Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: E50vp1HvwHA3AvuhnbDNn3xM0+ZK3qlMopxVm9PKBJ8=
Subject key identifier: 22:77:54:F0:5F:FC:56:EA:A2:A8:AB:43:4F:16:B7:E6:CA:8E:62:8F
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 01A134EBDF5FBEFC0D67A9274DE48297EB9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 11:00:35 +0000
Manifest this update: Tue 13 Oct 2026 11:00:35 +0000
Manifest next update: Wed 14 Oct 2026 11:00:35 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: deDxtZqPukRAY7BlW9Bkoz52mau0cP5feOC+OSf1YYI=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:df:5f:be:fc:0d:67:a9:27:4d:e4:82:97:eb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Oct 13 11:00:35 2026 GMT
Not After : Oct 14 11:00:35 2026 GMT
Subject: CN=227754f05ffc56eaa2a8ab434f16b7e6ca8e628f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:c8:44:40:8b:01:0b:f6:21:89:4a:75:09:
2d:c5:92:2b:2e:2c:2a:9c:f1:ac:db:bb:85:48:d1:
3c:f7:6e:2f:69:03:23:c8:6c:87:5f:c6:28:0d:22:
33:0b:71:4e:da:b0:6b:66:81:c7:79:2a:b3:19:06:
df:ec:c7:0c:e1:63:de:c0:86:18:1b:a3:e6:a9:e4:
91:c4:20:b0:45:2b:33:7c:35:d1:2b:8b:fb:6f:03:
fd:e3:ca:a9:bd:ae:2e:ad:a6:bd:49:a9:c0:c2:71:
68:6c:0d:f9:7c:9c:df:80:48:ac:e6:e9:30:a3:9c:
a3:f3:7d:58:5c:1b:b2:b8:c6:be:70:13:b1:c5:e9:
20:bb:da:73:3d:40:f9:a7:ec:7a:eb:5c:b9:b0:1b:
dc:7d:29:b4:d9:26:78:a9:80:3e:12:dd:50:cc:ee:
cb:8e:1d:b9:d6:b7:6c:58:4f:cb:cb:e4:c3:12:63:
cd:99:4e:72:87:ab:2a:86:97:50:e1:b9:0a:d6:da:
b0:14:76:5e:01:3d:e4:46:3b:e5:8e:45:08:37:fd:
57:f6:1f:5e:14:3d:d1:0a:7d:1e:71:96:cb:61:86:
2b:3d:4d:aa:57:9c:45:db:e6:f8:f3:aa:aa:a6:f9:
5d:d5:99:78:47:8c:9d:a2:c3:28:2f:c4:5c:b9:2f:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:77:54:F0:5F:FC:56:EA:A2:A8:AB:43:4F:16:B7:E6:CA:8E:62:8F
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:32:dd:89:98:3b:9f:87:b0:52:a3:a2:a9:fa:00:8d:93:39:
45:9b:df:fd:f3:93:27:28:f7:e8:f1:37:5a:3e:07:79:58:03:
92:0f:40:54:e8:14:10:a4:22:a6:13:45:b4:37:bb:ce:9a:99:
08:e8:15:ae:ab:48:6b:7d:07:41:00:5e:91:d6:e1:c3:e5:49:
fc:2e:a9:88:98:7e:d0:fc:2b:5a:18:81:4c:e2:f5:54:f9:0f:
97:9d:67:df:de:0b:ec:b1:4f:64:4b:17:de:fe:40:d8:3d:92:
65:67:8b:4c:22:98:6a:26:75:47:32:a7:e5:b8:ce:d1:f2:66:
94:39:6d:78:4d:f4:78:c2:7e:6e:18:d5:d7:db:78:d8:14:83:
e3:1b:d1:8b:29:ff:8b:90:15:7c:60:04:e6:70:c5:91:12:52:
da:c2:72:e7:c6:ba:43:f3:8d:3c:b4:22:04:d6:4c:d5:7b:49:
0e:31:19:f1:a8:30:c5:80:f8:82:b9:8d:11:83:ec:b2:40:c0:
3d:bc:90:3d:b0:12:79:09:4b:30:dc:4f:2a:28:0d:41:46:c1:
bc:20:f6:0e:9b:49:4c:a2:61:cd:f7:3e:b1:ab:e8:17:f1:92:
58:5d:76:c0:4a:ec:1e:ad:85:48:ac:b5:d3:90:fb:de:62:3a:
c7:45:92:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:44:09 2026 by rpki-client