Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: AKp5B2UPMBwK7+ArZyZMNdEzjffiGy9YzSlCdzkd8wQ=
Subject key identifier: 36:F8:8F:82:30:E7:D6:77:7E:F2:15:A2:82:56:9F:73:D1:04:8F:BB
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 01A0D57042B504FEBE23CDE93A9C9C3A7039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0AAE
Signing time: Thu 24 Sep 2026 22:01:39 +0000
Manifest this update: Thu 24 Sep 2026 22:01:39 +0000
Manifest next update: Fri 25 Sep 2026 22:01:39 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: Ls5qPSQjzPsi4/q6F0cHiBh9S6FxQ0AEew4cESPVcyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:42:b5:04:fe:be:23:cd:e9:3a:9c:9c:3a:70:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Sep 24 22:01:39 2026 GMT
Not After : Sep 25 22:01:39 2026 GMT
Subject: CN=36f88f8230e7d6777ef215a282569f73d1048fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a2:ca:7d:35:9c:2d:bc:75:52:46:c2:3f:dd:
52:62:be:7b:c9:2c:35:c2:8c:c4:1d:26:0a:4c:6c:
0d:0c:aa:7a:af:0b:23:07:2a:94:c7:2e:18:a0:a7:
d6:4e:48:e3:95:48:81:01:8d:ef:33:63:fb:ae:46:
64:3e:6c:d8:57:8a:67:b9:8a:bd:0f:9b:1f:7c:03:
84:f0:50:8e:07:53:52:dd:08:b3:e0:f5:07:5e:4b:
d3:a8:f6:cb:6d:2e:0f:b8:48:4d:3c:e9:83:da:68:
8b:3e:7b:26:45:28:88:94:61:f7:6f:f8:dd:50:2a:
7a:30:41:6d:7e:64:ae:a7:79:b7:b9:44:b3:96:ac:
1b:9c:20:83:40:c3:5f:20:41:4d:a5:a9:75:9d:bd:
5a:16:03:c3:c9:ec:7c:78:03:66:07:d8:4f:1a:19:
d4:3e:4a:4d:19:3d:83:c8:5c:cf:a5:f9:5f:e7:67:
20:1a:73:2a:be:58:53:56:56:7d:e7:83:61:8c:93:
cd:f8:a2:6c:5a:47:b0:bb:b6:28:d9:81:83:af:fb:
d8:b2:32:f6:a8:3d:38:0d:b3:cd:40:99:ba:23:2d:
c9:9d:5b:2d:01:98:d2:ed:ea:09:4e:c9:a5:7f:ad:
0d:5d:11:cb:ad:55:81:e0:72:cd:92:1a:a4:02:08:
ab:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F8:8F:82:30:E7:D6:77:7E:F2:15:A2:82:56:9F:73:D1:04:8F:BB
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:aa:0a:02:6a:c7:b1:f4:75:38:c3:c0:0e:bd:2f:6e:74:f6:
aa:47:33:65:7b:a2:7d:22:c6:bc:06:7b:b0:8b:e4:b2:df:59:
0d:20:53:f7:28:f9:c8:3c:0e:f0:dc:fa:9c:5c:ed:50:d7:ed:
ee:b8:0a:51:81:5a:c8:3e:cf:60:4f:dd:94:6f:4e:41:91:8d:
22:6d:62:a4:20:ff:77:b4:7e:1c:1c:ce:54:9e:50:a9:63:c5:
6c:ac:a4:43:61:fd:fc:1d:68:72:80:6d:40:80:23:78:12:42:
05:25:b9:00:83:1c:24:3f:53:a2:89:18:30:90:68:9b:aa:cf:
ea:27:fd:59:33:dc:37:78:0b:a7:58:d6:a9:56:0f:74:45:93:
05:9c:e9:d7:b5:8b:e1:08:f3:79:6e:51:8a:9f:a1:fe:45:5b:
b8:e0:64:96:1f:62:dc:b4:3e:b8:0d:33:ee:28:7a:ae:1a:1f:
be:ac:3a:6e:2e:e3:1c:94:49:7a:f3:59:1b:20:57:13:90:e9:
15:bc:a8:42:11:25:0c:7c:ad:12:e7:03:70:88:eb:c0:e2:04:
70:74:96:46:15:16:3f:0f:51:eb:65:c6:53:f9:9c:f9:07:d7:
4e:51:65:07:a9:15:39:40:3f:84:9d:6d:cf:79:0a:b6:0f:e7:
fc:7e:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:42:46 2026 by rpki-client