Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
File: UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft (raw, json)
Hash identifier: qQN3pp1L4BDDdHOxFsGE6jbKYRaUI6BLVQPAHUy29DA=
Subject key identifier: 0F:F3:E5:63:F1:63:DE:DD:28:CA:3B:E1:A0:78:F2:D3:A0:48:BC:1E
Authority key identifier: 51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
Certificate issuer: /CN=5177b45dbe49582983871498e928aee77607e4d2
Certificate serial: 01A0E173EA3FCF8E383970B58C96B95F46A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:05 +0000
Manifest this update: Sun 27 Sep 2026 06:01:05 +0000
Manifest next update: Mon 28 Sep 2026 06:01:05 +0000
Files and hashes: 1: 9Hex18TBKBueDomTw4vvvqZLwVk.roa (hash: AvD4BYdpz590SrzArOTz39pFBwhxq164wDsdMrG1gDA=)
2: UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl (hash: ZU34bzT6aECmTi3cWaUaKHbzdUZez9b3yRRaaYV78Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:ea:3f:cf:8e:38:39:70:b5:8c:96:b9:5f:46:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5177b45dbe49582983871498e928aee77607e4d2
Validity
Not Before: Sep 27 06:01:05 2026 GMT
Not After : Sep 28 06:01:05 2026 GMT
Subject: CN=0ff3e563f163dedd28ca3be1a078f2d3a048bc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:be:83:8e:85:e5:ed:8a:4b:67:2f:e4:fa:
80:9d:41:66:60:20:ae:75:fc:cc:43:6d:06:ff:2b:
fd:97:0c:4f:7b:27:20:88:b8:d8:6e:75:ca:db:43:
1c:09:40:ba:fa:9a:b3:92:67:7a:e3:21:f8:5d:95:
27:e8:73:02:fd:92:ad:c0:c9:5a:e3:27:8c:23:e3:
d1:46:d3:ec:4a:52:27:1d:9a:01:dd:fc:5a:be:bb:
68:e7:5e:2b:d7:bc:e6:b1:72:13:74:52:52:e6:0d:
6e:a7:18:86:85:f3:72:64:6a:88:ce:6b:d2:40:bb:
81:8d:37:a3:5c:35:5f:97:cd:d6:45:77:36:75:38:
22:12:10:3d:9f:34:94:a9:a7:b1:03:77:e8:8e:80:
2b:53:56:e7:5f:39:34:1c:2f:10:cf:c3:12:aa:53:
d8:7e:ab:3e:f2:e2:e9:49:15:d4:0b:77:fb:38:30:
1d:b8:84:bf:f0:da:a9:54:92:27:c4:5b:ca:0f:67:
0a:2a:c8:8a:a8:a8:40:38:fe:90:03:27:3f:99:8e:
91:de:f9:51:4e:08:7e:c6:dc:4c:a6:bf:a4:b1:0f:
23:bb:bc:de:58:0f:2c:bd:d7:d1:9c:66:4b:bf:45:
75:3e:2c:2b:6d:44:12:5a:42:f5:4e:a4:01:db:42:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F3:E5:63:F1:63:DE:DD:28:CA:3B:E1:A0:78:F2:D3:A0:48:BC:1E
X509v3 Authority Key Identifier:
keyid:51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b2:1d:23:36:11:e4:02:04:33:55:e2:84:e0:e7:85:c8:30:
f2:01:f3:10:11:98:a3:1b:93:a7:e5:6f:a1:33:3f:ca:35:37:
70:f0:b3:f4:0c:74:db:4b:60:17:d2:04:8b:ea:30:08:38:db:
bb:4c:e4:d1:46:81:de:72:7d:66:1f:b5:33:c4:c9:8d:3d:45:
78:4f:ce:3a:55:5c:2a:8d:91:6a:fb:d4:72:da:b8:85:13:d3:
60:3b:d7:4a:84:2f:e3:a3:d7:12:b5:65:05:5f:43:8a:d6:77:
5d:1a:dc:fe:06:2e:7d:b8:c9:bc:e1:ab:5d:69:17:a0:36:27:
5d:f8:f4:84:ed:db:93:01:7b:cb:a9:0c:4a:63:0c:06:5d:88:
d2:c3:c0:08:4a:cb:dc:6b:81:cb:b8:18:e2:4a:b9:3f:b8:18:
cc:46:56:0e:9d:c0:19:52:66:63:0d:8d:1a:f6:25:2e:92:2a:
ca:43:6b:ed:e8:ab:e7:31:5e:8d:c8:51:8f:39:84:c5:97:31:
d6:bb:7c:2b:21:5b:5b:52:ba:97:c0:60:93:40:01:8a:0e:fd:
86:0c:ea:3f:29:2c:d4:a3:5b:00:a4:82:c3:7c:97:1e:c4:f3:
db:46:15:f4:7e:3f:f0:4c:f3:97:62:5b:fd:a6:24:ce:0b:cd:
86:16:cf:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:18:01 2026 by rpki-client