Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: vSnKVRDxCtG39+WSzLUJRohMB4polJt5AxZR1cHe74k=
Subject key identifier: 05:A5:57:26:87:46:F3:87:B8:7D:3D:60:5E:6F:05:36:B6:7B:4A:0F
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 01A0D3B8D14C78B98D45ECA0865043B281FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 12CE
Signing time: Thu 24 Sep 2026 14:01:39 +0000
Manifest this update: Thu 24 Sep 2026 14:01:39 +0000
Manifest next update: Fri 25 Sep 2026 14:01:39 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: z2g/P9+Gg+N2TFuujy2zzinStJzHlOBuvbUMqmAMQ3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:d1:4c:78:b9:8d:45:ec:a0:86:50:43:b2:81:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Sep 24 14:01:39 2026 GMT
Not After : Sep 25 14:01:39 2026 GMT
Subject: CN=05a557268746f387b87d3d605e6f0536b67b4a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:8a:ef:27:a8:24:30:e2:8e:e5:45:76:0c:
90:c0:50:e7:d4:01:69:60:24:04:65:06:2b:36:7e:
70:f9:28:a2:ba:af:0b:dd:b1:c4:17:dc:c2:1b:42:
92:26:62:f9:64:4c:9a:f6:8a:eb:f1:5d:cc:e0:a1:
0d:38:35:ef:54:26:50:df:46:94:46:bb:05:93:0f:
76:a5:83:36:ec:0f:a4:45:97:ab:d7:4a:15:6d:ea:
b9:cf:e2:71:29:cf:89:be:c9:f3:01:aa:49:f0:eb:
04:a9:fa:ab:ae:e9:af:0e:d0:12:6d:86:71:3e:1d:
68:22:62:39:68:a4:73:4d:9d:bf:7f:ea:21:da:8d:
3e:47:37:bc:86:49:41:40:74:eb:c1:9f:9c:48:86:
0e:8e:99:99:0a:9c:b9:2c:d3:2d:80:33:24:93:b5:
60:d8:55:33:06:d4:00:10:95:62:f4:fd:05:c4:bd:
f7:83:9d:02:c6:7d:e6:43:bc:80:3f:e9:4f:3a:d5:
b2:e5:e6:6b:89:42:1b:f3:e4:dc:0c:90:7b:06:2a:
81:88:2f:30:ea:e9:26:87:08:6a:33:96:3f:77:68:
9e:ca:9d:b9:6d:cb:ec:df:63:8b:d4:c9:5a:85:a5:
f4:54:91:6a:b5:56:e9:76:1e:06:12:ff:b2:53:ca:
8b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A5:57:26:87:46:F3:87:B8:7D:3D:60:5E:6F:05:36:B6:7B:4A:0F
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:83:48:6e:4e:5a:63:a9:fb:ac:63:c8:31:91:8c:a8:d4:ff:
c8:f6:63:84:ba:9e:a8:e5:b6:3e:05:5d:22:d7:c0:82:30:0b:
28:d4:97:17:a2:74:56:d7:a7:20:4b:5d:79:9c:7b:ac:ad:5a:
60:c7:f7:b9:fa:8e:47:9a:cd:27:df:30:5f:45:86:3c:f4:0e:
ae:e9:61:b7:4f:e9:99:9e:05:d5:f4:68:79:69:b0:9d:af:04:
5a:e0:6c:08:8f:51:9c:fe:1a:92:9a:99:27:47:6a:8a:ac:ad:
c3:cc:39:89:e0:52:45:5c:cc:7b:ff:f1:77:41:ab:0b:b6:ff:
ea:07:c6:de:c9:b1:b9:8c:aa:4a:0e:da:bc:9c:9a:3f:19:0b:
f5:2b:ba:de:b2:4b:8b:04:8b:44:36:dd:24:63:74:31:5d:58:
5e:65:52:f2:da:cb:f3:fa:1b:30:65:08:b1:0e:89:41:8e:21:
62:93:b0:1d:4c:10:d3:0d:7b:8b:e3:fe:7a:3e:1a:ad:01:0c:
1f:7e:26:8d:03:c0:97:57:9e:eb:c7:77:51:cf:31:d8:23:47:
7f:f3:5b:f3:1b:2d:92:bf:a9:f0:57:bf:fa:f1:c0:24:91:24:
47:64:37:9f:2f:98:83:ac:10:f9:9a:11:93:35:82:bf:df:bd:
d2:1f:be:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:38:01 2026 by rpki-client