Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
File: U9To6fSiMLDlaFh2X3EwrNNOni0.mft (raw, json)
Hash identifier: DzsoRCi+8hy+aybXEgTh1cf+5+fuKxXzoKAsCUpuYXE=
Subject key identifier: FD:99:26:5B:4E:61:35:09:9A:2A:6E:71:C7:C4:25:D5:C3:FF:C7:9D
Authority key identifier: 53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
Certificate issuer: /CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Certificate serial: 01A0EE1D232D837FB4F183B5406ABAAD9141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
Manifest number: 0268
Signing time: Tue 29 Sep 2026 17:01:21 +0000
Manifest this update: Tue 29 Sep 2026 17:01:21 +0000
Manifest next update: Wed 30 Sep 2026 17:01:21 +0000
Files and hashes: 1: KstXJBTU9_95RgYAGgk0ocTiAAk.asa (hash: 1aWyFNHfdiDQ+9mjEacvi8VKbddcwrT5VsWI5r5oY/w=)
2: O860BZXE4oCrVhgqCDhjxlkYiZY.roa (hash: WAAeKTz5adCSs3a4JZFRxzoY1WO2G1GDA+qRkP/2UHM=)
3: U9To6fSiMLDlaFh2X3EwrNNOni0.crl (hash: cwmoOYRu/L79CxBuseikLKCpr/t3Gt1mEuq4htW3ypU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:1d:23:2d:83:7f:b4:f1:83:b5:40:6a:ba:ad:91:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d4e8e9f4a230b0e56858765f7130acd34e9e2d
Validity
Not Before: Sep 29 17:01:21 2026 GMT
Not After : Sep 30 17:01:21 2026 GMT
Subject: CN=fd99265b4e6135099a2a6e71c7c425d5c3ffc79d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:33:64:71:6c:5a:5b:e3:c8:b5:de:f3:51:1d:
19:e8:22:59:3e:41:38:71:a7:8d:6d:e8:67:9c:c8:
c1:02:e9:b7:30:b4:90:7b:37:42:8c:65:1c:8d:46:
27:60:83:2c:91:52:dd:62:1e:1a:37:1a:59:9d:50:
e4:9d:23:da:93:f1:03:54:c4:c4:3a:76:51:1c:60:
3d:d3:f2:f6:d5:6c:6a:c6:01:2f:34:98:b5:49:38:
92:b2:f9:f1:86:2f:17:bd:e1:32:70:c9:45:6e:8e:
a8:67:ca:53:43:ce:d4:40:aa:1c:7e:ef:28:ab:62:
d2:01:64:df:cc:f4:d4:f7:b7:e1:0b:cf:9c:39:0b:
93:2f:89:a2:66:15:bb:e3:2d:ae:23:c5:d0:21:a1:
71:52:7c:de:d9:93:53:d6:9c:52:eb:5f:98:fe:f0:
12:90:ed:7a:80:c6:32:c8:c8:21:40:a6:38:9f:dd:
23:45:5d:b9:e2:3c:6f:7f:46:8f:2c:45:c1:f3:df:
6c:f7:6d:1f:8f:36:47:06:22:7a:f9:49:d8:4b:d3:
9b:75:8a:93:b5:5d:0b:10:31:17:e4:fc:d2:f2:34:
1f:67:56:03:b7:df:9b:0c:fd:cc:01:6d:93:36:4b:
c9:04:53:78:35:a2:4d:84:9c:ba:35:8a:00:e1:a2:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:26:5B:4E:61:35:09:9A:2A:6E:71:C7:C4:25:D5:C3:FF:C7:9D
X509v3 Authority Key Identifier:
keyid:53:D4:E8:E9:F4:A2:30:B0:E5:68:58:76:5F:71:30:AC:D3:4E:9E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9To6fSiMLDlaFh2X3EwrNNOni0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/9a5324-4659-4aa3-a3d1-166124c0c545/1/U9To6fSiMLDlaFh2X3EwrNNOni0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e8:57:25:f1:f6:1f:3f:16:61:69:28:1b:cc:67:1f:ed:68:
b8:bb:d6:b3:29:69:69:52:c5:8d:ab:ca:43:88:73:07:9c:4b:
2f:04:42:57:d4:ca:b7:c4:b7:41:f2:e9:7a:37:fe:98:5e:e9:
20:18:40:b6:9e:a1:2f:e2:54:77:21:5f:35:bd:8a:1c:76:fa:
36:14:b3:5e:d8:ed:07:39:37:f0:a7:64:9f:da:58:8f:b4:bc:
05:ff:64:3b:ca:2f:3a:67:5c:5f:14:cd:2f:f7:6f:93:37:e5:
e4:73:a9:d5:06:11:ea:22:22:8e:42:04:f6:c6:f9:f0:08:99:
5c:5f:9d:16:2e:20:fc:87:5e:db:e6:6f:b9:bf:f9:1b:79:cf:
04:09:6e:7b:55:cb:0e:5e:cc:1b:fe:8a:7c:5f:b9:38:5b:5d:
f2:2a:c9:cd:b3:ae:c2:3f:f6:c3:01:fb:11:63:f6:41:d9:68:
4e:12:4e:1f:71:40:dd:a0:7b:e4:98:e7:aa:c2:96:e9:f4:a6:
bb:51:a7:c3:25:b4:ec:1e:73:21:ac:b3:a1:49:eb:98:1e:36:
ba:fa:04:59:b8:8a:e3:28:f8:3e:23:33:d1:27:f8:e3:1d:b0:
ac:f5:3e:c8:13:9d:4c:44:cc:50:74:73:46:0d:23:0c:ab:bb:
db:72:39:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 02:01:29 2026 by rpki-client