Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: WIjea3GJ8vK7MUddYAg0CaN42augoeBeDjXdZXKjJl4=
Subject key identifier: FE:2E:AF:86:F5:F4:2D:C5:B8:55:10:FE:39:A1:FE:2B:A9:93:E4:3C
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 01A134EBE302707FEE360898A4B51CD96A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 1AA2
Signing time: Tue 13 Oct 2026 11:00:36 +0000
Manifest this update: Tue 13 Oct 2026 11:00:36 +0000
Manifest next update: Wed 14 Oct 2026 11:00:36 +0000
Files and hashes: 1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: pq72HQNjOUR6rh+wemEzB8/IfyInUbo6ZtHVrjya3Uw=)
3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:eb:e3:02:70:7f:ee:36:08:98:a4:b5:1c:d9:6a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Oct 13 11:00:36 2026 GMT
Not After : Oct 14 11:00:36 2026 GMT
Subject: CN=fe2eaf86f5f42dc5b85510fe39a1fe2ba993e43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:60:21:be:b4:4f:ca:c1:c8:5e:1d:13:e5:c9:
89:42:5b:8d:32:92:5a:7e:72:e8:02:9c:3a:88:b9:
f7:91:04:a1:bd:ca:b8:64:12:1c:7b:fd:ab:6e:0f:
ef:af:51:57:bf:47:07:e8:76:ef:f5:6c:c5:f6:b0:
f3:65:39:5a:3f:ba:47:ea:b0:f3:7e:2e:4e:3c:ab:
c2:ba:a4:da:89:96:36:d4:53:2a:89:19:b2:85:16:
8a:49:64:9e:07:92:1d:bf:a7:55:77:52:cd:1c:68:
17:18:ff:22:b5:ba:92:50:88:1f:fb:5c:10:44:6f:
d4:60:1b:0e:b8:73:05:a0:0e:42:cf:1f:eb:50:93:
19:b4:ad:9d:4d:25:7b:bc:4f:6d:f2:cb:ed:64:af:
6c:75:88:1b:4c:ba:1e:69:9f:27:48:f8:df:9e:90:
1b:c6:60:c4:36:91:5e:bc:cc:a7:93:90:4b:fd:82:
c4:0f:7e:5b:2d:3a:d2:90:b2:1c:61:a8:d1:12:4c:
3c:6a:63:5c:f1:d7:d9:ce:6e:80:b3:b5:4f:a4:cf:
fd:a9:e8:41:1f:ce:47:d8:94:fa:98:82:dd:44:69:
97:58:65:a9:05:c5:53:94:eb:09:7f:bd:72:d8:55:
c8:68:ff:a0:28:30:a4:2f:d0:e1:c5:35:f1:d3:1c:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2E:AF:86:F5:F4:2D:C5:B8:55:10:FE:39:A1:FE:2B:A9:93:E4:3C
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:df:f5:f3:3a:28:4c:c5:71:c3:dc:25:2d:75:2b:db:d4:60:
5e:fc:26:bc:48:bd:76:a5:5e:85:71:31:6e:e9:d9:79:a3:d4:
36:4c:3f:8f:99:d1:61:b5:ff:20:fa:01:64:e6:6c:09:e5:80:
20:81:3c:df:75:e3:71:d2:69:08:8a:24:c7:ed:05:4b:e9:e9:
49:e5:47:e7:3c:ca:53:24:bc:1b:52:30:6f:b5:91:5a:4d:fd:
b0:df:43:78:8e:7b:64:0d:b6:5b:b8:01:b1:6a:bb:de:c9:1f:
3e:24:4c:64:98:9e:19:47:98:71:56:2d:48:a3:dd:f7:5d:1a:
61:55:ae:12:e1:98:46:fe:59:b3:cf:fc:ad:9d:82:bd:7d:e2:
98:0d:0c:e6:c3:e7:e3:88:d0:b0:ca:bc:06:76:13:14:7a:f9:
8c:f8:a2:b6:90:6f:df:c8:1c:5e:7e:fe:e7:76:19:70:95:48:
0a:da:3a:7c:7d:51:5a:c8:f4:ac:88:9c:1e:05:1a:39:32:62:
05:6f:17:f3:e8:ad:db:17:8a:8a:5a:8a:38:70:98:e4:98:ba:
9a:9c:ee:72:39:6c:1c:8f:9c:6c:db:eb:f8:de:a2:d9:70:15:
88:d6:1a:51:94:c8:aa:40:54:c8:eb:9a:ec:2a:93:fa:b1:b3:
d3:7d:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:12:14 2026 by rpki-client