Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: C84PuaNn9aod+YkBuBeAVYcU6DEc71RCZbrJAtYwqLo=
Subject key identifier: F2:5C:91:EA:66:03:0F:14:23:29:0D:88:DD:22:27:CE:07:3A:A5:B8
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 01A0D502A4A4828C698327703BDD22FD63EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0A46
Signing time: Thu 24 Sep 2026 20:01:55 +0000
Manifest this update: Thu 24 Sep 2026 20:01:55 +0000
Manifest next update: Fri 25 Sep 2026 20:01:55 +0000
Files and hashes: 1: 3dGXQaAN8gyj0pfiUomGURLr8Gk.roa (hash: 29zMKU+zr2s5hhxmBkhcbzVqYD9Bjs33k2kXOnQbPmk=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: jXpyB+EWg4u64aQdib2TeUgr/FwAhakZ58tiqnhlKQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:a4:a4:82:8c:69:83:27:70:3b:dd:22:fd:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Sep 24 20:01:55 2026 GMT
Not After : Sep 25 20:01:55 2026 GMT
Subject: CN=f25c91ea66030f1423290d88dd2227ce073aa5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:98:f0:44:0b:ce:81:22:f8:d8:34:10:4e:
1f:96:79:6b:b8:ce:48:0f:d3:cf:ee:d9:37:51:95:
c0:04:bf:0c:6a:e4:e9:bd:f4:d9:18:f6:57:f6:db:
a1:cc:1b:4d:23:2b:22:e9:c2:1f:e9:ba:69:20:2e:
90:38:c6:e2:68:e8:45:99:07:5f:26:af:82:3b:c5:
f2:ab:41:d1:b7:7f:94:db:c2:3f:07:b9:ef:e3:c7:
0f:57:06:17:46:57:33:7b:65:b1:bd:97:de:23:c5:
9c:f0:28:33:03:72:98:67:d2:4c:06:7f:46:dd:bd:
b5:3e:46:b3:5c:da:68:ff:a3:e2:8a:60:0e:5d:aa:
80:e7:1e:06:20:1e:71:32:8e:c3:b6:d4:49:58:73:
3b:4d:eb:8d:f7:ea:9f:ac:0e:14:68:33:f4:0f:f0:
7c:3d:a0:4d:75:ed:e3:8c:98:51:5c:23:bb:20:b0:
7c:72:e7:4c:2e:bf:05:01:77:9f:cd:46:e1:e2:28:
91:c6:14:fd:db:c4:7f:8e:a6:79:94:24:a3:68:ec:
61:0f:b5:ee:02:00:f0:20:07:32:e1:4d:8f:e9:37:
2d:c3:e4:5a:cc:25:87:4d:34:33:5b:7e:da:d6:31:
85:40:53:ab:1d:9f:b7:96:9b:52:b7:39:74:63:07:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5C:91:EA:66:03:0F:14:23:29:0D:88:DD:22:27:CE:07:3A:A5:B8
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:fe:f4:2c:17:33:83:51:6f:5c:b6:01:8e:46:7d:35:69:ab:
fa:8d:09:a8:90:63:b4:26:37:a0:97:23:13:58:d6:a6:89:68:
6e:1a:7b:31:2e:ca:14:02:cd:0e:51:e3:cb:81:bb:c7:86:89:
97:5a:7f:0e:e2:57:27:95:42:d2:f5:38:93:56:7c:dd:67:06:
9b:bb:20:2b:61:4a:03:de:6a:de:2a:06:fb:c0:79:dd:13:35:
a0:ec:a0:43:b2:ad:97:4a:e4:96:d6:ed:bf:1e:3e:52:2d:97:
bb:32:c5:57:39:85:bf:b9:f3:b8:c4:d2:7a:1c:6e:f2:20:53:
8f:6e:0d:f0:92:91:0e:52:93:2f:e7:22:20:2a:c1:6b:b8:51:
2c:d5:3a:4a:0b:74:f6:aa:cd:d4:96:5f:98:e5:22:e0:ca:cd:
42:53:6f:4c:1c:6a:96:d4:41:dd:34:17:62:d7:a5:b8:e6:e5:
70:90:04:c7:e7:83:26:df:b0:20:0b:a0:23:e6:2a:18:f9:53:
3b:1c:1d:e0:de:13:27:89:57:6f:98:21:6b:ec:f6:49:eb:b7:
cf:73:6a:ae:6c:23:16:15:d6:5a:93:0c:a7:54:c3:47:fc:6e:
54:fd:83:6e:e8:3c:17:53:f4:d0:9e:b4:1e:f2:05:2b:0b:c1:
34:08:e7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:16:04 2026 by rpki-client