Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: wT/VZKR+mIUrmOdY4sTBkdEyQJ3RyC/RVP/NYloHcSQ=
Subject key identifier: 81:05:99:E2:92:64:07:F9:33:FD:03:BF:86:E4:10:5D:08:23:3F:BE
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01A0CE912D15A9B74D09101691737380ED9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 14:00:15 +0000
Manifest this update: Wed 23 Sep 2026 14:00:15 +0000
Manifest next update: Thu 24 Sep 2026 14:00:15 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: Abfrd4N6VRz8Te8xEGNjzAAvHLoZB6D97xpYgvmgPuc=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:2d:15:a9:b7:4d:09:10:16:91:73:73:80:ed:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Sep 23 14:00:15 2026 GMT
Not After : Sep 24 14:00:15 2026 GMT
Subject: CN=810599e2926407f933fd03bf86e4105d08233fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:25:5e:3b:8c:a3:c5:e8:c6:a7:63:d2:f7:
29:4d:3b:fe:3c:75:34:00:04:df:19:bf:88:b1:1d:
a0:88:d4:09:fc:a3:b2:4b:1c:0e:88:cf:6f:21:59:
a7:de:4f:5d:84:e6:51:69:6a:30:46:68:6c:b4:53:
be:b8:5f:da:62:82:7c:93:f3:c9:55:ce:97:42:12:
2e:3d:d7:4d:8f:cd:c9:2a:6c:c7:1b:4f:08:30:52:
3c:de:2e:1a:bc:af:b2:d1:59:ca:57:c8:88:64:52:
83:40:e3:dd:56:45:ed:fc:f8:ff:89:0f:18:c4:c8:
f1:69:f0:ba:14:c3:8b:77:ee:41:39:e8:85:c7:47:
6b:02:8a:df:69:ae:48:48:8f:81:f4:7b:14:a4:89:
e3:d0:55:e6:81:c7:39:54:7a:9c:30:14:ab:0f:92:
da:9d:4b:8f:f0:41:f3:96:54:f6:64:6e:e2:71:42:
21:34:a1:0a:0c:e6:76:31:64:2b:bc:b4:a6:cb:f8:
03:78:25:fb:ae:61:90:13:bf:07:f9:6e:ac:6e:8c:
65:a6:91:84:6a:4c:86:a7:75:7d:e3:b7:c9:0f:a4:
c2:f1:80:0b:23:1d:f6:e8:9f:bc:d4:64:3e:38:ee:
af:ed:c3:ea:2c:99:19:e5:74:8a:90:cd:c5:99:fd:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:99:E2:92:64:07:F9:33:FD:03:BF:86:E4:10:5D:08:23:3F:BE
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ff:90:cd:07:fe:3c:dd:6a:66:78:6c:70:60:93:06:9f:50:
cd:68:b1:9c:15:8b:02:76:43:d3:9f:68:de:d6:76:ca:19:ae:
7d:4b:ed:24:ed:ae:f3:0c:89:b8:4b:4a:b7:e8:58:c2:5f:77:
05:5f:53:3e:5c:fd:39:5d:39:6b:26:b3:fb:9b:c9:7c:d9:92:
8f:37:e6:97:67:9a:9f:7b:92:63:77:cb:2c:a9:cf:ad:ef:36:
f1:7a:b6:f3:bf:e0:14:c8:d5:25:4c:4e:4b:82:0a:eb:a3:54:
f8:14:59:0c:5b:8c:4e:d1:59:de:4e:61:1c:52:0e:8d:99:bf:
a8:01:e5:a2:19:46:4d:45:a4:bb:9f:aa:cc:7f:f2:18:5c:91:
40:63:24:38:2a:ce:6b:b3:50:c7:f5:62:94:be:48:18:6d:a5:
4d:0e:81:e5:ca:6b:f0:2a:16:1d:54:b4:74:90:99:46:7d:40:
b6:dc:d9:49:79:54:78:da:cd:fb:df:7d:5e:53:3a:52:ac:77:
b0:57:64:29:fe:39:cb:a2:72:9e:4a:5e:7f:17:48:e1:c7:d7:
70:44:f7:24:70:ae:3e:0c:68:ee:5b:bb:fd:9a:c6:1e:98:02:
c2:69:45:a8:15:4e:fa:d8:5c:48:d0:17:0a:2b:11:1f:88:3c:
21:65:b1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:11:09 2026 by rpki-client