
26:14:06:37:d9:b7:df:38:7f:b5:d6:02:41:e3:00:6c:50:69:
3a:53:7d:3d:a6:c7:b7:32:31:55:7b:53:d9:cf:2a:01:82:5a:
8e:44:97:98:69:13:83:8b:3e:9c:99:36:25:7f:a6:49:fe:9c:
2b:b5:b1:d7:c0:00:31:68:2f:07:7a:5c:f5:e7:f7:76:9f:f8:
3e:3f:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:53:11 2026 by rpki-client