Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft (raw, json)
Hash identifier: joav4bAiF8S0VmnY6BOoNuhsGJZtzi2C5uAzfD1OYqY=
Subject key identifier: 5E:AA:70:30:E3:0F:E8:05:F5:F6:92:9F:F3:52:E0:C7:92:9C:AB:65
Authority key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Certificate issuer: /CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Certificate serial: 01A118D0096FDDCE0B8674567DB3660D617D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
Manifest number: 0B1E
Signing time: Thu 08 Oct 2026 00:00:49 +0000
Manifest this update: Thu 08 Oct 2026 00:00:49 +0000
Manifest next update: Fri 09 Oct 2026 00:00:49 +0000
Files and hashes: 1: U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl (hash: gKr4irDadhJZUiOIxu6z5EaJK9lY4G+TDiEyQWLqOjk=)
2: XcRX1RAJL4NGdzyun1ejeZqAF24.roa (hash: YNAZegeHiWzquonxoxjxpFIiVyp3kn/I+1eygwpZVIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:d0:09:6f:dd:ce:0b:86:74:56:7d:b3:66:0d:61:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Validity
Not Before: Oct 8 00:00:49 2026 GMT
Not After : Oct 9 00:00:49 2026 GMT
Subject: CN=5eaa7030e30fe805f5f6929ff352e0c7929cab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:5f:24:39:44:8e:68:a2:95:32:b8:2c:7d:
af:f9:c4:19:56:dd:14:6a:eb:b3:bf:32:a7:85:c4:
b8:b6:2c:90:97:a1:77:62:b1:2b:a5:41:fd:f2:41:
83:3d:13:4d:62:a2:b8:2e:11:f8:b6:3c:a3:9a:90:
60:58:42:f9:ef:a8:03:f0:1f:a9:b5:6c:9a:ae:4d:
df:17:ee:d6:d1:74:04:20:56:09:bc:dd:78:9e:5b:
e9:59:bb:8f:4b:d5:aa:26:8a:97:41:89:b9:1a:be:
00:6f:b1:8c:78:c1:5b:d6:15:82:53:95:3c:da:bf:
a0:5f:27:bc:59:27:ff:8d:98:fb:21:ab:19:65:8f:
93:69:3c:0a:9a:76:fd:1d:ca:a0:fa:1b:f6:82:35:
e4:59:4b:21:46:f2:1b:a0:06:c9:74:78:64:14:37:
d5:c6:f9:0f:a4:2c:34:c8:80:4a:61:38:8d:cf:98:
01:c6:5a:38:d3:10:1f:a7:73:ce:4e:59:a4:88:b1:
5e:8a:0f:0a:0f:aa:48:3a:e1:3e:89:80:5e:84:60:
39:fc:03:e0:56:64:8a:23:b1:83:26:63:a2:6c:d5:
80:d7:33:f6:e4:12:04:2d:d1:df:5e:ca:93:af:c6:
61:7f:24:f5:d6:8e:da:b5:b8:94:c7:81:5d:78:cb:
1e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AA:70:30:E3:0F:E8:05:F5:F6:92:9F:F3:52:E0:C7:92:9C:AB:65
X509v3 Authority Key Identifier:
keyid:53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:03:8c:a2:96:a4:a4:ff:f2:c4:d9:0f:17:b3:3b:58:85:3a:
9b:9a:f3:b8:70:25:00:83:67:86:1e:d2:b8:d0:b6:0f:f5:9a:
a0:97:b5:8e:ba:e9:66:6f:23:ff:72:bb:a4:b4:8b:0e:51:fe:
97:0e:7c:d0:18:72:39:96:6e:f5:16:17:34:fd:e8:6a:e8:8d:
ab:89:71:14:d6:68:2e:35:36:46:67:0a:9e:b1:6e:ca:99:14:
f4:3a:58:c8:c9:fc:07:41:a6:25:84:bf:94:67:a2:8a:bb:d0:
fc:2b:7a:66:f5:be:11:65:2f:6b:3c:f0:2a:bb:bd:66:01:c7:
ca:67:8e:91:65:ac:8a:d4:45:41:a9:01:5b:36:54:2c:13:81:
c5:59:0b:6d:74:b7:16:a2:65:ed:69:01:56:59:b8:70:a5:37:
b3:f3:43:74:70:39:28:08:d4:d3:00:aa:86:eb:38:50:fa:9a:
21:90:13:0b:8e:03:4f:70:b5:a5:36:6a:6c:c0:fe:18:f7:ea:
8a:b5:4f:d6:a8:d1:65:8f:e0:b5:9b:54:a6:6b:17:10:58:10:
dd:53:86:6a:1c:d8:76:49:40:74:97:a6:b2:4e:30:77:9a:eb:
75:4b:58:20:63:0c:37:23:6b:0b:59:f9:d3:52:9f:4c:33:f2:
21:d8:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:23:21 2026 by rpki-client