Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: Pl+RPMNTntsVvDaNZSmfrWdF5sKV7YQjtJ9P4o/oeJo=
Subject key identifier: F9:15:EA:93:CE:E1:B9:F6:76:14:A3:58:67:92:35:29:66:52:3C:59
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 01A12353C625742A26CDCA1BD3903D5C59BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1A97
Signing time: Sat 10 Oct 2026 01:00:55 +0000
Manifest this update: Sat 10 Oct 2026 01:00:55 +0000
Manifest next update: Sun 11 Oct 2026 01:00:55 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: n5Nj2scuSqrbg4BaHfMlM/+aT2y2Z0nF2VT0vWV8Ukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:53:c6:25:74:2a:26:cd:ca:1b:d3:90:3d:5c:59:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Oct 10 01:00:55 2026 GMT
Not After : Oct 11 01:00:55 2026 GMT
Subject: CN=f915ea93cee1b9f67614a3586792352966523c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7b:e3:7a:d4:e3:c0:23:9f:7d:85:6f:69:37:
05:ef:b4:cd:8c:66:a9:4a:56:5a:1d:f4:4f:1e:de:
60:5a:69:2e:c4:4a:fc:49:fb:5d:00:2c:9b:2e:47:
6e:79:3c:98:33:d4:8d:a3:84:c3:e0:fe:9d:1d:91:
70:83:0c:fc:41:b4:a0:e8:47:0f:25:3c:77:71:2a:
5d:22:60:9a:22:84:07:17:79:51:c2:5a:6e:3e:3f:
80:cb:48:28:b2:8d:ba:4f:04:75:a1:93:20:fc:bd:
b3:ee:1d:f8:2a:6e:b0:8a:ba:1b:b7:61:61:93:de:
af:76:94:61:ad:9b:e5:7f:77:7f:75:36:52:e9:e2:
63:bb:90:14:8d:22:b8:c0:65:bf:15:15:cf:0a:c5:
32:c7:fc:ad:4d:6d:64:cd:36:a6:7e:b0:cb:ad:2e:
41:88:27:5c:c8:2e:96:53:3f:13:38:a7:d2:e7:a4:
ef:d4:33:84:1b:e7:08:01:fe:e2:c3:f1:2e:29:11:
87:1d:53:dc:e4:3d:d7:b2:ec:1d:96:44:08:23:a0:
44:2e:8f:4c:36:2d:7e:0b:84:53:06:9c:48:95:1b:
5b:7c:bf:a1:a3:5d:60:a9:e5:62:2d:4c:c7:fe:70:
9a:6a:05:a2:2c:f4:88:43:83:38:7b:be:37:ea:48:
c7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:15:EA:93:CE:E1:B9:F6:76:14:A3:58:67:92:35:29:66:52:3C:59
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:fb:30:bf:33:b5:ba:dd:fc:fc:06:92:ff:7d:13:97:00:
ee:c1:66:b6:76:79:1f:75:75:ec:ad:d1:99:6b:13:73:4b:4a:
87:43:3c:e3:e4:4d:00:2d:26:b2:35:b6:89:1f:1a:13:ae:0c:
18:22:8c:71:2c:3a:0b:f1:f1:e5:81:3c:12:86:ac:e7:d9:4e:
b8:73:55:70:40:16:d6:d5:d7:4c:4d:88:50:f1:dd:64:fd:e1:
fa:59:ff:12:3d:3e:e1:99:db:6a:90:8a:d0:56:64:ae:0a:cd:
77:54:5f:84:c3:b8:5f:ff:74:cc:3f:41:0a:e3:24:c4:fe:80:
e6:55:52:5c:15:81:32:a1:06:9f:22:7d:87:01:7d:cf:15:9e:
fc:b5:00:27:67:07:44:98:98:44:aa:5a:d7:cf:87:27:3c:60:
56:b8:64:81:55:1c:09:9e:ec:5c:03:00:6d:85:e7:95:96:a1:
82:8f:46:60:32:ac:96:f6:d7:5b:80:76:0f:80:85:8b:62:49:
dc:10:a9:db:dd:8d:a4:3c:11:47:f3:ab:b3:f2:98:b0:fc:ce:
4f:d2:af:b6:79:06:f1:92:76:6d:34:05:f0:1b:d7:89:0b:40:
9a:ed:c7:fb:01:31:87:fc:15:c3:8b:54:21:7e:f1:dd:09:62:
b0:8f:6e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:46:38 2026 by rpki-client