Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: us3ZKD4rN+7H6lth2lJfPSE92wcgPLke8jpaJl85bk4=
Subject key identifier: 72:3B:CB:75:64:9D:95:DE:27:03:C1:F5:51:95:94:7B:FB:94:AD:E1
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 01A1088229D52C0FB60509AA154227A0A36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0E52
Signing time: Sun 04 Oct 2026 20:01:50 +0000
Manifest this update: Sun 04 Oct 2026 20:01:50 +0000
Manifest next update: Mon 05 Oct 2026 20:01:50 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: v/eV+OGmllmznuKeJ92wSZN+ixLdrt1MgGTPwZQWGxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 20:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:82:29:d5:2c:0f:b6:05:09:aa:15:42:27:a0:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Oct 4 20:01:50 2026 GMT
Not After : Oct 5 20:01:50 2026 GMT
Subject: CN=723bcb75649d95de2703c1f55195947bfb94ade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:85:3f:3f:f9:5d:3e:c0:66:e0:2f:12:3a:7a:
56:6d:09:8c:2e:3f:59:b3:8a:9c:24:50:de:63:fd:
0d:3f:64:95:a2:3a:a2:f0:da:91:9f:54:57:08:c1:
c4:74:f0:d6:2a:94:d9:95:25:f5:c1:4c:10:09:80:
fa:27:46:eb:b9:9d:0a:eb:54:c9:a0:7e:6c:42:88:
21:64:22:85:c0:aa:5a:66:13:83:59:a2:58:d8:5f:
ac:78:72:e9:86:52:c8:e6:ef:72:de:53:0e:e3:e5:
db:37:5e:58:54:f4:61:29:02:dc:ab:1b:d5:24:56:
b3:7e:19:7c:60:68:23:90:f9:4b:6a:5f:15:6a:14:
ea:d5:f7:67:aa:d5:c3:a8:9b:8a:fd:a1:65:d0:b0:
c5:ec:be:b7:72:3c:03:ed:9a:80:e5:42:fa:ba:f2:
d1:62:b7:03:d6:02:84:7a:22:d0:cc:c9:a4:64:65:
22:6b:ef:63:e1:7f:e9:31:f7:e5:ff:c8:51:5e:d2:
e0:a3:29:3f:db:29:8e:8c:fe:f8:8e:70:a1:a6:d5:
d4:3b:59:43:d4:4d:df:b5:e0:aa:8d:29:a1:5d:ce:
c9:93:c0:36:7d:a6:60:20:d0:f1:9f:04:be:ce:c9:
00:5c:be:d3:1b:f0:68:85:00:73:89:eb:6f:ce:5a:
ee:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3B:CB:75:64:9D:95:DE:27:03:C1:F5:51:95:94:7B:FB:94:AD:E1
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:67:6d:03:2e:67:6c:90:e1:fb:78:bb:59:41:d4:46:ca:
84:7f:6f:4f:51:e8:ca:cb:8b:a5:be:d6:35:88:8f:1e:00:67:
08:aa:94:50:4a:52:1c:7e:f4:7f:9e:d4:f7:cc:ab:e6:fe:6e:
71:90:6c:15:d4:c9:7c:f9:0f:3d:6f:bf:cb:92:0b:71:8a:58:
b0:1d:70:8d:8b:9d:64:33:60:64:97:65:05:0d:2c:ab:b7:e4:
98:a8:07:80:4a:b4:81:ce:7e:cf:f6:93:a8:8c:64:9a:dc:88:
6f:f5:19:43:4e:19:52:ab:73:8a:6b:86:89:19:04:6c:77:25:
a4:a8:53:1f:da:b6:fa:35:32:b4:90:d4:55:18:2f:77:a1:2b:
df:e4:05:15:c9:0b:e7:48:9f:4c:73:b9:99:4d:32:6f:64:e1:
72:ea:03:d3:24:a0:77:a5:87:2a:d0:cf:b0:94:a6:11:90:6d:
00:e9:60:2f:1d:8b:7a:b9:56:fd:4b:6d:8f:36:50:66:38:22:
23:34:0b:e1:f3:fe:53:37:91:45:9a:92:2f:dc:aa:f4:6d:8d:
5d:a4:a9:59:ee:35:0d:b9:26:ff:23:a0:6a:9d:87:b3:68:d5:
d7:1b:f7:19:81:76:94:da:53:13:0a:0e:5c:82:c9:ee:2e:c9:
6a:53:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:49:35 2026 by rpki-client