Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
File: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft (raw, json)
Hash identifier: n55soUO96THg/cfkMhJok24Qxf7uoZUPxo2VQPEPlB8=
Subject key identifier: 9D:99:19:D8:75:6E:E5:5D:8F:6B:99:FC:0C:50:FD:00:25:65:F2:67
Authority key identifier: 51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
Certificate issuer: /CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Certificate serial: 01A0F720162F2D5B05E6A533F21584A29402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
Manifest number: 1A85
Signing time: Thu 01 Oct 2026 11:01:10 +0000
Manifest this update: Thu 01 Oct 2026 11:01:10 +0000
Manifest next update: Fri 02 Oct 2026 11:01:10 +0000
Files and hashes: 1: RvPXibU4IJdU5hTTfX_WgU4WFrs.roa (hash: BAJBHUxXZILofCz3HDfw/DI14FkTIJLYrtl/LlZ0ZAs=)
2: UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl (hash: L6d+SHLZ8YcDx0v0RxjDqRnNSvmoVqucjhBTcerUqtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:20:16:2f:2d:5b:05:e6:a5:33:f2:15:84:a2:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517d59438cc201dca2fc1ce7a68773bd71be0ebe
Validity
Not Before: Oct 1 11:01:10 2026 GMT
Not After : Oct 2 11:01:10 2026 GMT
Subject: CN=9d9919d8756ee55d8f6b99fc0c50fd002565f267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:d1:01:19:9c:9b:f4:f1:e2:e3:50:98:5f:
5b:43:7c:84:73:35:19:14:41:6a:bb:f2:f0:f5:c1:
b4:23:79:5f:c3:ae:e8:37:90:be:e9:e7:d3:63:6e:
90:83:be:26:58:4e:e6:11:78:bd:95:f6:b1:7d:4e:
6d:72:7f:0f:3b:d7:dc:66:ae:8c:68:46:ab:b7:08:
9a:68:a4:ce:7d:79:29:de:ec:2d:48:79:b8:5e:05:
27:2f:2b:24:4b:7b:4d:80:71:03:b3:69:d6:38:82:
09:66:54:38:23:5e:6d:d6:1e:d9:e6:d6:e9:d9:a9:
8a:0a:e3:96:b7:3c:55:4b:8c:5e:f1:d6:46:44:b9:
71:9a:8d:cd:23:14:4b:90:0c:4f:85:8c:81:7c:c1:
00:b6:e0:7b:b6:a1:0e:64:43:17:cf:e3:79:e3:83:
d1:29:46:74:ba:26:73:df:e9:9a:38:6a:e9:1b:ba:
9f:56:45:fb:32:fc:63:58:71:2d:43:e7:f7:e1:02:
f5:ba:9d:41:c4:5d:13:35:e3:59:29:b6:83:55:e4:
e3:c3:06:52:b0:01:8b:46:a6:5e:6a:29:14:e3:0d:
0a:85:8b:70:8c:dd:d6:6f:d4:64:9d:4a:17:b1:26:
3f:00:c9:e6:fc:6d:65:b4:b9:67:fc:c8:93:63:65:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:99:19:D8:75:6E:E5:5D:8F:6B:99:FC:0C:50:FD:00:25:65:F2:67
X509v3 Authority Key Identifier:
keyid:51:7D:59:43:8C:C2:01:DC:A2:FC:1C:E7:A6:87:73:BD:71:BE:0E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/50f5ba-bdf4-4a71-a836-8b31e23382da/1/UX1ZQ4zCAdyi_BznpodzvXG-Dr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:0d:3d:b1:06:9c:ec:a0:47:7a:ce:41:e0:fc:6f:18:87:7d:
65:f9:ff:b6:c4:2f:31:e6:7d:5b:64:4e:77:a4:08:79:8a:14:
56:b5:1c:f2:31:a7:dc:1c:77:49:79:0a:47:a5:62:da:c1:ed:
29:8d:50:c9:83:48:a5:fa:54:a5:d1:93:dc:35:5f:ff:d2:8d:
a5:32:18:74:cc:8a:ad:08:27:97:d8:f1:2c:ff:40:68:40:12:
a3:db:24:01:4f:5b:cf:9f:e2:f3:01:70:7b:f8:a2:86:67:2a:
d7:50:8f:8b:df:44:d8:c2:12:d8:92:93:09:ae:21:bb:34:e9:
5c:ee:6c:06:f4:a1:c2:1b:e5:30:ae:46:0f:79:ef:74:ff:b6:
b0:38:6d:44:6a:84:ab:dd:cf:d8:51:28:b5:d5:08:90:5c:a1:
1f:3c:52:48:67:06:61:ed:0b:3f:68:11:3d:b5:de:aa:56:e3:
13:aa:2d:19:7d:19:72:76:de:bd:92:28:73:b8:a3:cd:2d:ce:
ed:cf:ae:45:f9:12:70:b2:73:1f:ff:22:f5:f1:5f:a2:d7:01:
bc:03:e8:d2:77:54:df:a1:37:2c:f6:6f:0d:c7:15:59:50:5e:
19:90:82:85:09:bd:cf:32:17:e3:49:67:d5:1e:3f:25:97:fd:
62:4f:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 22:08:54 2026 by rpki-client