Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: 8HgCpXXrIpr1OTQkwVRevZ7Ik0ukgwn9FC8tw+4JxjY=
Subject key identifier: 9E:B6:E2:22:21:1C:58:3C:62:E2:13:11:BD:36:66:45:89:BC:CF:40
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 01A0DCF2B5688F715246CCC75F64497C7513
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 0399
Signing time: Sat 26 Sep 2026 09:01:28 +0000
Manifest this update: Sat 26 Sep 2026 09:01:28 +0000
Manifest next update: Sun 27 Sep 2026 09:01:28 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: Aqc+P6ROQ1rWKwBctWAlgLu+2G7ZZ6m7uGqFwv9kFqM=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:b5:68:8f:71:52:46:cc:c7:5f:64:49:7c:75:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Sep 26 09:01:28 2026 GMT
Not After : Sep 27 09:01:28 2026 GMT
Subject: CN=9eb6e222211c583c62e21311bd36664589bccf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ba:c5:2d:28:bd:d6:54:4c:8d:06:3d:a9:67:
5e:68:26:63:9c:da:ba:6f:a6:ee:ec:90:27:f5:76:
3c:6d:20:e7:c4:d1:c1:78:ed:10:2f:a5:52:51:c7:
93:db:73:04:a7:9f:97:c5:7a:30:d1:6e:5f:94:21:
77:f1:44:af:d8:58:32:45:fd:f2:1d:0d:fe:87:d7:
3d:cd:db:06:61:c8:0a:fd:f0:f4:94:c7:ed:74:04:
ee:07:d4:9f:d7:f1:d6:4f:1d:6f:ff:1e:70:08:0d:
d4:f2:71:5e:b3:87:9c:09:06:74:b7:92:9d:2a:00:
24:4e:cb:1e:7c:6d:35:59:0d:00:20:c6:26:b0:10:
aa:80:dd:c6:14:d8:1a:83:32:f3:5f:f4:4d:cd:80:
c4:b2:eb:4b:b0:ee:61:86:fe:f5:46:58:78:09:bb:
60:f1:80:49:ce:3a:a3:2b:5e:04:ed:60:1c:33:6b:
50:36:9b:27:8a:49:cd:83:b2:e5:e8:2c:05:a8:07:
72:69:ec:38:b8:9f:19:bf:95:ca:78:59:56:64:74:
3f:1d:2a:60:9d:55:0a:c7:2e:05:28:b6:a0:c5:56:
bf:62:eb:4f:9a:61:bb:7e:2c:7c:28:63:1b:ee:c0:
96:ef:bf:df:15:7d:fd:36:bd:17:cb:c0:67:04:45:
f0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B6:E2:22:21:1C:58:3C:62:E2:13:11:BD:36:66:45:89:BC:CF:40
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:4f:e8:9e:25:ee:85:28:cc:08:85:af:b6:1e:84:11:7e:
f8:8b:f2:89:ea:85:8b:39:62:06:ed:a9:c8:05:3e:49:f8:b6:
8b:17:93:2c:39:b2:56:54:69:b4:b3:7e:7a:a3:c8:4f:27:bd:
40:74:78:92:14:ba:02:29:be:d9:63:b8:6b:19:7f:1b:cd:d4:
16:ed:45:fd:3b:2b:ef:af:be:60:3f:85:d1:d7:36:ca:a7:bc:
c7:f3:a9:ae:40:a2:c0:54:d9:31:63:4a:eb:15:ae:a9:05:e1:
1a:d9:f3:83:ea:08:5d:51:73:f8:ce:b7:f8:b5:a6:4f:01:db:
97:c0:e8:81:a0:37:5c:e8:98:4f:da:9e:72:94:a8:2c:2b:9d:
fc:1a:c8:d4:49:00:d3:60:46:1d:5d:b3:8b:22:75:61:ba:e2:
c3:e8:33:38:cd:73:6e:7f:97:b4:07:2e:42:5e:03:e5:74:0c:
66:51:3b:e3:8e:52:5c:fc:81:a6:af:8e:d2:bc:b3:7c:95:ef:
96:f4:b7:a7:52:1b:22:b5:97:2a:ee:43:17:62:56:d8:8a:5e:
83:9e:93:92:78:b7:ec:40:a4:8e:af:49:f5:93:fa:83:6e:78:
9d:5d:77:e9:1d:54:fb:d8:f5:d9:bf:57:06:8a:bd:11:6a:54:
36:53:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:55 2026 by rpki-client