Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: VNGWjmB+vH5cUnXFaV5QLEfHKmW9M2FLWCZCanLtUo4=
Subject key identifier: 90:B8:DC:01:DB:8B:1C:99:CC:65:AF:8B:A2:26:9A:AA:EF:53:29:15
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 01A129C36C3CBBD5249D7630CE889A30AC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 07:00:35 +0000
Manifest this update: Sun 11 Oct 2026 07:00:35 +0000
Manifest next update: Mon 12 Oct 2026 07:00:35 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: 9Ij+kNbMGN+KS+O2TO/ZBCoPF44of6l1k8bcQrHEe4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:6c:3c:bb:d5:24:9d:76:30:ce:88:9a:30:ac:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Oct 11 07:00:35 2026 GMT
Not After : Oct 12 07:00:35 2026 GMT
Subject: CN=90b8dc01db8b1c99cc65af8ba2269aaaef532915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:4b:46:25:4b:a7:76:3b:b9:b0:f5:f6:5f:
03:e1:b2:01:80:09:89:b4:1b:5b:e2:e2:75:c7:58:
24:78:b1:e4:ad:85:7e:ce:f6:44:a5:12:0a:71:45:
3e:19:7b:8a:18:99:df:8f:00:a5:ef:56:66:ef:f3:
d5:7a:3b:24:a3:a8:23:7b:74:a3:b7:c1:58:10:a2:
60:a3:ea:86:52:f3:68:73:88:56:06:eb:b1:b3:25:
d8:a4:37:af:3f:c4:b1:12:6f:f3:85:22:ed:6e:c5:
93:3f:a5:ad:67:0b:03:1e:64:54:cb:3f:72:9f:e8:
e8:a0:53:25:88:f4:43:81:f8:65:38:a5:f4:94:f3:
b6:d6:8c:3b:97:6a:23:54:78:ac:cd:15:c5:7d:66:
ed:63:e2:08:b9:24:ce:64:dd:1e:5f:d8:13:06:81:
c2:02:e0:49:b7:a2:1c:71:30:e5:c9:5d:2d:c1:02:
8f:c5:69:81:bc:56:ff:ab:fb:f7:cd:81:87:a1:72:
14:78:e2:4f:78:0e:59:e2:97:26:67:ab:33:ec:c2:
00:32:fa:c6:04:3f:86:a5:df:28:2f:93:d3:ee:6e:
cb:23:c5:34:0e:e1:e5:ab:cd:68:44:70:84:da:e9:
70:3f:f6:e0:7b:96:a2:1c:42:bd:3a:e9:80:ae:6b:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B8:DC:01:DB:8B:1C:99:CC:65:AF:8B:A2:26:9A:AA:EF:53:29:15
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5b:86:af:18:8b:3d:47:6f:0b:24:df:ee:63:06:5e:b6:ad:
d3:66:7b:17:35:06:46:06:0b:13:22:fb:76:5c:92:6b:ad:ed:
c6:97:26:5d:54:1e:95:41:63:ec:ff:6f:c4:8a:fc:ad:23:29:
90:e4:fe:82:fe:7d:53:e8:8b:90:ac:17:18:a5:0c:3e:9f:0b:
93:b3:dc:a1:e8:5b:be:ce:d6:28:3d:45:29:77:1c:bf:13:e4:
b4:e3:de:bd:e3:9f:11:cf:b5:33:84:72:43:40:38:71:42:00:
13:db:b6:9b:b3:82:04:25:80:84:c9:36:d9:74:ac:81:58:c0:
14:af:33:b2:94:27:8d:51:10:ee:e4:66:96:51:47:5b:f0:3d:
63:0a:a5:12:69:9b:03:b0:43:93:51:23:ea:69:28:bb:ad:51:
db:8e:67:d7:18:ef:3a:b5:07:39:ba:7e:17:e8:86:88:35:76:
74:2f:54:d4:01:01:5c:0f:0b:16:d1:6e:07:28:cf:e7:5c:c4:
9b:08:12:16:10:23:d6:9f:bf:f5:5a:49:8d:0c:84:97:a9:6f:
2a:ab:00:e5:f0:fd:48:b6:45:f7:73:41:b2:5a:47:bc:eb:35:
16:85:75:a8:e7:7e:ab:7c:9c:10:4e:83:b1:9e:f9:6e:2e:3f:
36:b6:68:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:35:58 2026 by rpki-client