Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: jqSLmEldKrzLKt/Td8Cez3jNJ1orWuyaOtwtbns1QkM=
Subject key identifier: 7F:F8:1D:30:12:68:EE:98:6A:D0:45:0E:33:F5:F4:20:E9:54:95:89
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 01A10FCC6C9D0EB473A740CD79B2C2EF6A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 06:00:17 +0000
Manifest this update: Tue 06 Oct 2026 06:00:17 +0000
Manifest next update: Wed 07 Oct 2026 06:00:17 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: uI9I9GoOkJVoIDTIegcjUcXJbUXbqieg5B+Xb2gapFo=)
2: yAmajTNIGB30RaNnDKHZKbNV084.roa (hash: AvmPyTEQGMbZs2CFL6VyUeUgqUB6djXcQ6A/Qc+SDAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cc:6c:9d:0e:b4:73:a7:40:cd:79:b2:c2:ef:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Oct 6 06:00:17 2026 GMT
Not After : Oct 7 06:00:17 2026 GMT
Subject: CN=7ff81d301268ee986ad0450e33f5f420e9549589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:a7:9a:f9:68:cd:6c:6b:70:8b:80:57:d1:
08:1b:f1:ff:87:65:63:b5:8a:7f:8b:c4:31:78:a6:
34:58:7b:0d:ba:07:e5:fe:19:1a:c8:e0:64:b2:07:
ac:87:2d:e2:eb:74:21:f5:a4:88:67:1b:2e:24:90:
a8:9d:61:1d:a4:da:7c:10:6e:c6:bd:08:2b:8b:8c:
15:b4:80:2a:00:35:86:9a:e6:1f:25:37:a0:d1:88:
47:6b:2f:0a:08:58:3e:a2:76:0e:05:c4:1e:ea:e9:
90:6d:35:02:b4:59:7c:2e:37:5f:18:9d:83:a3:4d:
4e:4e:d9:e5:9c:64:42:04:43:ae:49:f9:41:ef:8b:
42:e4:90:20:6e:81:90:bc:1a:d6:83:af:90:78:69:
5d:34:4e:66:ae:7c:40:4e:19:0d:62:31:5a:2f:fd:
98:78:ec:72:5f:86:8f:ff:cb:60:1e:a0:67:12:10:
e8:6e:a1:59:79:b6:b0:f8:0d:c2:4d:da:a0:78:38:
f4:27:ba:72:e9:8e:4d:6f:40:5d:d6:81:11:84:21:
36:8b:f6:eb:b1:73:40:cb:07:d2:09:0a:3c:44:91:
1f:bd:0f:e3:62:56:5a:55:02:f7:be:65:01:ae:dd:
69:7f:6d:4d:1f:8b:fd:df:db:07:a1:a1:33:dc:18:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F8:1D:30:12:68:EE:98:6A:D0:45:0E:33:F5:F4:20:E9:54:95:89
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4c:94:77:69:f5:d0:02:e4:51:9e:3c:b7:51:52:ef:42:ea:
35:eb:f1:2f:a5:22:97:02:5c:52:d1:41:99:9c:c9:9d:ca:bd:
d7:a2:ec:d9:ef:5c:bf:d6:51:9f:e8:56:e6:70:8f:6f:41:9d:
a5:66:e0:d5:50:e6:9a:3a:4a:61:36:37:f0:84:6c:cf:44:c2:
7d:2b:e5:c9:54:19:11:89:b6:2a:dc:c7:9e:82:9b:77:6f:a9:
72:b1:e0:73:c1:cd:55:71:f6:6d:56:2e:de:db:a7:58:f5:88:
68:91:ee:a9:9a:20:47:2b:9b:4f:ec:db:35:e3:3a:04:64:e1:
fc:90:8f:d1:65:5f:e3:46:9e:6b:62:0f:0f:ef:d8:4d:b5:d2:
0b:d9:3f:1a:54:81:9a:1d:3f:2d:64:b8:26:80:47:82:23:e0:
d2:6f:51:4d:17:95:2f:c5:d9:a4:d2:2c:ed:18:7b:67:6c:4c:
12:24:7c:30:47:51:db:81:e5:36:1c:ef:d1:db:4d:93:e5:2b:
15:e6:2d:72:ae:67:67:8a:b9:7b:5c:36:64:8d:f3:03:44:9c:
d9:63:20:0b:c7:11:e2:82:32:f2:6a:c7:0e:bb:2a:76:34:83:
25:18:8f:f6:3f:c3:85:1b:ed:65:2e:36:15:0f:9d:c8:42:18:
7c:21:f6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:45:27 2026 by rpki-client