Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
File: UzYQcXlxVgncpCK8B6CYRoxSlFI.mft (raw, json)
Hash identifier: q/km3jbPkjwTF+QdSEijFYEI4Ski76mWqXM8EVdUUtM=
Subject key identifier: 40:EB:63:DC:5F:87:C5:B4:92:0F:C5:B5:6F:3E:D6:C2:98:00:B1:B0
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 01A0F6B244E4965252FADF6EEE1EF13945C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
Manifest number: 1A8F
Signing time: Thu 01 Oct 2026 09:01:13 +0000
Manifest this update: Thu 01 Oct 2026 09:01:13 +0000
Manifest next update: Fri 02 Oct 2026 09:01:13 +0000
Files and hashes: 1: 37nBPcU451HQlUl0uacWDYQGvA8.roa (hash: TDhIz0QGXINJqgJRTB4Yk7ckzNjSTwoBFWF/TjcxIyc=)
2: UzYQcXlxVgncpCK8B6CYRoxSlFI.crl (hash: hLYjY65eBBfa7rGRS/LpuADzjG+qL+8TsYB6W7gjUlg=)
3: ejQtF-IJAcPUsJm2Grb30Iqg1lM.roa (hash: PAnCTRg2QzsK95CrphYN3Z21jLVwZm4bozxHdK4npEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:44:e4:96:52:52:fa:df:6e:ee:1e:f1:39:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Oct 1 09:01:13 2026 GMT
Not After : Oct 2 09:01:13 2026 GMT
Subject: CN=40eb63dc5f87c5b4920fc5b56f3ed6c29800b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0b:33:4b:6b:d7:68:42:02:7d:7a:4b:f9:ba:
f1:84:36:8e:3c:80:03:8a:4d:10:ca:f3:82:15:73:
1b:b9:1a:91:a9:33:fc:8d:1e:81:be:d3:f1:8a:0e:
6d:9b:07:08:46:2b:fe:6c:d1:ea:ba:1b:dd:14:f6:
bc:a8:82:27:9e:24:f3:b3:51:e7:91:82:b3:d2:78:
8b:e4:9a:14:e9:e2:67:3d:d9:5b:03:9d:0e:e9:bb:
5f:7c:28:4e:79:25:19:a6:21:10:e4:ed:14:84:fc:
50:eb:c2:18:76:71:0f:b4:9f:4e:9a:27:92:2a:c2:
01:4f:03:23:c1:64:69:c1:4b:37:44:d1:fa:04:09:
5a:ea:49:f7:25:7a:6e:6a:d1:8f:33:43:8e:05:e4:
79:2d:3a:7f:95:0a:d4:3d:1a:b3:d9:a7:91:ca:0a:
6d:24:a3:94:ce:28:b0:c4:08:a6:d9:d7:f1:6e:89:
c1:a2:20:b4:ae:00:27:83:df:26:7a:56:e8:61:73:
31:22:5b:f3:b4:1d:14:4f:9b:b8:3c:3c:a4:f2:01:
8e:89:3a:14:d4:e3:df:5a:34:c4:ed:d7:9e:49:6b:
ad:cf:f3:8e:7a:c0:5b:9a:71:4d:c9:91:93:dd:5f:
b9:e6:c7:58:90:54:50:13:58:0f:61:e3:e3:7a:38:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EB:63:DC:5F:87:C5:B4:92:0F:C5:B5:6F:3E:D6:C2:98:00:B1:B0
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8e:7e:bf:c6:de:e4:92:6f:94:9b:eb:b5:13:01:62:95:97:
f1:09:b6:6e:ca:12:54:0d:36:34:17:cc:a2:8b:dc:73:60:58:
3a:8e:83:8e:4c:6f:6e:e0:ee:85:c1:ae:6c:94:df:3b:46:4f:
e2:7d:d3:85:1a:13:37:ee:d2:36:ad:cb:5b:a0:ab:24:4d:6b:
1d:d4:3a:bc:e6:ad:a5:ef:2f:52:e2:ae:44:6f:98:5c:91:4f:
a2:c5:79:ff:91:64:09:65:2c:84:bc:1e:6d:dc:3f:e6:1a:4e:
be:24:64:08:d6:7c:4b:70:9b:cf:7f:4c:20:40:d0:bc:51:f1:
be:6c:23:0f:46:a3:ff:d7:47:3a:70:e4:3a:15:f8:1a:85:52:
ad:4d:bb:33:b9:7d:88:0e:35:d8:aa:84:49:b1:3b:17:ec:78:
3f:73:c3:0b:93:bb:c6:2c:5d:78:8a:a4:f9:9a:65:67:28:a4:
74:75:de:72:f5:bb:cd:f2:98:60:7e:1b:ad:7d:65:ab:79:8e:
50:b2:59:bf:ba:ff:b8:66:92:48:40:46:1f:0a:f7:50:67:5a:
71:6e:bc:9c:36:db:9b:f2:82:8e:95:c5:bf:89:52:a3:83:85:
22:ca:67:85:05:88:45:d0:ce:ed:b5:7b:55:de:a0:3c:a1:78:
e0:75:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:44:45 2026 by rpki-client