Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: N0kfovVUkK+apTj5YfpcV1aEb6fwUykqYUITuW781W4=
Subject key identifier: A7:31:BF:D1:AC:65:24:EE:7B:0C:3D:E0:C4:83:65:8F:7D:8A:D0:2C
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 01A1DE39E6D0A4D71300B9465716BFC86A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 08:01:38 +0000
Manifest this update: Sun 15 Nov 2026 08:01:38 +0000
Manifest next update: Mon 16 Nov 2026 08:01:38 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: nhltEZcO0tRGNaxylmjh1GoJP3lBLskXK18EDy+7Rj8=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:e6:d0:a4:d7:13:00:b9:46:57:16:bf:c8:6a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Nov 15 08:01:38 2026 GMT
Not After : Nov 16 08:01:38 2026 GMT
Subject: CN=a731bfd1ac6524ee7b0c3de0c483658f7d8ad02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:f1:82:7d:0d:05:31:47:64:7f:8f:3a:7a:
b6:23:3c:c1:ef:49:f8:c0:03:ab:00:4d:fc:a4:22:
79:c2:d3:e6:23:01:15:90:fb:62:01:4b:6e:8b:80:
ca:0b:35:16:aa:e7:af:67:fe:89:aa:af:af:36:2e:
9e:56:60:e7:a3:42:ab:8f:d9:47:4e:f5:b4:b1:5d:
1d:3c:a3:d4:36:62:49:77:d2:c5:b1:d0:a8:46:cd:
77:fc:f3:e8:b7:b3:9b:ce:32:ae:46:62:68:b7:40:
fd:ed:ea:e0:c5:23:17:e9:8e:0e:c2:22:e8:37:48:
fd:32:b0:8a:41:e8:28:9c:ef:c9:87:e3:0c:57:17:
38:cf:e6:50:90:aa:b7:8c:ca:0d:e8:41:d7:e8:c8:
e2:6f:43:4b:ea:c1:c4:11:d3:69:fb:06:13:af:df:
97:1b:8c:4f:19:85:e1:d5:7b:ac:cd:07:67:7b:c3:
a6:23:f6:a7:14:1b:3e:96:96:85:83:3b:2a:45:0c:
ad:5e:79:98:16:1d:d6:75:9e:4c:5c:f0:21:83:08:
fe:15:1d:c4:e2:79:e3:4d:a3:e2:b9:e5:64:24:d9:
d1:b4:45:06:8d:2a:47:f3:d6:69:f7:48:54:89:bb:
40:61:40:e1:a0:8e:9a:92:1c:13:6f:4a:b2:fa:81:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:BF:D1:AC:65:24:EE:7B:0C:3D:E0:C4:83:65:8F:7D:8A:D0:2C
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5a:d4:23:71:a7:b5:b2:51:a6:41:24:10:d2:75:bb:76:19:
83:56:45:0e:86:12:88:54:90:4a:e3:78:e4:05:00:8c:3b:1a:
ff:2c:7e:b9:c1:a5:e0:22:de:35:7c:33:c3:ba:dd:ec:be:a4:
6a:65:6d:28:79:81:d8:6d:38:a8:cb:92:96:21:52:86:b1:ab:
19:e0:ae:f3:75:0c:74:b1:6b:59:6d:d4:58:e4:91:f0:a2:b0:
67:d2:bc:75:3e:34:35:06:2a:34:53:91:2a:53:1c:8f:ef:a5:
7e:58:b5:d8:c5:f9:3e:ba:9e:80:61:fe:54:4c:57:45:fa:69:
c9:61:4b:d9:a4:80:03:7b:35:1c:95:2f:ed:24:8c:84:2d:56:
5c:4f:45:05:69:71:02:e3:80:ef:c1:3b:ab:e0:65:ef:a4:64:
a6:ab:91:70:56:d6:f2:56:e7:99:98:ee:f9:ed:d3:15:b2:f2:
6d:2b:f7:66:89:08:61:17:cc:f7:5a:c3:e5:a0:e8:27:c7:bc:
fc:fb:d6:08:de:4a:e3:a1:f0:fe:c4:86:b9:af:e1:b6:76:64:
a1:ca:35:ed:c3:55:e3:4b:df:35:29:1a:88:1c:99:ff:4d:49:
7c:7a:c2:ca:05:d3:f9:5a:ba:39:79:0a:d2:a1:d1:d7:1d:e8:
68:bc:56:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:59 2026 by rpki-client