Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: v1vJG+vxCWFQ1JL00YvltNm1z4oKgq5qbYWkTi03y4M=
Subject key identifier: 22:9D:38:6B:B8:AA:9F:7E:0B:71:CD:E4:45:8B:CB:A3:72:0E:C6:8D
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 01A1DE39CFBFEBBBCA9E6580A4A619460E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 023D
Signing time: Sun 15 Nov 2026 08:01:32 +0000
Manifest this update: Sun 15 Nov 2026 08:01:32 +0000
Manifest next update: Mon 16 Nov 2026 08:01:32 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: iY3q5CLk2hrTiRieTIaP660Kai7Dsg+6Hsv316PO1O8=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:cf:bf:eb:bb:ca:9e:65:80:a4:a6:19:46:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Nov 15 08:01:32 2026 GMT
Not After : Nov 16 08:01:32 2026 GMT
Subject: CN=229d386bb8aa9f7e0b71cde4458bcba3720ec68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:79:07:db:09:18:26:80:96:32:20:b0:84:
3c:36:e1:01:e6:81:b8:92:fa:79:94:89:fe:d0:fa:
8c:f3:7e:da:d0:a1:4e:90:89:31:a7:82:3a:98:27:
bd:e7:3d:0c:80:5b:02:c4:d5:77:03:8a:10:a4:b7:
97:37:1b:e6:27:58:b3:a1:f3:c6:df:08:35:44:83:
8d:5a:9b:5a:6a:3a:9f:cd:9d:86:1e:ea:07:55:5b:
31:90:4a:bd:92:dd:77:dc:2d:58:ab:36:e2:cf:e4:
15:40:ec:db:a1:41:30:a6:22:0e:8d:67:a1:57:a5:
2f:c0:df:d8:b2:24:44:73:af:80:d1:c2:e0:b2:41:
30:85:3c:f6:ab:9c:90:af:be:3e:54:5b:d5:1f:6a:
6d:c7:df:1e:b1:c8:1e:83:1e:c7:d5:95:88:fe:bc:
75:c5:d9:10:d4:e0:ef:72:00:69:8f:c4:b9:3f:f7:
22:70:a6:47:0f:0d:8d:fa:75:2d:9c:33:e6:29:52:
ae:aa:a7:79:c2:c0:66:9d:8d:e1:22:d3:cc:b8:c6:
3b:fd:b0:cc:81:24:10:66:70:7e:b2:9d:de:ed:12:
47:2a:87:dc:0e:46:8c:e8:f5:a5:9a:f1:23:78:55:
98:82:b4:61:97:72:89:59:89:9e:db:9d:20:b2:64:
dd:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:38:6B:B8:AA:9F:7E:0B:71:CD:E4:45:8B:CB:A3:72:0E:C6:8D
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:11:34:80:80:c9:c8:79:76:b1:48:62:9b:52:73:39:97:78:
3a:45:ac:a3:e5:7f:ea:8b:d9:d0:a3:38:ef:20:9e:c2:e1:12:
b4:81:b9:6c:dd:eb:f7:3d:71:d0:85:7a:53:9d:f8:14:cd:18:
e3:b8:54:cf:bb:08:e8:cd:8e:7a:0e:bb:e5:9f:92:65:b4:49:
e6:06:79:5b:0a:8d:23:e6:e3:62:33:6b:69:4c:86:b8:52:12:
80:3a:df:9c:29:77:4d:36:65:1d:87:c7:da:0a:6a:be:74:3a:
69:e0:92:ac:f7:6b:3f:25:45:19:c1:4d:57:60:33:c0:b4:d6:
a9:af:ed:07:03:f7:87:90:fc:1d:2e:eb:67:d0:bf:36:72:0f:
82:5e:8c:f8:7b:9d:49:6c:8c:07:fc:fb:a3:9e:5a:cb:90:f6:
f1:c9:db:ca:a5:21:34:af:fa:bd:c9:a5:0d:11:1c:d4:74:5e:
e8:e9:ae:47:64:08:2d:45:84:1d:ca:d5:a8:bf:99:27:f3:ab:
8f:cd:3a:b9:e0:f9:6d:80:0e:be:73:51:d0:3c:97:d5:f2:66:
c6:51:22:b9:0b:e6:8f:52:fe:c7:06:a7:91:3e:cb:ff:dd:46:
a7:3d:4c:88:8a:54:39:1d:58:ff:94:13:d6:9b:8e:51:4c:a5:
ae:26:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:00:03 2026 by rpki-client