Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: jPCyWpNyzpvzavcQ6AtgbZtSm+ToDtavlmZBPd9+8UA=
Subject key identifier: 90:19:A6:FE:C2:86:9D:1D:C1:22:48:7D:2A:96:78:39:74:0D:D3:CC
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 01A0D5DE4507594981382D33B25F58B67E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:48 +0000
Manifest this update: Fri 25 Sep 2026 00:01:48 +0000
Manifest next update: Sat 26 Sep 2026 00:01:48 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: pFNmt56xZ9lRwkyFXodPkd9KWLiSXJtBrkjtPUuwX5A=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:45:07:59:49:81:38:2d:33:b2:5f:58:b6:7e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Sep 25 00:01:48 2026 GMT
Not After : Sep 26 00:01:48 2026 GMT
Subject: CN=9019a6fec2869d1dc122487d2a967839740dd3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:73:27:a9:06:f8:69:dd:88:2a:1b:27:76:
21:a9:47:6b:fe:99:b0:3f:85:c8:e2:05:32:e8:8e:
9f:64:c7:d5:a6:20:0a:57:24:da:95:ac:c6:27:d2:
5b:91:d5:ed:73:e9:a3:29:b7:f3:47:d7:cf:ad:f3:
89:2d:f7:31:77:b0:7b:dd:e2:a7:44:49:f4:f1:d9:
c3:58:03:ff:e0:67:50:d9:0e:4f:0f:7a:fe:6a:cf:
6d:48:78:da:ce:71:6a:31:56:fa:4a:61:cf:c1:39:
1e:85:d1:2e:d4:54:95:fa:e5:76:2a:bb:68:d6:31:
ff:21:01:fa:92:69:95:f3:5a:ea:78:ec:f3:5d:b2:
74:80:82:58:4d:e7:d3:bf:b5:96:a6:b5:48:e4:3a:
e9:ff:c8:5a:65:87:6b:76:4a:fa:2c:8e:99:5d:d5:
c8:c8:22:15:8c:0c:57:28:94:0c:71:2c:39:e5:86:
08:dd:0b:e7:55:ab:9c:1c:2a:7c:68:44:ca:bc:a7:
75:26:bf:4c:32:6a:6c:b4:ea:f9:95:a1:bb:68:d5:
ed:12:f3:f6:bf:db:b1:b0:7c:59:96:1b:10:45:b9:
f7:3c:b3:01:34:e5:62:2e:04:d1:7e:1e:9f:8f:8e:
51:82:1c:66:8c:57:bc:ee:52:8b:04:38:80:1e:b1:
64:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:19:A6:FE:C2:86:9D:1D:C1:22:48:7D:2A:96:78:39:74:0D:D3:CC
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c8:87:b2:68:81:8c:1d:b0:93:2b:44:46:86:c5:a1:92:a0:
7d:86:e0:27:5c:f4:68:bb:3e:68:47:a4:dc:76:5b:7d:64:6b:
8b:da:b0:1c:be:fd:d8:47:c7:bc:f9:bf:f2:42:22:2d:e2:ba:
16:3b:b7:aa:8d:00:ba:34:6e:5f:e3:c2:a6:1c:f0:66:9f:50:
e8:b9:99:69:fb:3c:c5:00:e5:81:c1:a6:9e:74:f2:7d:81:8d:
7a:11:24:01:fa:ef:12:5e:1a:e1:20:e5:66:e0:f6:79:0e:2a:
ee:30:6d:2f:c0:96:7e:42:0b:95:19:15:1c:ed:3f:27:1e:50:
2c:17:46:7f:bc:e4:d5:36:f1:f0:83:a2:d0:cd:3e:5e:a3:d0:
ef:67:50:37:1d:69:b7:e0:7a:09:3a:2a:60:d3:ab:78:cd:58:
45:01:54:5d:77:24:a0:0a:17:8b:6f:35:53:6c:bc:49:76:ed:
ab:12:d5:09:f1:12:4a:14:61:75:73:ca:fa:b0:53:af:2c:50:
97:87:12:4a:3d:7a:46:1c:07:17:2d:ce:6b:39:b2:55:0c:36:
50:bd:f9:ae:0b:24:be:68:d4:d2:c6:7a:3a:70:dc:24:02:e7:
02:d5:3f:93:cf:e0:13:a6:bd:aa:b5:ac:9a:e9:77:ec:57:8d:
8f:90:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:22:24 2026 by rpki-client