Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
File: U_rXyaSF_rKReT654tuY9BjlxLg.mft (raw, json)
Hash identifier: K6+BBfZW3BFxW6FAC11t8zNeTNkyYfBjH4uIy0v+75M=
Subject key identifier: 6B:AA:67:1A:C8:49:3A:BF:16:D0:61:35:3F:CA:59:EB:BA:97:AF:B8
Authority key identifier: 53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
Certificate issuer: /CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Certificate serial: 01A105B8014846309E679D5C47277E2040B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
Manifest number: 038C
Signing time: Sun 04 Oct 2026 07:01:47 +0000
Manifest this update: Sun 04 Oct 2026 07:01:47 +0000
Manifest next update: Mon 05 Oct 2026 07:01:47 +0000
Files and hashes: 1: U_rXyaSF_rKReT654tuY9BjlxLg.crl (hash: e1yCPgFVRiEQZ158SJH7dcLGFyCI+odiCo0/XK1cVAI=)
2: Yg4X9H4DWGGKD8H5YRPUUkoYlHw.roa (hash: 9JB+Ut5rRiBxCY40cvzaauAZdMWzFKX4dxG7GlKOoZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:b8:01:48:46:30:9e:67:9d:5c:47:27:7e:20:40:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53fad7c9a485feb291793eb9e2db98f418e5c4b8
Validity
Not Before: Oct 4 07:01:47 2026 GMT
Not After : Oct 5 07:01:47 2026 GMT
Subject: CN=6baa671ac8493abf16d061353fca59ebba97afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e7:71:e8:98:e3:fc:6c:e2:e9:7d:09:c8:64:
96:e7:82:3e:a7:27:48:b3:dd:41:a8:29:fb:cf:61:
85:85:18:93:3a:16:e7:8f:eb:1f:a3:66:c9:5e:91:
65:da:67:6a:36:60:07:d8:9a:68:e3:24:e0:04:bb:
30:0c:10:06:01:97:1b:9c:98:ab:2b:d7:38:03:c5:
1d:03:0e:00:c2:e3:b3:db:8e:fd:87:98:dc:07:97:
ca:12:df:66:c6:dd:c3:55:33:d9:60:cc:53:7e:6a:
70:ff:ce:68:82:a9:84:2d:2d:6f:ce:6f:7b:b2:4f:
93:a4:8d:9a:c9:cc:5c:80:20:0b:69:05:a6:bc:6a:
fb:c7:10:57:ca:74:f9:0e:aa:7f:42:39:96:ff:c4:
b6:61:71:03:11:a0:a1:87:a4:d1:a0:c3:65:14:a9:
04:c1:6d:63:84:48:80:9f:86:68:87:c6:08:22:4f:
52:37:4c:82:4a:b3:c2:41:40:34:2b:3a:7f:22:a8:
a2:b0:32:7c:18:5e:44:e6:6d:ef:d6:19:3f:e8:f0:
3f:b8:b8:ea:93:69:ca:d7:27:8a:84:5d:dd:d0:b2:
06:3b:02:84:e0:d6:51:8c:d8:cb:c3:7e:1e:8a:e8:
3e:c2:38:d9:43:73:72:0a:a4:6b:d1:9a:4b:99:2c:
00:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AA:67:1A:C8:49:3A:BF:16:D0:61:35:3F:CA:59:EB:BA:97:AF:B8
X509v3 Authority Key Identifier:
keyid:53:FA:D7:C9:A4:85:FE:B2:91:79:3E:B9:E2:DB:98:F4:18:E5:C4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_rXyaSF_rKReT654tuY9BjlxLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/5140e8-c7fc-48bf-960e-0f04c6a995fd/1/U_rXyaSF_rKReT654tuY9BjlxLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:3a:75:de:57:eb:02:27:85:53:5b:14:5f:8f:95:87:43:
34:36:74:dd:dc:01:4c:12:32:ff:74:89:a6:86:fa:07:b0:20:
b8:1c:8e:8e:a1:b3:42:c1:34:86:bd:ad:bb:ff:06:cc:56:50:
d0:e1:9a:ef:1e:9d:7c:66:2f:00:90:b9:a6:de:88:c9:f4:91:
95:82:cc:70:bc:1d:7c:71:07:ea:4d:63:29:21:0c:3c:88:8d:
f8:56:ee:a5:2e:ea:28:79:7b:84:a1:b2:08:ad:f7:9a:7e:72:
2a:92:61:e8:6b:d7:35:2f:61:0e:b4:bd:c3:9c:ab:b4:f1:c1:
1c:be:6d:f1:29:63:71:d6:83:0d:5f:10:24:8d:83:91:a8:26:
0a:ac:b9:82:de:77:6d:60:ca:53:f0:6f:53:f9:04:03:d6:51:
bc:ef:e1:2e:8f:cc:f1:ab:e8:f4:b5:8a:54:65:86:6d:9a:21:
10:46:a3:32:13:54:19:bb:83:db:3b:33:11:29:ef:0e:9e:b1:
b8:3a:e2:ee:8f:c1:04:eb:7c:b9:df:86:cf:07:76:c6:50:44:
cc:91:42:49:b9:88:37:3b:fd:25:01:66:70:91:0d:53:cc:ef:
2e:b3:a5:f1:f9:a4:d8:26:1b:f2:a4:6d:99:93:15:b5:f3:de:
80:8f:29:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:37:19 2026 by rpki-client