Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
File: U0phq7_QFizvAP9DEIp63y5Bf2M.mft (raw, json)
Hash identifier: 2nBU27dl+EByAwZSxH1Qw6hESM8nw1NbtX8Q3y9LHCI=
Subject key identifier: D5:A9:1F:AA:7D:89:0D:E8:CB:AE:47:0B:98:6C:70:1D:5E:FD:4B:35
Authority key identifier: 53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
Certificate issuer: /CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Certificate serial: 01A10BF0619ACAA1AB4EFBEE4B8188F93A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
Manifest number: 01AF
Signing time: Mon 05 Oct 2026 12:01:05 +0000
Manifest this update: Mon 05 Oct 2026 12:01:05 +0000
Manifest next update: Tue 06 Oct 2026 12:01:05 +0000
Files and hashes: 1: HZLY9WI4GIXtiYWfo4yHEoYT1XM.roa (hash: T+Ay/vI5FtgSJpMrAE1oWUA6OzWQjny9x3es6X3cTlg=)
2: U0phq7_QFizvAP9DEIp63y5Bf2M.crl (hash: YXvlMBU7ozjdO67vkkXXZX2o6B61bqfq6sM+dbWAXrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:61:9a:ca:a1:ab:4e:fb:ee:4b:81:88:f9:3a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534a61abbfd0162cef00ff43108a7adf2e417f63
Validity
Not Before: Oct 5 12:01:05 2026 GMT
Not After : Oct 6 12:01:05 2026 GMT
Subject: CN=d5a91faa7d890de8cbae470b986c701d5efd4b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:96:75:f9:ff:ff:07:c9:f9:5d:9a:ee:0e:c2:
64:d7:ed:0c:b7:c8:73:18:5c:c0:b0:37:5d:02:2b:
bc:51:25:a1:e1:1a:99:28:a6:ad:4e:50:c8:32:23:
84:a6:37:10:ef:9b:4a:f6:ff:b2:71:7b:6a:9c:71:
90:e7:15:11:6c:de:bd:9b:5a:b0:ce:ee:f0:87:b3:
e9:16:33:f7:e9:b7:2d:cd:22:45:79:7e:f9:52:fc:
5d:19:6c:d9:68:b4:1e:f1:7e:34:d8:1a:f7:aa:e0:
fd:87:5d:64:05:03:fa:6f:7f:c4:a9:c4:b9:77:af:
6b:53:31:ee:7f:51:d0:74:16:9f:34:ef:2d:68:49:
5e:66:55:a0:b2:d3:34:88:bc:15:0e:76:30:78:bd:
b7:59:de:bd:75:9c:1c:c6:3c:0a:83:f9:e8:de:20:
49:7c:3f:aa:db:6f:32:95:fc:8e:a3:95:c3:8d:43:
07:a1:df:b0:f3:22:9b:54:cf:6f:4c:f8:42:a8:fd:
41:36:7a:d1:ce:d3:1d:77:60:a6:27:1d:03:c1:5e:
f9:5c:4b:09:9b:7a:4d:e7:14:2d:0f:e0:19:c6:6a:
40:4d:9a:90:31:61:97:e5:bd:a0:27:57:2d:24:90:
39:41:3e:b7:fe:3a:b5:48:52:60:cf:54:30:9b:c3:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A9:1F:AA:7D:89:0D:E8:CB:AE:47:0B:98:6C:70:1D:5E:FD:4B:35
X509v3 Authority Key Identifier:
keyid:53:4A:61:AB:BF:D0:16:2C:EF:00:FF:43:10:8A:7A:DF:2E:41:7F:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0phq7_QFizvAP9DEIp63y5Bf2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a96c09-6123-4849-9ad7-b5cc4fd7a0d7/1/U0phq7_QFizvAP9DEIp63y5Bf2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d3:74:43:c3:6f:e5:7f:ef:48:db:c3:4b:54:72:02:84:b3:
b2:74:0e:78:b3:5f:83:68:c8:8d:e0:a1:c6:e4:ec:8b:c9:c1:
51:24:6c:17:f3:46:58:2f:be:c7:b9:a0:87:d4:56:6b:7e:e1:
eb:17:b5:ee:78:54:45:a6:0a:51:37:d2:dc:f3:b6:da:38:48:
db:89:b3:9f:86:f1:96:7a:8d:3f:16:37:f3:5b:56:50:08:4f:
7c:84:f6:6b:bb:f6:f8:51:80:a2:26:ae:cb:29:7c:e9:a2:c6:
1f:80:7b:e1:1a:54:df:89:1c:89:45:5b:11:1f:39:56:99:2f:
ac:33:b7:ce:b9:76:a8:6b:27:71:83:3e:49:0b:68:05:58:a0:
4a:15:ce:7f:39:1f:50:86:9a:48:c5:5b:33:27:63:31:b2:8c:
cd:a5:10:5e:7b:59:d2:77:43:0b:98:aa:16:e3:36:b6:34:f8:
49:46:43:a0:75:ac:31:56:23:6f:55:29:90:ab:ab:1a:3e:2b:
ff:67:72:67:1d:64:42:5b:f8:82:ab:9d:85:a5:3c:f0:a6:c3:
40:5f:b4:58:d6:84:7a:87:a2:72:cb:de:13:32:b5:1f:80:2c:
88:10:fa:f1:0c:f4:3d:f7:44:87:8c:c9:c2:f7:0b:a3:dc:60:
31:8a:22:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:53:33 2026 by rpki-client