Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: tGWmNepJWT8MejFJyCmmaBpqHsJ6Yd+3UbLlySSnjY8=
Subject key identifier: 37:AB:FB:37:FC:0D:CD:4B:67:47:38:B4:7D:FA:08:D0:B1:7F:C3:E8
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 01A0D804B0D8D0454695397F30992F312E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 0B1E
Signing time: Fri 25 Sep 2026 10:03:00 +0000
Manifest this update: Fri 25 Sep 2026 10:03:00 +0000
Manifest next update: Sat 26 Sep 2026 10:03:00 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: eK04P9r7j3sKaLbFUT2X21WtR7/Fns46e6ZoAhbEtPA=)
2: r2FzkDk8bJYrPqzaqgtlaBonfqk.roa (hash: f1HN7BXYId6gEL/AZojIIht1vxFDri+lbHrSLek1YkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:b0:d8:d0:45:46:95:39:7f:30:99:2f:31:2e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Sep 25 10:03:00 2026 GMT
Not After : Sep 26 10:03:00 2026 GMT
Subject: CN=37abfb37fc0dcd4b674738b47dfa08d0b17fc3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ec:58:3f:74:5c:ca:d4:ce:24:b8:88:d9:eb:
36:4e:33:21:8a:d7:0a:f7:31:65:e8:e9:9f:e3:e3:
08:90:d9:c5:d5:85:5f:16:e3:df:04:7a:18:d1:72:
50:bc:fc:06:4a:a5:df:a2:25:17:9c:8f:a9:e4:71:
32:a4:02:08:aa:5d:61:ab:16:b6:39:9f:b1:1d:67:
fc:ac:c3:b2:3b:d6:95:a7:b7:d3:5d:bb:c7:02:7b:
22:d3:c4:8f:7c:f3:ae:6b:f8:6e:77:79:24:51:fc:
8c:e2:ca:df:a1:6f:a1:4f:37:8a:1f:90:26:de:e6:
03:fc:24:3a:c1:6b:88:fa:b4:41:75:df:11:2e:2d:
65:83:87:9a:96:a6:80:4c:67:54:92:4e:4d:e0:78:
6a:96:7f:1e:48:3b:0c:31:7d:21:88:7f:cc:5c:55:
a1:c5:86:98:e8:bf:69:2b:85:14:a4:27:f8:2b:0e:
5f:23:6c:8e:45:0b:55:69:cd:7f:bb:19:cd:02:f0:
2e:2f:00:92:ad:f1:5b:f0:f4:32:e0:1b:f6:0c:f5:
0a:fe:16:ac:66:92:63:8e:cf:7b:04:d2:8f:8f:ab:
51:c4:89:4a:95:fa:43:0a:f2:bd:14:d4:89:da:43:
34:94:35:48:68:8a:c9:b6:29:fc:08:e4:b2:fd:35:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AB:FB:37:FC:0D:CD:4B:67:47:38:B4:7D:FA:08:D0:B1:7F:C3:E8
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:0f:7a:44:b9:cd:96:fc:ed:dc:14:92:63:39:97:e6:01:67:
54:d3:03:9d:96:1a:ba:5c:6e:88:d0:42:6a:d0:58:1b:97:2d:
aa:2b:32:33:40:10:63:f4:85:da:df:d6:a9:c5:f2:35:33:4e:
ff:09:83:e1:29:3b:30:e1:1b:d1:05:12:0c:be:e1:72:3f:67:
59:ae:bd:d8:99:e3:8e:e8:ba:58:7b:2d:cf:90:74:8f:7f:45:
c9:3c:66:e1:25:d1:d3:76:cd:ff:ce:04:89:4c:62:04:2e:cf:
a9:0c:9d:03:e1:db:c1:6b:dd:8e:8b:b8:18:76:ad:fc:03:15:
0d:a2:31:91:b7:4e:72:e8:7b:8d:85:ff:1b:15:26:10:c8:13:
fb:4d:d6:e8:72:a3:35:b1:72:50:f1:2c:ee:71:48:25:e8:ce:
92:38:0e:25:57:32:36:8c:39:5f:6c:f4:31:82:78:e3:c8:c8:
8d:9f:9b:b4:ef:a0:75:dc:32:12:e0:8e:f0:55:2c:7d:0d:99:
25:24:ae:b6:31:67:b2:aa:98:01:73:9a:45:67:f5:9c:48:30:
66:bc:d7:02:b8:11:32:60:68:a1:ec:f9:e4:6a:e8:c2:3d:6a:
03:5b:50:b5:7c:d6:72:a4:79:5a:f5:9f:7c:61:da:44:2a:bc:
c8:be:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:03:37 2026 by rpki-client