Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: 7S3gs07cyI0s1f9Irxnj23+/6CP5LneUNC7mozEJVTw=
Subject key identifier: DD:0C:3E:7C:C7:DD:2A:17:88:DA:6D:41:97:78:92:8D:8B:9B:30:33
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 01A0D19295190EDC7D247D7EA9CBD6614BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 1A6A
Signing time: Thu 24 Sep 2026 04:00:39 +0000
Manifest this update: Thu 24 Sep 2026 04:00:39 +0000
Manifest next update: Fri 25 Sep 2026 04:00:39 +0000
Files and hashes: 1: 2i94ZuY5RqzqlX-gSjCu8vj-qbE.asa (hash: gi+NyJlUA+ulIOoyHfXiyv3PvckTspemiq3BV9plHVw=)
2: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (hash: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE=)
3: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: KzNsVN/sYypr04ZWegPrkg1fCJH7ZnIy9r3V14UoFG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:95:19:0e:dc:7d:24:7d:7e:a9:cb:d6:61:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Sep 24 04:00:39 2026 GMT
Not After : Sep 25 04:00:39 2026 GMT
Subject: CN=dd0c3e7cc7dd2a1788da6d419778928d8b9b3033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b1:bc:cc:0b:e7:3e:92:48:cc:11:b7:76:e0:
82:3b:f1:41:ab:8f:f5:c1:92:5c:42:29:4f:c9:07:
5c:1e:a2:bb:65:d6:67:64:28:31:d3:3a:cd:00:17:
22:d6:48:b4:99:d3:f5:a7:c9:06:69:49:db:df:1b:
a4:1c:12:03:cf:76:57:8a:65:36:26:80:31:4c:62:
4e:22:fb:d1:ec:17:98:30:b8:98:6b:bc:1c:6a:76:
9f:b8:f5:02:91:70:bb:6e:2e:a0:24:7e:39:fe:80:
cb:05:d6:b9:b2:d8:32:26:72:45:ef:5d:e8:02:45:
c5:58:a0:d0:cd:33:88:a0:53:ab:72:25:57:71:91:
95:50:af:23:a8:a4:dc:81:bf:7a:26:66:f6:a5:17:
ee:e1:bb:34:23:c2:71:3e:e2:15:95:de:09:e9:82:
0c:57:d6:8a:de:ab:45:8d:c9:3c:da:07:31:99:40:
5d:1e:73:cf:70:04:e9:9d:cd:f3:a9:9a:05:ed:f1:
68:e4:f3:f2:86:b7:77:11:b0:f5:f4:e1:ae:34:0c:
f3:95:51:93:b3:4c:79:99:52:7d:e9:4a:a8:90:b9:
3a:58:cb:22:84:c5:9a:fb:4c:66:c9:10:26:74:65:
8d:0f:ea:fb:47:be:c3:b6:4e:17:dc:c0:ed:4d:c2:
d1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0C:3E:7C:C7:DD:2A:17:88:DA:6D:41:97:78:92:8D:8B:9B:30:33
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:48:b7:c3:cb:a7:f6:43:77:8f:43:0a:b6:11:18:73:0e:48:
5d:e0:4e:ce:e0:75:f7:f7:62:4d:41:1d:8a:c2:d7:50:9e:36:
98:1e:42:09:5b:79:d9:61:d6:10:cf:a5:12:c4:b3:35:91:1e:
4f:4a:df:f7:59:b6:af:2e:65:46:65:ad:88:b5:25:a9:e8:9f:
8c:6e:af:e2:fb:ec:63:a4:49:e6:5e:19:d7:6b:7b:a3:fd:3f:
8d:59:60:4e:e7:a2:17:6d:fd:3d:4f:c7:1d:d9:b5:db:fb:8a:
64:42:36:9f:dd:e9:17:81:a6:b5:21:6f:8a:54:f8:7b:49:f5:
1e:ea:71:07:e3:c7:f3:ea:6b:05:d8:48:76:e2:01:e7:a1:ee:
84:4b:ad:e3:bf:34:06:c1:3b:4a:c5:fd:f4:33:19:30:0b:02:
49:dc:02:b3:ee:77:bc:4a:4e:aa:79:9d:65:6b:db:03:d3:f0:
b2:40:fc:5a:38:56:b2:5c:e4:40:c7:9a:2c:a1:ff:54:a4:d1:
aa:12:98:08:28:e6:09:0f:26:eb:aa:80:ce:19:c9:2a:61:91:
6f:85:9a:f2:5b:61:c9:49:45:3e:ad:24:04:3e:7e:d9:65:30:
6a:1f:17:6d:ea:1c:75:be:84:cd:2d:d7:e6:13:f8:c0:1e:29:
8f:c0:51:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:52:17 2026 by rpki-client