Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
File: UgE1Q57tNQX3iGMmZ22r83zrvzY.mft (raw, json)
Hash identifier: yU5fER/llpj3EvovLgin1G2wCTZ9VLSbZ5DlYv9zDpY=
Subject key identifier: BB:9E:0A:13:E8:27:F3:9F:B8:C8:52:CF:EA:CD:F4:AF:96:A8:48:7B
Authority key identifier: 52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
Certificate issuer: /CN=520135439eed3505f7886326676dabf37cebbf36
Certificate serial: 01A11974E5ECF4A0F2FF2B1F02C686AE44E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
Manifest number: 010B
Signing time: Thu 08 Oct 2026 03:00:53 +0000
Manifest this update: Thu 08 Oct 2026 03:00:53 +0000
Manifest next update: Fri 09 Oct 2026 03:00:53 +0000
Files and hashes: 1: 60JuUSTouRU0NgMTspFmcLL6UNI.asa (hash: hRKCOYUhKmouY4DU6/XK7YCHELPIORSd+VCaf267/OI=)
2: UgE1Q57tNQX3iGMmZ22r83zrvzY.crl (hash: /WkHk6FRfPZahGx93SPYgX/08/i3I2I2tVtZT7KsFl8=)
3: hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa (hash: cWZgtl6Fe0hqFBrcZyuN1x8H8xcw1ByuFigP7rHanh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 03:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:74:e5:ec:f4:a0:f2:ff:2b:1f:02:c6:86:ae:44:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520135439eed3505f7886326676dabf37cebbf36
Validity
Not Before: Oct 8 03:00:53 2026 GMT
Not After : Oct 9 03:00:53 2026 GMT
Subject: CN=bb9e0a13e827f39fb8c852cfeacdf4af96a8487b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:ca:10:59:ab:c5:32:7f:f6:b4:95:7f:c4:
21:55:f9:16:ca:ae:64:b0:10:45:ee:c3:57:e8:33:
b5:60:b2:ad:60:fc:c1:4b:47:f4:34:19:69:bc:62:
12:ab:a2:4d:5f:1c:c2:7b:20:79:e0:11:14:d8:47:
18:98:a5:6c:80:d4:1b:7a:f3:50:55:18:91:a3:6a:
c1:70:97:7a:ce:d5:32:40:bd:e3:94:db:45:12:a2:
4b:d9:a8:1e:2b:4b:9a:04:75:96:08:f5:44:11:4f:
5c:69:0c:5b:22:92:64:9a:1d:bb:f3:68:39:9a:79:
b5:21:b2:23:60:2a:a8:9c:53:5e:e2:89:44:a9:7f:
fb:68:29:8a:a3:b0:b2:9e:e9:cf:a2:7c:f3:0d:a7:
ab:47:fd:f0:f5:84:9b:28:c0:25:ed:99:15:37:ac:
da:62:5a:aa:0a:70:76:c6:04:27:90:5e:68:b4:d9:
d8:33:ae:5c:5b:fe:49:6f:78:7b:3b:3c:19:2e:95:
67:79:1c:36:38:81:9a:11:08:91:3e:e6:6b:f9:c8:
79:ac:c5:77:a6:5b:cc:ec:fc:e4:e0:2d:f6:d9:8e:
72:52:e0:13:7b:46:34:8c:97:84:04:aa:ab:12:bc:
96:e5:2b:6c:31:35:16:82:a0:56:c8:83:62:f3:a0:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:0A:13:E8:27:F3:9F:B8:C8:52:CF:EA:CD:F4:AF:96:A8:48:7B
X509v3 Authority Key Identifier:
keyid:52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b2:2a:45:55:af:51:69:4c:93:bf:79:96:92:d6:7b:8e:91:
90:5b:f7:35:cc:4c:42:df:6c:51:97:11:10:e5:5e:36:0f:f1:
d4:f2:1e:6c:d7:c9:c5:ac:e6:1f:c9:ed:fb:b9:45:9d:32:5f:
6e:2b:62:63:a8:f7:3b:54:93:4c:de:f2:ca:ca:66:17:35:10:
9b:d2:2c:e8:40:63:f7:ee:8e:50:2a:69:7c:35:65:c2:32:ab:
4d:68:7b:b4:22:a9:76:80:7c:67:a1:a4:9b:37:c7:f9:46:19:
7f:33:78:24:f6:03:e5:ee:54:6e:aa:ee:90:60:52:3c:08:4b:
56:2d:5b:18:60:f0:c9:8d:e1:8b:6c:69:91:46:cf:df:2b:7b:
f2:57:5f:0d:3b:37:44:3e:f3:f2:8e:98:a6:e0:5b:62:32:6f:
5d:c7:83:47:cd:14:37:e2:2b:f0:85:b5:a7:0a:98:d4:6d:71:
dd:3c:d9:85:77:72:fe:a5:c9:12:0c:b2:06:17:7c:63:27:16:
bc:12:1c:75:86:3f:54:49:24:94:d1:40:98:30:f8:69:3c:0b:
05:3d:fe:2c:f5:71:73:f4:fb:e9:36:b9:96:6c:8e:ea:49:4d:
ac:07:53:22:e3:62:e9:04:bf:5c:d0:bd:ea:f0:5e:37:af:ab:
20:69:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:49:30 2026 by rpki-client