Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: iGuRVbvwwHzlHWNUacHNJvgaCEQbb+d+i2Aw1M5akis=
Subject key identifier: 86:99:C1:79:09:D3:20:48:07:A4:12:C3:AD:7D:DF:A4:52:0A:4F:33
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 01A0EDAEFA2221984A4F5DC16EAAE13A8851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0A34
Signing time: Tue 29 Sep 2026 15:01:02 +0000
Manifest this update: Tue 29 Sep 2026 15:01:02 +0000
Manifest next update: Wed 30 Sep 2026 15:01:02 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: ZNXD6qjbEPdwz+OmJM41SfaNOp+ppNPCrb31zMwuw1M=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:ae:fa:22:21:98:4a:4f:5d:c1:6e:aa:e1:3a:88:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Sep 29 15:01:02 2026 GMT
Not After : Sep 30 15:01:02 2026 GMT
Subject: CN=8699c17909d3204807a412c3ad7ddfa4520a4f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:d2:2e:c4:7f:72:e5:9f:a3:b7:26:09:81:
fb:01:10:17:cd:83:8d:02:56:ac:cc:1b:13:b6:ae:
0f:6e:97:13:60:c6:b1:da:c3:17:b9:61:aa:4f:5b:
01:27:e9:b8:1b:aa:44:f4:5e:89:20:3d:2e:11:bd:
c1:db:ac:dc:a7:f2:0c:cd:d1:43:d9:14:9e:be:76:
39:94:a6:0d:77:10:e3:bf:5e:3e:94:ea:68:59:05:
e3:d7:0b:ea:dc:26:33:59:72:25:bc:d8:b6:66:52:
ee:a2:0b:63:85:d3:df:22:38:ff:58:da:9b:f1:02:
17:87:34:8c:31:e6:da:79:df:37:f0:a1:1f:de:78:
4e:b6:bb:d9:27:9b:de:e7:5c:3a:87:77:27:62:6b:
54:b9:c6:9a:74:e5:a5:0a:44:01:a6:fd:48:dc:c1:
0d:00:ba:54:63:37:9a:d3:2b:ca:55:b0:0b:25:6d:
7e:fc:7c:ec:ba:0d:d7:c2:5f:08:17:a2:80:a5:b9:
05:07:65:4b:b3:a0:fc:82:96:1c:ce:19:b9:19:d1:
92:9d:f9:5f:8e:fb:87:b7:ee:ca:c9:1c:3f:80:fc:
e4:69:f4:06:09:3e:0e:10:77:39:e4:fe:5f:39:2a:
a4:46:03:14:f9:83:75:4d:05:3d:7f:5f:84:85:fc:
0d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:C1:79:09:D3:20:48:07:A4:12:C3:AD:7D:DF:A4:52:0A:4F:33
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b5:7a:31:db:41:3f:42:87:90:f7:41:ef:11:ac:ca:31:e3:
68:2b:fb:f0:98:82:84:48:68:a5:f7:ee:4b:cd:dc:f8:fd:e4:
0f:cd:48:eb:64:ed:e4:18:a4:1c:cb:27:37:1e:01:de:2f:dd:
2e:c0:fb:dd:99:f8:08:f0:ff:14:20:78:a4:e1:09:5b:f9:e4:
ba:a5:b1:d1:fe:ce:3d:a9:82:24:10:a1:0c:28:bd:3a:13:86:
03:82:b9:0d:f8:c4:69:42:a8:a7:d6:b6:e1:34:c0:9e:6c:38:
13:77:d2:73:e9:f4:af:b9:87:2c:30:71:2a:86:91:e7:81:99:
b7:7e:64:c3:23:8e:3c:18:b4:10:db:cb:51:d0:81:e2:c5:36:
8d:74:d9:ba:d0:82:96:99:71:f4:94:95:3a:58:c7:69:19:d1:
29:2f:36:1c:5b:6c:e8:fa:c5:43:e3:c1:45:2d:30:ee:c2:71:
8b:0f:68:f6:10:84:22:fd:c7:04:f1:b0:0d:0a:13:2e:d4:78:
5a:d4:45:b7:07:d6:67:dd:ff:85:10:f9:3f:5e:ce:f3:c3:98:
51:41:b5:80:6e:d8:bc:1f:ae:f4:2f:bf:d2:d0:6e:34:db:24:
60:bf:5a:e2:9e:31:95:31:76:6b:56:4f:f1:a5:9f:09:07:1f:
de:90:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:32:38 2026 by rpki-client