Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File: UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier: ojBjk3xMuQccAGwTzmaQvCAsTL4oBmOLYrw70YCJ3cE=
Subject key identifier: 8F:00:B1:59:6E:9F:2C:56:09:0D:5B:9A:C8:F7:A4:40:A6:6E:3C:79
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer: /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial: 01A0DE7374F28EA68070411835D20D13292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 16:01:43 +0000
Manifest this update: Sat 26 Sep 2026 16:01:43 +0000
Manifest next update: Sun 27 Sep 2026 16:01:43 +0000
Files and hashes: 1: 0J2Nb4Q1OO2pfPBSxR-MztsiJBY.roa (hash: tftG+mQIphk3FNSPZp40EyRTZOVpuoMSFbhQMapxPC0=)
2: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: 87SvII28Z/hAA9NRwg5rx8sOZHMKTwg3uwROTWDCIpg=)
3: j2_V5BwB6zWowKkrqo3IR1AI3TY.roa (hash: v2GJYRFtHtKuk3djB+9NlbqHwSDbHuYB27XPregGwCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:73:74:f2:8e:a6:80:70:41:18:35:d2:0d:13:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Validity
Not Before: Sep 26 16:01:43 2026 GMT
Not After : Sep 27 16:01:43 2026 GMT
Subject: CN=8f00b1596e9f2c56090d5b9ac8f7a440a66e3c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:be:46:42:23:12:94:65:60:49:0c:4b:c1:
03:5d:9f:24:8b:60:7d:42:2d:d8:1e:a5:82:d0:dc:
05:45:11:b3:86:73:83:51:ee:ad:00:ca:f1:56:4e:
27:d4:09:3c:4e:36:4e:a7:e8:dc:12:09:ee:50:c0:
24:86:04:9a:c4:c5:3f:a8:95:94:19:0b:2d:23:f9:
69:af:eb:21:2a:fe:5e:a2:13:64:51:04:03:20:78:
68:b1:91:21:20:28:69:0b:d2:45:cd:84:7d:a9:65:
00:7b:a4:e7:e9:cb:d8:cd:99:77:bb:45:75:28:1e:
cc:88:a1:0d:e4:a5:b8:cc:49:20:47:2f:83:4e:0a:
19:34:df:4c:4c:a9:a0:ae:15:59:c1:98:61:4c:c8:
85:95:4c:c5:75:4e:81:55:58:cb:c6:1d:f5:b0:86:
7a:81:cc:16:de:34:9f:59:50:87:55:cd:ec:13:4a:
ca:9c:0a:86:8c:7e:14:df:e1:b9:6e:2e:6a:20:e7:
c1:de:2a:c6:bc:6e:0d:63:48:c9:3d:fe:a3:79:4a:
ca:98:27:1d:34:84:87:49:d8:34:d7:1e:ea:3e:fe:
6b:f6:20:fd:70:a2:bd:8c:72:eb:80:c1:dc:be:04:
3a:90:77:48:7d:e6:f3:b5:bb:12:95:82:37:7e:19:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:00:B1:59:6E:9F:2C:56:09:0D:5B:9A:C8:F7:A4:40:A6:6E:3C:79
X509v3 Authority Key Identifier:
keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e9:03:ac:ed:b9:52:06:ab:36:61:9a:6b:ee:46:68:a1:c8:
51:c1:53:cf:18:f8:c8:f7:72:8a:f9:0e:f9:ca:03:53:81:81:
47:95:f7:e2:5b:57:2f:2c:27:24:08:74:5a:98:9d:2e:78:3e:
c2:24:72:50:e6:dd:4c:b5:bc:01:c5:7b:68:a1:05:a5:a9:49:
cd:fb:19:f2:e6:d4:9a:0b:97:79:5c:b8:9c:b6:c7:ae:e2:d7:
27:5f:67:10:82:45:42:b6:e6:17:12:78:a5:33:1d:7b:b6:54:
3b:a7:a4:76:22:fc:32:06:50:14:bc:6c:1b:91:5e:42:08:78:
45:76:53:ee:52:63:f3:14:56:9e:33:54:7f:95:d2:d4:fd:be:
17:db:b5:c6:0b:c2:0d:23:e8:86:9f:ed:f7:ed:32:95:6e:ff:
21:91:8b:c0:23:c8:a2:1e:2a:5b:1b:4e:33:ed:8d:55:42:d2:
fb:16:f6:c0:57:ab:95:b0:0f:79:d4:3f:c6:80:1e:fe:29:01:
1a:1e:49:dc:82:ea:a7:e5:39:d1:02:f6:98:8d:1a:ce:bb:82:
54:e2:cb:a3:78:ce:66:11:cc:4d:ba:94:67:99:21:ec:84:ab:
48:ea:8e:45:d2:ed:39:4f:8b:e4:f5:e1:9b:8a:a6:7a:fe:29:
1b:6c:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:52:46 2026 by rpki-client