Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
File: UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft (raw, json)
Hash identifier: XDlKQ7O4iYSBDH7EG709o/bgcn/Nr1H82Bbz1CiaVuk=
Subject key identifier: F0:97:8B:08:78:6C:A5:51:1C:08:7D:F5:E3:FE:A8:B7:4F:11:06:6E
Authority key identifier: 50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
Certificate issuer: /CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Certificate serial: 01A0EAE561DA637E7E9123F7D52DB046B19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
Manifest number: 1A79
Signing time: Tue 29 Sep 2026 02:01:36 +0000
Manifest this update: Tue 29 Sep 2026 02:01:36 +0000
Manifest next update: Wed 30 Sep 2026 02:01:36 +0000
Files and hashes: 1: 7dEOiIA8_9zh3xckJYupQMCdciI.roa (hash: Tjdlo0qqbCRgS4I5Nkc+cC8kBHitGngl1heiUQSaGXc=)
2: UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl (hash: GNBrEAzINJWl425CiQZfFMVGY29w7h4qUgrGlhgJNAA=)
3: Y8VlvghNzow3X2EDqq7nsovsvYM.roa (hash: tV/yAkzLhEHgulAxOFJx7q2gmyEPCZA1rHMBVOUmeq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:61:da:63:7e:7e:91:23:f7:d5:2d:b0:46:b1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509f391f29d92078ba6e2c76faa2f8ae947343e6
Validity
Not Before: Sep 29 02:01:36 2026 GMT
Not After : Sep 30 02:01:36 2026 GMT
Subject: CN=f0978b08786ca5511c087df5e3fea8b74f11066e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:0e:03:a5:cc:7e:3a:5a:82:b7:54:fa:16:
70:34:99:7e:92:ea:8f:b3:09:c5:9d:99:12:86:70:
15:80:b6:f6:22:92:12:24:5b:f0:e2:70:cd:ca:c3:
b4:8d:28:0e:87:ec:7a:54:16:6d:3a:72:74:ee:7c:
4e:81:26:f1:23:2e:0e:98:8d:b7:7e:b3:6a:b6:f6:
af:7c:ab:44:e3:94:e3:84:63:df:0b:07:74:67:bc:
0f:36:0b:6a:06:3c:5e:bf:6b:44:14:24:be:f4:d9:
52:cd:19:44:f2:a2:3c:33:d5:b0:53:1d:04:45:eb:
b9:66:30:6f:2c:e1:df:3c:e0:06:99:38:9a:f6:0e:
10:04:ba:79:45:f0:62:94:53:dc:a7:d5:bd:e3:c4:
93:d5:39:a7:9f:ae:cb:10:6a:75:42:3c:d5:1f:26:
d9:36:13:72:0d:fa:d0:ed:35:57:b8:ec:20:bd:fd:
85:80:78:81:70:b3:0b:ea:e6:58:6b:a4:7b:47:01:
42:11:fe:20:21:9a:ad:85:2d:fb:3c:1e:6c:30:96:
e8:91:b6:83:4a:81:ca:06:54:b7:fc:c4:e3:eb:df:
01:81:fb:f5:cc:c0:83:be:88:81:e0:43:ae:09:e3:
e9:76:e0:2e:1e:31:65:e7:8d:ad:a5:ac:e3:49:78:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:97:8B:08:78:6C:A5:51:1C:08:7D:F5:E3:FE:A8:B7:4F:11:06:6E
X509v3 Authority Key Identifier:
keyid:50:9F:39:1F:29:D9:20:78:BA:6E:2C:76:FA:A2:F8:AE:94:73:43:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ85HynZIHi6bix2-qL4rpRzQ-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5dd1a-7b59-4435-abdf-28d0f202e36d/1/UJ85HynZIHi6bix2-qL4rpRzQ-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:6a:11:c6:83:5d:0b:b0:34:67:33:82:41:0f:8b:7f:2d:27:
29:3b:14:fe:bd:50:82:5e:a4:04:7e:63:c3:78:cb:f1:66:34:
7f:a4:76:b9:54:3b:a8:3e:f2:a3:00:2f:61:85:77:36:2b:d4:
a9:0b:92:76:21:af:90:79:27:85:ad:82:f7:a4:92:a1:94:25:
0f:79:c3:67:29:27:fa:39:43:54:d4:1e:90:87:15:52:90:44:
d4:d3:0e:d9:81:fa:8e:fc:23:79:0d:28:5e:eb:4c:79:de:ab:
86:40:ac:b3:a2:b4:0c:dd:1b:cd:2a:46:ec:4d:16:55:5b:38:
23:08:01:d1:e6:2c:51:b4:91:18:b2:c3:c1:69:14:1c:bd:70:
ff:44:91:19:81:c6:d8:2b:0d:4e:0b:5f:16:ed:ef:d0:6d:4b:
dd:6d:79:be:08:13:f5:e4:af:a5:2e:36:ba:6d:87:37:85:d4:
40:af:85:52:45:81:17:71:ef:a6:a0:a4:f3:c0:26:4e:74:3a:
0b:d3:11:cb:25:70:e6:c3:f9:69:65:f9:4d:94:e1:cf:fb:be:
ba:34:fc:20:c7:7a:74:39:45:d8:9e:e7:38:f1:8c:fd:41:9a:
e7:ec:74:8f:63:bd:e9:60:d5:69:d9:a1:cf:eb:3a:5b:f6:9f:
8f:2c:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:10:09 2026 by rpki-client