Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: qUPg4+tlgkpnCJpB7/QtxbDu64+LZ8eJMdBtmPZNw2k=
Subject key identifier: B0:DD:C5:88:01:D0:63:35:1F:49:30:D0:BF:C6:9E:A2:59:FC:91:ED
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 01A0D804AEECF7C34F047CD1258CF419DC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 08CE
Signing time: Fri 25 Sep 2026 10:03:00 +0000
Manifest this update: Fri 25 Sep 2026 10:03:00 +0000
Manifest next update: Sat 26 Sep 2026 10:03:00 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: t1OD+zh6LbKfz0Dw4PPoAWF+QtJQqKZjyEltVaXmHfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:ae:ec:f7:c3:4f:04:7c:d1:25:8c:f4:19:dc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Sep 25 10:03:00 2026 GMT
Not After : Sep 26 10:03:00 2026 GMT
Subject: CN=b0ddc58801d063351f4930d0bfc69ea259fc91ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:00:90:e3:17:fd:5a:5b:21:12:ea:17:fc:
4a:be:0a:f5:6c:3c:03:e4:af:3a:1a:3c:8c:63:20:
e5:ac:43:a9:4f:65:f9:61:94:73:1a:f9:8b:3c:c2:
c9:f7:a8:08:f2:58:12:52:9a:6b:17:29:1c:f5:71:
c6:d6:d8:5a:e4:23:85:1c:45:8a:09:cb:d9:bf:f9:
45:98:f8:8f:ba:00:31:cd:c0:1a:6d:18:a8:11:db:
c0:5f:f2:2e:1e:89:d2:14:dd:9a:01:f2:cc:57:15:
82:0a:0f:80:e3:e9:3e:12:e4:b1:00:a0:41:13:af:
32:e0:ca:cb:64:9a:38:8f:80:2f:3f:02:96:ca:2d:
f0:9e:40:d3:97:c3:9d:a8:82:99:48:86:76:fc:3c:
1d:4d:11:82:03:e0:0f:3d:9f:07:ef:b7:bf:af:08:
ea:ca:c8:f6:64:78:8a:81:a5:0f:26:01:ea:01:5e:
75:d3:c6:08:7b:25:b1:3c:86:b0:12:91:a2:29:01:
1e:dd:c5:d4:42:3b:9c:e6:90:38:fe:c4:ba:15:92:
cd:71:44:6c:d9:09:35:c3:86:35:f0:b1:d5:55:ca:
07:63:c6:08:3f:a2:dd:b2:8d:7e:93:65:48:5a:88:
0e:83:d9:2f:a9:ec:fd:79:c9:46:e8:8c:f7:ff:b0:
a2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DD:C5:88:01:D0:63:35:1F:49:30:D0:BF:C6:9E:A2:59:FC:91:ED
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c6:a2:03:e8:20:f7:7b:b8:96:d2:93:b3:4c:1c:df:50:3c:
cc:4b:b7:47:70:4e:32:fb:e2:a8:04:11:3c:f2:6f:0f:30:32:
fd:84:e1:f2:87:1a:e5:f5:8d:db:d3:56:9a:5a:47:f5:14:24:
74:c8:9c:22:bc:d5:27:ce:47:94:7b:d1:2e:62:fa:71:0b:03:
2d:4d:3a:10:c9:a1:18:0a:d3:b7:d1:3b:2a:ad:86:60:01:88:
af:b5:db:b4:e2:a8:d5:0f:6a:93:0e:0a:10:83:76:cb:bd:b6:
d5:9b:c2:69:2e:d1:dd:c8:c9:d3:d2:25:d4:37:fb:13:4d:cc:
01:06:15:b1:fb:f4:b6:25:74:b5:db:a1:48:e2:ca:6a:b1:bb:
5f:69:7e:e1:30:d9:0b:c4:ae:91:17:04:33:f8:be:8a:d9:08:
8d:8a:a2:74:23:a4:ae:01:4a:7b:e8:15:c5:82:47:b8:f2:5a:
b8:40:52:c0:b0:32:c0:d7:5b:ea:48:8a:bf:71:0c:14:39:be:
c6:c3:2a:d2:89:fa:82:18:af:fb:91:af:f6:24:af:f7:06:ad:
ea:b9:28:55:72:97:31:5c:2e:c6:84:2c:6d:27:e4:13:72:8c:
56:f7:95:ae:f8:b8:f0:61:11:ef:db:06:28:e6:80:1d:94:63:
85:d4:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:27:27 2026 by rpki-client