Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: LNOX7j+Eeai4FbA9ERRMLahAOUIB+3wG3Lr0TBqsLPE=
Subject key identifier: 85:16:F6:6B:24:AF:52:20:D7:99:5C:4F:5D:B1:5D:22:5C:78:B8:7D
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 01A103FFF97A1A8D347D2B7D4A091032A6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0EE9
Signing time: Sat 03 Oct 2026 23:01:09 +0000
Manifest this update: Sat 03 Oct 2026 23:01:09 +0000
Manifest next update: Sun 04 Oct 2026 23:01:09 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: BlnBBQIc4pl/n73pdSSDJ0DzdWC/jJ+7WKoS3ZKaSh8=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:ff:f9:7a:1a:8d:34:7d:2b:7d:4a:09:10:32:a6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Oct 3 23:01:09 2026 GMT
Not After : Oct 4 23:01:09 2026 GMT
Subject: CN=8516f66b24af5220d7995c4f5db15d225c78b87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:02:96:f1:02:7e:3e:37:21:da:20:55:d7:
fc:4e:59:7b:c9:02:71:92:ac:68:be:00:68:5b:31:
27:10:dc:67:ab:e3:a6:71:7e:73:d1:48:d8:b9:bf:
29:cc:08:14:38:66:7f:d6:a0:c3:e5:3b:43:4c:fa:
32:05:f0:31:8e:c9:c6:97:48:5b:59:a1:19:7b:c7:
c6:8e:a3:4c:d9:22:df:e1:b9:98:84:5c:93:11:34:
86:6f:b8:df:5a:06:a1:d9:8c:65:af:88:ff:8b:ae:
ce:ed:19:b4:47:44:e0:4f:c8:e2:90:ac:88:8d:9b:
0f:dc:84:07:85:64:ed:96:45:f6:4a:24:a4:d2:fb:
54:75:be:21:42:3f:5c:68:23:c5:e2:18:d3:94:9e:
05:6b:73:96:d5:9c:0b:fa:eb:9a:23:27:2f:ec:b3:
7f:c2:a5:58:c2:a2:f5:ec:1b:ff:0b:71:69:7f:cc:
e4:c2:ce:20:17:84:0c:66:bc:43:6d:f4:a7:c0:eb:
93:8a:77:3d:f8:0f:96:82:8b:6d:48:b9:aa:32:f1:
66:e9:4f:eb:bc:5c:8e:08:c8:bf:e6:7b:53:7a:33:
a7:66:e6:bf:f0:ea:c7:32:ad:77:21:30:82:8b:1c:
e9:5f:64:86:2f:60:3a:41:7f:57:99:ad:78:48:47:
e5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:F6:6B:24:AF:52:20:D7:99:5C:4F:5D:B1:5D:22:5C:78:B8:7D
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:72:37:03:99:37:f3:c7:ae:b7:b5:7e:d1:11:7d:7b:2d:
1e:64:05:8b:4f:df:36:5e:48:f0:a5:71:5f:44:c3:da:b5:99:
ca:65:d4:7d:e1:ea:0e:fd:d7:6a:59:c9:fa:35:4e:79:05:d6:
8b:d1:32:c2:6f:72:1c:d5:6c:a6:d6:bb:98:54:cb:5a:9b:a7:
ba:87:96:74:9c:79:1a:a9:d1:1e:74:1e:5b:47:49:42:10:81:
15:ac:36:83:44:43:0a:8e:3a:b5:49:76:9e:77:a5:40:f7:a0:
dd:5d:6b:d6:68:51:f5:2b:ec:89:0a:16:e5:9a:2c:82:47:13:
2b:6b:34:e2:5b:31:72:78:61:4f:e5:60:5d:c8:c8:1b:b2:dd:
7c:87:cc:5b:71:93:20:ec:69:a2:25:71:21:cb:a5:e5:7f:f5:
f6:92:55:3b:d2:95:ea:ac:f2:0b:28:8a:11:0f:9b:24:37:a4:
06:41:fd:2a:d3:1c:98:aa:15:1c:08:82:91:7f:7e:03:6e:c9:
eb:bb:5e:40:63:80:65:23:21:a7:4a:6f:43:1a:d6:90:e3:cd:
f6:e3:17:01:1f:de:a9:fc:5c:84:36:1b:a1:c1:92:7e:e4:a1:
5d:0e:c5:61:a5:d4:62:25:a9:92:a2:01:62:25:1c:e6:8d:bb:
16:1f:2d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:06 2026 by rpki-client