Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: yDyJPM9SR1cF3HUMH5sJkCynEFJ8xMge8+L64PRjZQU=
Subject key identifier: B8:5B:CD:7A:FA:46:5C:6E:D6:9E:02:1E:90:40:45:26:30:0E:F2:F5
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A0E13D45ACF3835A3A5061A763169EC530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1A76
Signing time: Sun 27 Sep 2026 05:01:24 +0000
Manifest this update: Sun 27 Sep 2026 05:01:24 +0000
Manifest next update: Mon 28 Sep 2026 05:01:24 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: C8dMe6LWgcmAqKNN3oIbYMuGeIlNuDdO1P35YBj80ao=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:45:ac:f3:83:5a:3a:50:61:a7:63:16:9e:c5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Sep 27 05:01:24 2026 GMT
Not After : Sep 28 05:01:24 2026 GMT
Subject: CN=b85bcd7afa465c6ed69e021e90404526300ef2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:25:d3:27:cd:10:3c:7f:20:e8:15:e6:ac:
04:13:c4:4c:99:39:e2:4b:36:ff:2c:03:03:5e:32:
85:58:d8:c9:b2:80:5c:e7:54:90:f2:a7:25:fb:18:
60:d1:d0:fa:fb:f9:2b:d4:d4:9c:f3:77:10:ef:8f:
11:8e:95:1d:e0:36:be:a2:3f:bf:f3:b0:bf:8b:c4:
7a:27:c3:f3:8f:42:d4:94:7f:36:52:d7:57:85:16:
42:bc:c7:69:c8:68:e1:9f:3d:d0:5a:21:c0:ee:a3:
07:24:8f:de:f1:d7:dd:62:8c:9a:cf:1d:28:7e:97:
1f:eb:42:6e:a7:e7:8f:a5:44:d1:80:38:6d:d7:d2:
db:87:69:36:d7:8c:72:8a:e2:c6:8f:be:45:08:82:
4b:42:c4:40:2a:61:d6:2c:74:91:a8:44:7d:04:48:
e3:aa:a7:a3:47:6c:c2:0e:6d:4c:e7:08:c9:79:ab:
d9:09:88:47:a8:f0:8b:b4:a5:e0:bc:ad:33:1a:1e:
0e:57:31:15:4a:d7:13:fd:b4:0a:23:fe:30:20:c4:
5f:24:cf:2d:31:4c:59:0e:d3:c8:90:70:ac:08:63:
82:12:ba:2a:04:72:21:ba:2b:8a:15:5a:62:9d:51:
61:b4:6a:84:47:9a:24:82:3d:05:8d:f2:cc:f2:09:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5B:CD:7A:FA:46:5C:6E:D6:9E:02:1E:90:40:45:26:30:0E:F2:F5
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b2:27:45:48:ee:60:3d:91:ff:f1:15:bd:3d:0f:a7:f8:e5:
f5:8a:dd:aa:ea:e7:80:f4:41:2f:c1:fb:9f:40:4b:3d:f7:b1:
38:97:ab:cc:15:dc:80:40:5e:25:b3:f9:2f:83:25:2d:06:cb:
51:6a:f1:30:3c:6f:60:90:94:7c:b0:07:73:d7:82:72:59:99:
3a:48:3d:9d:82:b0:e6:6d:20:fb:d1:eb:e6:f5:c2:75:f6:95:
42:b5:ad:15:c3:46:ac:fe:fa:1b:30:af:56:1f:04:63:d6:87:
d3:14:a5:c2:50:15:38:48:40:79:45:76:da:c6:d8:47:c7:55:
49:1a:75:58:65:69:9d:33:62:04:bc:5c:98:a7:51:95:81:ca:
06:c7:46:e0:d4:be:83:7a:a4:51:8c:d4:56:5a:a4:51:7e:70:
28:c4:d8:b8:50:03:9f:72:80:a6:34:96:56:be:dc:8c:30:c4:
98:d2:70:d1:82:0a:f5:76:da:87:1e:62:4b:56:ab:84:5b:c7:
cb:13:62:32:0a:14:d7:73:a4:69:ad:cf:86:da:20:7c:aa:68:
cd:fd:a7:14:f6:1f:b2:7b:68:1b:c2:3e:be:01:47:22:5c:a7:
29:05:2b:b1:ce:f1:b4:66:d2:a2:d0:7c:40:5d:c9:2e:d7:ed:
e2:0a:8e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:53:13 2026 by rpki-client