Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: 5EedJaietRYGarU8S61T8y3ghUqVkdTMRMzffm7QkzM=
Subject key identifier: 3B:69:E2:7C:C8:77:C5:4B:FC:E8:BE:15:50:2C:48:AD:61:3A:7F:6A
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 01A0DBA9807902846446CD5F7532ED417936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:53 +0000
Manifest this update: Sat 26 Sep 2026 03:01:53 +0000
Manifest next update: Sun 27 Sep 2026 03:01:53 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: 5CpbYhFdUWxLeoJwBXMoglTn8TWPKlrI++T740DSgEs=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:80:79:02:84:64:46:cd:5f:75:32:ed:41:79:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Sep 26 03:01:53 2026 GMT
Not After : Sep 27 03:01:53 2026 GMT
Subject: CN=3b69e27cc877c54bfce8be15502c48ad613a7f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:b0:26:16:8c:01:70:05:4c:9b:28:9d:6f:
10:e5:62:9c:4c:3a:35:8b:59:4d:4c:19:65:d4:48:
3e:40:60:2e:74:d0:f9:17:a5:22:b8:ef:7f:87:19:
29:a4:b5:05:b7:1e:f3:10:b9:62:13:24:79:f9:36:
fe:ed:f2:0b:29:b8:4b:f4:29:a3:3b:a7:3b:45:b9:
68:5f:6b:e7:bb:ec:14:70:f1:6f:8d:be:9b:a1:74:
87:37:4e:c2:c9:c3:c7:6b:a8:b1:22:91:f5:ec:a4:
30:45:d9:10:af:d3:c9:0f:97:27:21:a0:c6:82:90:
23:be:2d:78:e6:a5:38:af:b0:5b:c7:dc:5e:b2:73:
29:4a:88:b3:30:61:3c:ec:93:17:a3:a5:19:0b:fa:
1c:25:23:50:9a:c6:6d:3c:fd:83:99:a0:28:1f:c2:
23:b3:81:27:4b:be:b9:38:e7:f3:9f:cb:c2:12:25:
0f:d3:a0:2b:e6:09:c7:f0:4d:2f:22:42:2e:04:27:
7e:da:0e:58:a1:54:c4:56:8f:19:36:a2:49:d5:2d:
79:57:fa:0e:7f:99:eb:0b:51:6f:97:4a:f5:b3:0d:
de:e9:f6:53:ba:f7:34:1e:72:97:eb:cd:79:29:35:
1d:0f:23:2b:46:af:ac:0c:57:d2:c8:2d:3d:66:8b:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:E2:7C:C8:77:C5:4B:FC:E8:BE:15:50:2C:48:AD:61:3A:7F:6A
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cf:e8:c9:65:3b:4c:34:62:4a:98:01:0c:81:21:97:f6:06:
9d:70:72:d7:2e:30:0a:a8:04:ca:3a:8d:12:53:ac:91:d6:34:
f1:7f:e6:4a:55:dd:84:66:50:79:80:95:6e:aa:08:a4:e8:9a:
8e:fc:d8:c4:a0:b3:b6:c7:45:13:e5:7a:a0:ec:a8:1d:04:ac:
5c:c2:a2:de:99:3a:4d:0a:b3:2a:60:a1:6b:47:49:51:12:fa:
25:57:96:91:54:4b:aa:94:fe:5a:64:d1:85:af:44:51:01:93:
2f:03:3e:85:b0:66:71:4e:d6:7b:6f:9f:59:3c:ff:b0:7c:a3:
89:e1:83:43:35:28:b8:aa:9a:4b:67:35:00:be:d6:28:03:c5:
ce:b4:c5:88:bd:67:cd:dd:9e:5e:af:5a:ea:f9:a2:95:b1:40:
20:16:ca:b4:a9:cc:e0:c1:7f:79:db:11:95:ce:30:fc:f8:b4:
01:0e:7d:a9:eb:48:fa:57:be:50:d4:ab:92:52:64:ea:4e:b0:
cf:ca:23:3d:f5:22:f2:48:a4:3e:6c:af:32:87:78:16:ca:cd:
1d:29:f3:d6:c4:18:2d:27:e1:5b:46:aa:d1:c5:29:62:84:48:
3f:a7:d5:3b:f3:84:d1:5a:5e:99:90:a4:45:e8:12:43:2c:89:
1c:8c:3f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:51:32 2026 by rpki-client