Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: B8ZVmgHPx0s3Ce90dEkwLBBCxYuYy4ehJkXV0PrHkwY=
Subject key identifier: 7B:80:5A:35:9E:22:43:5A:FA:16:4E:5D:83:81:C3:12:EB:0D:02:60
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 01A115CE7C3941EBB4A7A7C9538F24157176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 1A96
Signing time: Wed 07 Oct 2026 10:00:15 +0000
Manifest this update: Wed 07 Oct 2026 10:00:15 +0000
Manifest next update: Thu 08 Oct 2026 10:00:15 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: hlljcfQldHYktNDbo+Rh4pH+PWmL7oDO9R9YQwYh3Ak=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:ce:7c:39:41:eb:b4:a7:a7:c9:53:8f:24:15:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Oct 7 10:00:15 2026 GMT
Not After : Oct 8 10:00:15 2026 GMT
Subject: CN=7b805a359e22435afa164e5d8381c312eb0d0260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:85:70:16:85:1c:9c:95:22:bc:52:16:8f:
36:26:31:56:ae:70:b7:82:30:78:d6:d5:8e:79:07:
8e:f4:87:dd:43:09:e1:86:e0:80:cd:98:38:4d:6c:
4a:06:15:99:0a:81:b8:64:97:c8:b1:19:57:de:a8:
8a:dd:3b:fc:3a:6f:c2:18:25:bb:63:9b:7c:b6:68:
f4:0a:4d:57:fa:6e:a8:f2:de:7c:e8:cb:a7:8f:e7:
4e:58:92:95:c8:e0:85:cf:94:90:81:b9:ed:79:cf:
67:36:65:27:f7:a7:2a:36:c1:cf:16:01:44:c3:96:
66:de:56:69:ff:e1:57:49:90:d0:4d:33:c8:6f:36:
fa:27:c6:4b:ea:a8:11:7f:f9:93:94:31:6e:62:74:
57:52:2f:31:6e:eb:4d:68:7b:2e:10:a5:eb:9c:af:
a3:9a:2a:55:75:13:9e:05:7f:b8:a8:26:5c:8a:fe:
95:6f:64:02:f8:e7:5a:68:1b:36:f7:00:7b:31:50:
0c:38:52:91:1f:2a:29:65:e7:dd:1b:75:ae:2a:75:
4c:9f:51:29:aa:57:50:df:2f:de:b5:2a:49:6f:38:
77:9e:3f:b0:ce:63:0c:c7:0f:42:63:ce:2c:f6:c3:
45:50:67:7f:f9:39:ba:6d:57:d4:46:a3:db:9f:2d:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:80:5A:35:9E:22:43:5A:FA:16:4E:5D:83:81:C3:12:EB:0D:02:60
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9e:71:06:42:08:4d:8b:ff:48:04:ae:3d:9a:60:2d:05:0c:
8c:8b:d4:5f:cc:57:e0:73:6e:73:d7:3e:4e:dd:21:fe:df:69:
d8:2f:cc:f3:19:9f:a8:d5:93:d2:59:2c:d2:1b:13:b8:16:17:
e7:b8:1c:a1:8e:0e:82:18:89:60:50:a2:a4:b3:3a:41:fb:e9:
d0:70:5c:17:9c:88:e1:d6:ec:ba:77:91:9e:b3:3c:dd:4a:07:
fa:39:00:a7:8a:68:d1:67:6e:9b:ba:c9:f4:af:22:bc:6d:c3:
09:0e:97:f6:29:0f:5e:c0:e2:e5:9f:84:50:90:a6:fc:a2:dd:
7c:2d:96:35:c3:a0:c2:7a:26:1c:99:8f:04:81:52:77:0c:08:
4d:60:ae:e9:1a:bd:e2:3e:f3:bb:3a:71:61:bc:8a:ca:11:32:
f3:3f:d1:71:22:15:48:29:70:95:ff:42:ad:5c:d1:91:d8:80:
79:2a:a0:28:ac:e1:55:84:f0:36:89:ed:22:ad:46:1b:d5:f3:
2d:53:2a:7a:b0:a0:f0:a2:61:74:f6:98:95:6a:c8:ee:4f:00:
84:cd:17:a0:48:79:d1:ed:e0:6f:14:8c:47:70:b4:39:78:17:
10:0e:f3:df:1f:3a:2f:48:b8:5c:37:64:e4:a2:b1:fd:85:fa:
af:00:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:21:41 2026 by rpki-client