Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
File: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft (raw, json)
Hash identifier: lR4knOfx3Wn/ruzYw7PRFIaZypulPIeGf3qqOVHPFXI=
Subject key identifier: 66:D4:43:26:63:31:D1:DA:73:41:5E:E7:35:E6:84:FD:34:27:70:0E
Authority key identifier: 53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
Certificate issuer: /CN=533eead413a1705fbfcb2adbe90c69f055e275da
Certificate serial: 01A0EBF90FD1DCDB2FF11D69553712646DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 07:02:43 +0000
Manifest this update: Tue 29 Sep 2026 07:02:43 +0000
Manifest next update: Wed 30 Sep 2026 07:02:43 +0000
Files and hashes: 1: S85KGuABcO7n_bO4AIe1ewK8q8g.roa (hash: DRQavnwTOz4wK0AYi2a4Xmr2tC3b2FoHqOFT/oiiTE8=)
2: Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl (hash: lM0pd2uHbsZoCWu/HZJCO6JaqmfiEl/FB9DGSsnOJjE=)
3: kERmId2DFd_EibfHqh4MCSjy0OI.roa (hash: mbtYNWIZ4W0nIasRUXPcBW6WvJKBeXzkM/oxx5kKexM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:0f:d1:dc:db:2f:f1:1d:69:55:37:12:64:6d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533eead413a1705fbfcb2adbe90c69f055e275da
Validity
Not Before: Sep 29 07:02:43 2026 GMT
Not After : Sep 30 07:02:43 2026 GMT
Subject: CN=66d443266331d1da73415ee735e684fd3427700e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:db:bf:4e:89:09:89:08:7b:7e:67:04:63:
8c:63:c6:4c:c2:86:db:72:6a:a5:1b:dc:90:ae:a5:
c2:67:aa:1c:cf:4d:de:f0:7f:29:8d:2c:47:44:6e:
3e:41:1b:a7:7d:4d:a8:0e:0a:c3:8e:8f:10:e9:ff:
fe:d3:91:16:70:93:89:8d:8d:32:f8:e7:c5:e1:72:
13:84:04:18:5d:2b:d1:44:88:a0:85:7b:8f:e8:b2:
5b:06:8b:e4:1a:70:52:df:e7:fa:31:5b:df:16:27:
07:54:5b:6f:42:7f:f3:3b:30:e4:a5:d6:2f:ed:27:
9c:93:d4:65:d3:49:d9:5c:4e:51:f0:bd:f2:71:e6:
68:4b:20:b2:d8:bb:c3:b0:ca:a5:d1:2b:5e:c4:76:
da:08:e0:0f:d3:09:26:fc:bd:0b:c5:ef:c1:4b:f5:
1b:1c:9a:6d:73:6a:cd:8b:b5:ae:ec:f8:2f:dc:bd:
e3:bf:2d:49:82:b3:e3:23:f7:ed:5d:0d:d9:46:2f:
18:df:e5:20:49:84:69:bd:cb:23:c5:cc:46:24:4f:
66:e5:b1:37:4f:c7:7c:a0:f3:b7:b2:3c:8e:9c:9f:
8b:14:fc:71:bd:da:f4:c4:35:c3:b0:0b:b8:fe:41:
01:80:8c:ac:1b:af:2d:34:e0:5e:32:ce:ed:a8:1f:
8a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D4:43:26:63:31:D1:DA:73:41:5E:E7:35:E6:84:FD:34:27:70:0E
X509v3 Authority Key Identifier:
keyid:53:3E:EA:D4:13:A1:70:5F:BF:CB:2A:DB:E9:0C:69:F0:55:E2:75:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/48f1c6-1134-4969-af60-d017c1759639/1/Uz7q1BOhcF-_yyrb6Qxp8FXiddo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:0c:85:76:58:7c:02:32:df:50:0f:ff:9b:32:5f:bb:02:
5f:00:02:10:ec:6c:05:d0:40:95:c0:6f:e9:bb:a8:eb:69:70:
19:ba:bd:41:89:70:7c:04:33:c6:73:1a:9f:b8:a1:f1:a8:9d:
b3:8c:cd:c8:35:34:b8:b5:2c:40:18:59:37:c0:0e:fb:45:3f:
92:4c:b3:35:22:e4:8b:16:53:09:84:4a:40:04:85:8c:c9:3d:
18:09:72:70:f1:64:17:1b:ce:20:00:92:53:2e:1d:c9:d6:44:
09:12:fb:8a:56:5c:97:42:5d:b7:77:39:e2:d5:1b:9b:9e:a9:
3c:72:ca:bc:6c:51:8b:63:67:e9:78:8a:4a:1c:d7:d6:4b:7d:
be:5a:41:4f:d6:85:fa:dd:c2:08:f8:1e:5e:4f:ea:a0:6f:47:
6e:ff:e4:79:6d:b7:85:1a:a8:93:86:83:a2:e6:1b:ea:2f:5b:
bd:ff:1d:22:b3:d3:ac:0f:48:64:33:78:d3:03:b8:b2:79:7e:
b0:6d:6f:96:a0:1f:c9:d2:25:4c:5c:43:90:50:f5:e3:78:4b:
de:b7:da:4a:32:e6:1e:98:9a:e6:52:95:9d:eb:c7:5e:b5:fb:
2c:9f:29:65:ff:e3:da:a2:73:eb:29:ed:18:06:1c:34:8b:5c:
fe:d9:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:27:11 2026 by rpki-client