Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
File: U9xdTpyQVzxt330Ay-iy7aQT_IY.mft (raw, json)
Hash identifier: vNo+NcP+RQ64nalHqewC8g3k0xpsPSgUmz4b2ClEzpk=
Subject key identifier: 84:3D:F3:70:AA:B2:8B:EF:93:74:7B:72:72:50:B4:00:03:BA:F1:FA
Authority key identifier: 53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
Certificate issuer: /CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Certificate serial: 01A0EF30241E26CD25B5EF28970E40F46009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
Manifest number: 0234
Signing time: Tue 29 Sep 2026 22:01:44 +0000
Manifest this update: Tue 29 Sep 2026 22:01:44 +0000
Manifest next update: Wed 30 Sep 2026 22:01:44 +0000
Files and hashes: 1: PsU7x_frD08SU2YYN4xYvGI8q1E.roa (hash: k6MudYJE0V8N7WpGxi22h24h9nGg9VIaakZ/jcGCILw=)
2: U9xdTpyQVzxt330Ay-iy7aQT_IY.crl (hash: uD1vhIngYGPNLG34LIgkcCPmDuONp9kxihr7UldHUNs=)
3: fOZ6kY7go8H3U7EGMazIlVOf4S8.asa (hash: ZG2DRjQ6yjHyZJgJZLq1YZ9mSn6uEwFWnifyu/zanYY=)
4: xOttd6TpxOr24A9NYb5gHM_31mk.roa (hash: acecs5fYnCii+jIlRbpWYRX+vj6OKx+EgPOK7cU5+y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:30:24:1e:26:cd:25:b5:ef:28:97:0e:40:f4:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dc5d4e9c90573c6ddf7d00cbe8b2eda413fc86
Validity
Not Before: Sep 29 22:01:44 2026 GMT
Not After : Sep 30 22:01:44 2026 GMT
Subject: CN=843df370aab28bef93747b727250b40003baf1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:73:f2:e6:08:0a:93:d0:06:b6:3d:27:87:
51:1a:c1:fb:c8:d8:3b:11:a8:26:14:50:98:4a:3b:
b6:6c:10:6b:47:45:3e:60:09:7d:e9:ca:1a:d5:5b:
7c:51:43:26:54:3d:b4:76:f8:88:a5:f3:29:9f:b9:
19:6b:3e:ae:9a:c2:01:1d:88:1c:f7:98:85:c0:45:
52:a5:8e:00:1b:52:e9:8c:68:3f:4b:9f:6f:b7:f6:
d8:4a:d2:44:cf:3a:29:4c:11:74:dd:bb:d1:d6:2a:
20:c2:69:ca:81:6a:ef:dc:98:35:b5:ae:56:ae:b4:
2f:78:cc:40:10:39:d0:ea:8a:e5:26:15:68:99:93:
79:a9:d6:0a:05:61:64:f2:e8:b6:3a:b5:2b:eb:38:
0f:1b:53:20:9d:35:02:69:37:61:24:74:b8:14:b4:
4f:86:10:48:b8:03:08:3d:cb:13:29:53:98:0b:4a:
72:23:e8:76:37:56:2e:48:ba:c5:02:a3:10:1f:c1:
b5:27:50:e4:00:67:71:02:71:d2:dc:dd:19:eb:8e:
7d:c6:e4:a6:f3:98:20:33:3c:02:dc:1f:90:aa:c1:
5e:2a:3a:81:2c:0a:ec:d8:b9:88:32:34:67:c4:e8:
c0:19:64:a7:59:be:f8:83:70:2d:ee:24:36:86:fc:
cd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3D:F3:70:AA:B2:8B:EF:93:74:7B:72:72:50:B4:00:03:BA:F1:FA
X509v3 Authority Key Identifier:
keyid:53:DC:5D:4E:9C:90:57:3C:6D:DF:7D:00:CB:E8:B2:ED:A4:13:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9xdTpyQVzxt330Ay-iy7aQT_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/86ecf1-8aaf-46c6-951d-ad66722d349e/1/U9xdTpyQVzxt330Ay-iy7aQT_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:43:8f:97:e6:e7:a1:e5:63:f0:1f:72:af:a4:67:ba:d6:
77:23:84:79:14:42:00:c1:df:db:7e:29:31:3f:4f:d7:95:3e:
e5:b6:61:60:51:60:97:64:fd:34:c5:91:c8:ff:91:51:b9:64:
74:af:3d:44:eb:fc:3e:c9:8e:af:4a:7f:f1:de:4f:b8:ba:da:
d9:e1:ea:09:8d:23:83:cc:05:63:a6:69:bc:ad:a2:eb:54:59:
0c:de:30:97:c5:c6:ae:38:c6:b1:03:42:64:93:85:54:f3:43:
f6:10:64:ef:c0:f2:c8:6b:5f:11:dd:7b:91:0d:22:f7:dd:69:
d0:e4:27:ef:80:68:5f:31:71:64:e4:c0:d8:56:73:b1:ac:e4:
e5:04:b7:6d:8b:db:29:28:05:e8:0b:c8:3e:ff:ac:ae:04:de:
50:da:dd:4f:0e:64:6d:eb:66:d9:ea:1b:17:ce:24:44:b2:c9:
9d:87:c3:c4:97:ac:98:8d:9c:1d:29:37:02:68:e8:95:50:83:
da:a2:5f:02:ea:ea:94:da:a5:bf:6b:9c:8d:b2:69:81:ce:1e:
84:50:4b:25:99:93:04:0f:d7:cb:3c:c3:c7:45:0e:6f:6b:4d:
c6:87:5f:b3:cc:10:a1:ca:3e:19:03:7e:cc:4b:b3:f1:3c:fc:
7e:8f:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:00:22 2026 by rpki-client