Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: zv19WaoVcnPMnd95BdderMCDNz+LmKXkLx+yba3n9e0=
Subject key identifier: D7:B4:70:32:1E:D8:4C:FD:44:A1:1B:81:43:22:24:03:1A:53:67:68
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 01A0D2A5B0DA2EE2ACBFB07BC2BEFAFF7A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 0550
Signing time: Thu 24 Sep 2026 09:01:08 +0000
Manifest this update: Thu 24 Sep 2026 09:01:08 +0000
Manifest next update: Fri 25 Sep 2026 09:01:08 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: 4WR_Mj6nx1ODkLhX1tY_XNAYQjg.roa (hash: 6XqeQOi1pXrk/dziPTISnp18OefE2r1v8i2TFX/+jLk=)
3: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: POH0vHh1+c5iuWsm49CdVSFg1LYLdQroAw7c4TRZReY=)
4: mIf68_1ah6Ep2uSoyoqrenQSyFw.roa (hash: MYjTP5cIg1pggDvKU1AdgEyEZDmjeJWvuFdi59Buspg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:b0:da:2e:e2:ac:bf:b0:7b:c2:be:fa:ff:7a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Sep 24 09:01:08 2026 GMT
Not After : Sep 25 09:01:08 2026 GMT
Subject: CN=d7b470321ed84cfd44a11b81432224031a536768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:df:16:d9:3d:81:44:26:00:47:dd:11:bc:42:
24:db:98:f4:cd:27:4b:9b:e9:41:3e:3d:9e:9a:73:
ba:9c:c8:10:3b:26:b8:08:1a:2b:49:ee:d3:15:01:
51:78:bc:56:c9:59:c1:04:d2:83:e9:1e:2d:22:80:
54:24:f1:1f:9f:fa:00:d3:90:b5:c8:e9:ab:12:ac:
ba:78:e3:4f:5c:b2:b7:a5:ac:2c:56:51:d5:24:1a:
e8:7e:51:b8:e1:dc:a1:f3:3e:94:75:c8:22:0f:f0:
f4:a0:48:33:e7:fb:28:d5:13:c9:44:de:28:d9:c6:
0a:5a:78:e9:78:eb:4e:9d:d9:36:db:cc:fa:af:b7:
61:60:81:ec:ac:5e:d1:de:a2:ca:41:e2:37:d8:f9:
42:70:f5:f6:9e:4d:b0:98:1f:e9:04:f6:ca:94:be:
db:20:99:79:1b:18:10:5e:ae:0e:ee:53:0a:26:59:
c9:9f:eb:2c:1e:8e:1f:74:bd:4e:2f:dc:75:6f:13:
7c:34:0f:d6:b0:57:73:ba:a1:d9:0d:df:b0:83:1a:
02:f3:df:8d:32:fa:4b:c8:19:28:2a:cd:d1:32:0e:
5e:ca:a6:24:53:ba:38:c0:c9:42:a6:72:d7:49:88:
78:22:c5:88:f7:6b:57:d5:be:53:a7:84:c7:60:36:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:B4:70:32:1E:D8:4C:FD:44:A1:1B:81:43:22:24:03:1A:53:67:68
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:b1:81:48:5e:94:58:6d:ba:fc:cd:3d:bb:68:14:cc:bc:
8a:ff:0d:93:7d:f3:97:fb:c2:61:ff:d5:f8:9b:13:70:43:59:
83:8d:4c:c9:26:ec:80:df:f6:05:22:e3:2e:39:15:d0:c3:74:
bb:0d:a9:bb:31:5e:43:2e:5b:be:01:49:dc:6a:a2:66:18:fb:
ba:5d:c2:bd:b0:67:83:88:de:a0:09:c3:6e:21:0e:91:0b:6f:
dd:98:94:fb:50:62:29:cb:d8:f5:23:cc:22:fd:6e:87:6a:17:
3c:3f:02:71:ab:ba:36:94:cf:a8:22:03:e5:5a:4f:9d:0a:7b:
f0:df:aa:dc:c5:7e:18:7b:3a:af:c1:ab:2e:3f:26:b2:66:1f:
4b:bd:6c:c0:02:dd:1e:74:50:d6:71:00:b7:39:0b:5e:89:6b:
0b:43:96:f7:80:1b:a8:55:12:ca:31:fa:93:3d:03:d1:49:bd:
74:f4:e8:60:16:17:81:6a:8d:4d:0c:a3:a1:18:59:f7:b7:ef:
2a:2a:d0:15:52:9e:0a:90:51:7b:70:13:b9:7f:97:c1:26:e7:
d4:4a:39:ae:76:0a:58:07:a3:fb:77:24:b5:61:3a:f1:b6:66:
e4:11:98:3a:4f:5e:ee:10:26:84:ea:e2:b4:56:e6:81:6f:99:
7d:e3:ee:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:13:42 2026 by rpki-client