Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: ahDuU0S9w7wNavTXkosYeYnSRuSGau+Q9hpui5iYEJ8=
Subject key identifier: AC:05:3E:D6:E7:91:4F:24:4E:94:AC:E8:6F:52:59:35:4E:F3:23:6A
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 01A0E777D6F5632B8189FA25CECDA8142E3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 09C3
Signing time: Mon 28 Sep 2026 10:03:05 +0000
Manifest this update: Mon 28 Sep 2026 10:03:05 +0000
Manifest next update: Tue 29 Sep 2026 10:03:05 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: iQl9yIuP5EN2SRbJRkb+3YU/0CGmUPsC9YieWlv/xUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:03:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:d6:f5:63:2b:81:89:fa:25:ce:cd:a8:14:2e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Sep 28 10:03:05 2026 GMT
Not After : Sep 29 10:03:05 2026 GMT
Subject: CN=ac053ed6e7914f244e94ace86f5259354ef3236a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:0f:25:a3:b0:aa:35:75:2e:5e:0a:f3:c7:
a9:5d:97:e9:67:bd:06:08:86:85:c7:d4:59:54:b0:
27:f4:92:7b:7b:5d:e3:36:62:85:fb:4a:c5:e8:8d:
5d:fc:58:5f:a6:cf:ee:95:2c:9d:36:3c:61:d0:2e:
3b:1e:9a:a1:b6:ab:1c:f2:29:a2:2e:cb:ff:07:0a:
e7:73:f1:82:df:35:53:0b:50:3f:be:6b:c9:0c:c5:
37:16:67:e1:be:47:3c:d5:d2:b8:b8:fd:9c:f6:00:
02:81:98:1c:8c:0f:2a:9b:a5:fd:95:43:58:1f:b2:
18:83:21:6a:2e:a9:b2:a9:64:2a:c1:e8:f0:8a:6c:
d6:7c:5e:eb:0b:ef:46:49:41:39:1f:87:73:57:27:
0f:29:1a:30:25:13:68:44:61:c9:88:2e:89:f7:ff:
50:19:f2:fb:9a:7f:ee:29:41:db:5b:35:bc:b3:55:
95:0f:25:94:4f:02:fa:7b:bc:c6:e5:30:15:cf:5b:
0b:66:6f:9a:da:01:15:ff:9f:16:31:25:58:14:06:
92:44:b3:c3:9e:92:a2:57:04:d0:b8:fb:92:ad:60:
44:26:87:ac:c8:b2:41:9d:24:01:6c:da:96:cc:34:
cf:2c:8d:18:e3:fa:63:7e:bb:13:3b:6c:3a:00:ad:
fc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:3E:D6:E7:91:4F:24:4E:94:AC:E8:6F:52:59:35:4E:F3:23:6A
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9e:07:0b:b6:99:7a:bb:52:fd:8e:9e:9a:7c:d0:3b:87:93:
49:91:61:cf:ec:6e:bb:19:bd:af:10:00:e8:35:ec:68:fa:6e:
ed:30:ad:23:2c:7f:58:ae:b1:a3:91:55:aa:5f:51:60:80:bf:
60:48:b1:71:a6:ea:49:af:d7:bf:8e:e7:c2:7d:2e:f9:b2:8e:
46:d1:9c:9c:93:9e:97:50:9c:6b:1b:5f:fa:ca:8d:a3:8c:cc:
03:75:10:da:a7:fc:c7:0d:24:8e:d4:7f:02:c4:d8:8e:85:ac:
eb:e9:b3:eb:b0:b0:59:d1:ba:42:cd:3e:46:4d:3d:6a:c9:ee:
ae:e0:e2:c1:1f:b7:90:87:ea:46:d2:b3:99:a9:ac:51:45:55:
02:e5:0c:7b:83:58:5a:a7:f5:5c:28:91:ba:e9:19:b2:91:51:
e7:cd:12:d0:8e:c0:31:fd:03:be:33:bd:5a:7c:3f:a3:43:77:
d7:39:1f:80:e6:4b:01:ce:73:d0:45:15:90:7c:2b:3d:2d:6b:
68:45:5e:c7:76:cc:3c:d0:dc:0b:92:87:05:5d:74:6b:df:9f:
e5:fb:db:da:13:e4:bf:6a:4c:34:97:19:bb:e3:e5:d0:81:56:
c2:6d:60:da:a6:87:fa:48:f2:a0:47:54:b9:10:17:fc:e6:fe:
6d:aa:00:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:54:54 2026 by rpki-client