Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: erkNslDINwEN/rdhzGu+uyYhGzMGPX0n/IZbVXVTg9o=
Subject key identifier: 52:6F:06:B8:66:A0:F5:0E:C6:F0:4D:42:3B:06:8A:71:DE:9C:8F:40
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 01A0D494062F24F4576A4CF49E3425169FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 18:01:05 +0000
Manifest this update: Thu 24 Sep 2026 18:01:05 +0000
Manifest next update: Fri 25 Sep 2026 18:01:05 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: uZ0RhCUzThpef8GiRGSrA5yzmci1b5q0rexK7B0htuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:06:2f:24:f4:57:6a:4c:f4:9e:34:25:16:9f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Sep 24 18:01:05 2026 GMT
Not After : Sep 25 18:01:05 2026 GMT
Subject: CN=526f06b866a0f50ec6f04d423b068a71de9c8f40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:aa:c0:00:b7:9a:6d:08:89:6b:4b:de:ef:
fd:78:f9:ae:7d:5d:71:cc:2f:02:fe:0b:49:e8:a6:
a3:f3:08:5d:52:a9:99:8b:90:39:34:29:42:e3:64:
f6:22:9b:eb:c0:24:18:eb:7c:1d:3f:fb:42:07:2c:
e7:88:15:48:38:02:a9:a7:be:00:c2:c2:12:f9:3e:
44:a4:89:f8:f2:0f:da:ba:27:74:d7:9c:81:3e:86:
d1:26:ef:ed:cb:86:e8:94:38:13:60:ad:72:f9:fc:
c8:be:fd:a4:29:5e:c0:aa:b2:4f:9a:d3:f0:7c:6d:
3d:da:71:94:d1:8e:3e:dc:fd:c7:bc:80:74:41:c4:
a9:5d:e8:f7:b7:ad:8e:94:0a:c3:0a:0d:d3:d2:fd:
67:57:26:fd:3a:08:a1:aa:02:53:6c:ba:5b:60:e5:
1e:3d:25:38:6d:f2:79:18:23:6e:fc:bb:ab:e0:49:
c6:58:24:ab:35:66:66:63:d8:3b:90:dc:68:4a:69:
01:55:e5:48:e3:7b:d2:d0:ed:0e:66:6b:c0:b9:94:
bb:59:15:34:8f:e2:0e:94:14:47:e2:3f:3b:6e:47:
c2:f7:0b:49:21:0e:63:9f:80:c5:dd:ca:4d:3a:1b:
d1:8a:3b:26:28:09:eb:c1:1f:0c:c1:ba:bb:99:c2:
d1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6F:06:B8:66:A0:F5:0E:C6:F0:4D:42:3B:06:8A:71:DE:9C:8F:40
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:03:79:4c:90:28:1e:a1:f1:ec:e4:3f:87:0d:cb:91:33:14:
9b:92:0f:ec:47:4a:de:aa:20:8d:f4:49:fe:e0:5b:1b:6a:9a:
d6:ad:3f:fd:73:c7:62:78:a8:17:4f:fb:13:90:25:b0:05:da:
c4:b4:a7:c2:87:4c:56:30:1c:96:33:59:2d:75:41:92:b8:f8:
ba:8d:d3:d9:e1:af:c4:04:6f:52:e6:aa:ff:94:2a:34:02:44:
21:4b:59:a1:bf:3e:9d:c9:6c:3c:63:23:f3:44:0f:cf:c5:7b:
7b:59:53:39:db:ed:ff:5f:50:f4:d6:af:57:fc:d2:93:b0:de:
14:20:c1:6e:6f:bc:9c:3b:de:85:29:82:f5:e0:46:cc:f5:9e:
d3:c0:c8:00:3a:a1:68:03:14:d8:81:8f:cd:86:a4:4a:df:6f:
72:ee:e1:8e:3a:44:ee:83:61:46:b3:5b:d9:91:e4:70:76:23:
b1:61:ce:1d:f0:7c:d1:c0:db:ad:59:dd:e1:f7:06:8a:78:53:
bd:9f:55:df:d8:e6:f9:8a:32:0d:cf:44:a7:1b:47:dc:df:ff:
e7:b0:cb:95:8c:bc:a2:32:9c:06:0d:98:03:3e:20:9f:f9:55:
e6:85:d9:a9:56:94:ad:6b:f8:9c:b9:f9:9d:96:64:80:5e:6e:
3b:00:93:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:24 2026 by rpki-client