Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
File: U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft (raw, json)
Hash identifier: 4b/LM0R7m8z9tmZ2QHGBlIHkVcOzZiE2+V5POxpif/Q=
Subject key identifier: CB:41:E1:9F:F8:22:67:41:63:2A:A5:BD:32:4A:89:24:54:52:33:18
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 01A0F6B30CD336D8CEF73E8B936FB5281E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
Manifest number: F9
Signing time: Thu 01 Oct 2026 09:02:04 +0000
Manifest this update: Thu 01 Oct 2026 09:02:04 +0000
Manifest next update: Fri 02 Oct 2026 09:02:04 +0000
Files and hashes: 1: Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa (hash: Ds8FZooitJMNVsAEf1unNJvTN7eQbb92Gpc2ul39w0s=)
2: MHRuqT3ZxWiNPWjx1hFceo5038Q.roa (hash: duJLSAn68SgAgFK46x9nz8RGT1uXEmPsEIzG1iEF5y4=)
3: U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl (hash: tPQJMyFV607DHnnjKzGTpZSgw6eP927BmRTsubDrtWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b3:0c:d3:36:d8:ce:f7:3e:8b:93:6f:b5:28:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Oct 1 09:02:04 2026 GMT
Not After : Oct 2 09:02:04 2026 GMT
Subject: CN=cb41e19ff8226741632aa5bd324a892454523318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:03:c6:54:2f:8c:4a:5d:3c:69:d2:18:a0:
32:c1:ff:65:46:fe:ba:a4:ac:84:da:37:d4:a7:3d:
6e:9c:38:a0:a0:07:1a:14:22:a8:00:6f:5b:c5:d4:
8d:e8:d7:c6:f9:c0:3f:d1:fd:ea:64:d0:71:22:74:
82:c1:26:30:49:7c:47:57:aa:9c:c3:34:34:9e:44:
76:d2:23:f1:9c:46:47:0d:1a:69:0d:db:42:f6:08:
b5:c8:8c:f6:f0:9f:96:4b:a2:7d:e3:24:97:c9:41:
93:6f:e0:c3:40:18:77:e9:d7:71:57:74:7f:10:91:
52:9b:c2:8b:f8:6a:8c:d9:ac:74:4d:a6:cc:7c:fd:
22:ac:96:c4:2f:86:62:72:4b:3b:09:b3:25:fb:f1:
8f:5b:82:60:13:7f:1e:7c:c8:8e:9e:19:3a:42:51:
a8:ec:b5:49:81:49:5d:9a:ee:a1:8a:c3:48:9f:2e:
83:6f:a6:f1:f9:07:2e:f8:f2:07:f0:f7:c7:b9:7c:
91:98:8a:17:51:3d:b0:a7:97:9a:6f:61:20:fa:a0:
8e:ce:21:30:81:50:1b:f6:10:21:37:63:1f:ea:cd:
64:3c:d1:3f:fe:6a:b6:14:fe:fb:c4:f1:5a:84:42:
b3:83:15:e0:84:0a:9a:00:ae:bb:f0:d7:99:0b:85:
46:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:E1:9F:F8:22:67:41:63:2A:A5:BD:32:4A:89:24:54:52:33:18
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7e:24:ab:11:56:73:26:d1:ab:6c:c5:f7:a0:17:11:45:61:
00:16:e2:37:6b:ae:b3:8a:89:a8:7d:89:9c:a6:8d:54:36:7d:
1f:c3:6f:2d:80:db:f2:cd:3e:46:f2:e3:52:24:a0:c6:af:ec:
89:d1:fb:85:5e:ce:3c:63:ba:ea:47:61:f5:72:d3:5e:71:d6:
8e:06:a5:52:0b:44:33:35:ff:97:c4:7b:0b:5c:28:33:3c:0c:
c3:b8:0b:30:6b:52:6a:11:44:14:67:56:5a:6f:3a:34:27:8b:
26:42:a3:07:37:1a:d5:9b:dd:73:6e:fc:c3:30:b6:4e:e1:6c:
e4:4a:86:ab:c3:0e:5e:a2:61:44:5e:d7:c2:29:dc:a4:61:07:
cb:f9:2e:87:f7:bc:55:ae:d0:7d:55:3d:a6:9f:09:12:c4:2c:
e5:d7:84:d9:ec:f8:a9:98:d5:01:b0:ed:21:dd:a4:a1:67:e2:
c1:f8:88:a3:1e:30:be:13:7f:f1:1b:cf:e0:9f:1b:b1:8b:1a:
ef:ca:24:58:fb:2b:88:20:75:6d:cb:c9:2d:7d:6d:77:b0:45:
9b:c8:ee:bb:28:bc:a1:b8:d5:52:f8:29:39:c0:91:d6:38:7e:
c7:9a:bd:a0:d8:c0:05:20:f5:f2:01:72:19:c1:d8:4e:18:73:
5a:52:70:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:04:53 2026 by rpki-client