Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: jhcO38xgmAd2RFf4gpZk+dgpaRDDyfezYXx4EeW4ICQ=
Subject key identifier: 2B:82:F7:26:9E:C5:3B:17:A2:1F:2A:1F:BF:4A:78:90:F7:07:29:0F
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 01A18D53E8DFEC413F14D2DDE08DB833289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:00:48 +0000
Manifest this update: Fri 30 Oct 2026 15:00:48 +0000
Manifest next update: Sat 31 Oct 2026 15:00:48 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: y9/d15fNISoynbQKT370RRKtG0hq6Ka6pRV3sYmAOQc=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:e8:df:ec:41:3f:14:d2:dd:e0:8d:b8:33:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Oct 30 15:00:48 2026 GMT
Not After : Oct 31 15:00:48 2026 GMT
Subject: CN=2b82f7269ec53b17a21f2a1fbf4a7890f707290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:c5:8e:47:ff:d8:2c:a7:37:c3:69:55:37:
3f:10:31:ff:f7:fa:55:d4:5f:75:e3:a0:c6:1b:ae:
77:4c:96:09:1a:1e:eb:93:0e:0f:f5:de:87:70:9c:
ae:58:7d:9f:e5:0a:ab:bf:93:0e:9a:b8:11:51:1e:
88:bc:3d:fc:c1:a1:ec:32:5e:39:79:59:84:fa:96:
e6:1a:24:b6:ef:68:e0:62:ed:dc:8f:89:82:92:38:
12:71:e4:a6:e1:4c:21:1c:e8:80:f7:6a:4f:1b:fb:
cb:67:ff:2e:4e:6e:1e:f8:6d:f6:55:a5:c0:5b:6f:
71:a8:dc:73:7f:cb:7a:7e:27:0f:22:23:9b:10:01:
ee:fe:9d:d4:41:16:15:e3:ff:36:63:43:fb:96:bd:
4c:ac:7a:cf:51:57:6b:fc:6e:28:2b:fc:2a:7a:30:
2b:70:36:6e:cc:c3:aa:5f:15:1f:9b:e1:58:bc:25:
7e:4c:f1:89:04:fd:f0:77:dc:90:0d:59:57:09:f2:
0c:c1:37:84:5f:6f:27:af:f8:9d:6b:c9:4d:8d:ed:
53:09:b8:6e:96:35:53:f6:22:28:9b:fd:3d:c2:6d:
a1:e6:d6:94:b2:f9:6a:2a:b5:98:6b:43:f3:73:ab:
27:49:eb:90:4c:1b:b0:f4:f6:e7:49:2d:85:9d:73:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:F7:26:9E:C5:3B:17:A2:1F:2A:1F:BF:4A:78:90:F7:07:29:0F
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:31:73:b4:98:78:5d:b5:0b:49:64:b7:bd:68:ae:07:b4:ce:
b3:ad:e0:b0:6e:d7:e6:33:90:b9:ac:30:54:01:32:b8:8e:de:
d6:21:85:c5:3a:b3:2f:63:3d:8a:8e:f2:d7:db:79:28:ef:ed:
8b:4e:be:55:ae:84:29:c6:37:36:1b:03:77:63:86:3d:2f:c1:
33:8c:96:01:f7:f5:aa:6d:52:f9:f7:95:dc:b5:20:25:86:b5:
a6:5c:b3:2f:c3:3e:c3:db:1b:30:1c:cc:4c:de:ec:23:bd:54:
fd:94:87:bd:59:6d:a3:9d:72:6e:16:25:65:75:b8:f8:7d:e8:
77:d6:ee:02:a3:bc:68:e9:44:57:12:60:45:75:01:03:50:c8:
d5:9f:fa:1f:0f:f7:e5:9b:bd:7f:3c:16:29:01:ad:ea:fd:26:
c9:06:89:29:28:7d:bb:fe:ba:3e:4e:3d:6b:a4:9d:67:3e:51:
38:d8:b3:5a:f0:d2:98:aa:fc:60:35:28:02:51:55:18:cf:ea:
7e:a4:51:81:24:55:56:cb:7d:6a:ae:5f:69:46:eb:c7:da:d2:
b1:b9:04:dd:59:df:56:4a:f8:12:c9:5d:29:cb:10:f4:ec:19:
40:66:09:00:b3:f9:b0:ed:16:42:f9:82:fb:96:60:7d:1c:65:
48:4c:1e:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGNU+jf7EE/FNLd4I24MyifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzI1MDgyZGJlN2E0ZTkwMDQzYTMzMTcyM2ExN2YzNTdi
MTA1ZTkwHhcNMjYxMDMwMTUwMDQ4WhcNMjYxMDMxMTUwMDQ4WjAzMTEwLwYDVQQD
EygyYjgyZjcyNjllYzUzYjE3YTIxZjJhMWZiZjRhNzg5MGY3MDcyOTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfFjkf/2CynN8NpVTc/EDH/9/pV
1F9146DGG653TJYJGh7rkw4P9d6HcJyuWH2f5Qqrv5MOmrgRUR6IvD38waHsMl45
eVmE+pbmGiS272jgYu3cj4mCkjgSceSm4UwhHOiA92pPG/vLZ/8uTm4e+G32VaXA
W29xqNxzf8t6ficPIiObEAHu/p3UQRYV4/82Y0P7lr1MrHrPUVdr/G4oK/wqejAr
cDZuzMOqXxUfm+FYvCV+TPGJBP3wd9yQDVlXCfIMwTeEX28nr/ida8lNje1TCbhu
ljVT9iIom/09wm2h5taUsvlqKrWYa0Pzc6snSeuQTBuw9PbnSS2FnXMHvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuC9yaexTsXoh8qH79KeJD3BykPMB8GA1UdIwQY
MBaAFFFyUILb56TpAEOjMXI6F/NXsQXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85OWFmZWMtZDQxOC00NmYzLTk3ODIt
YTNiZGE0ZDg2Y2M3LzEvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85OWFmZWMtZDQxOC00NmYzLTk3ODItYTNiZGE0ZDg2Y2M3
LzEvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTFztJh4
XbULSWS3vWiuB7TOs63gsG7X5jOQuawwVAEyuI7e1iGFxTqzL2M9io7y19t5KO/t
i06+Va6EKcY3NhsDd2OGPS/BM4yWAff1qm1S+feV3LUgJYa1plyzL8M+w9sbMBzM
TN7sI71U/ZSHvVlto51ybhYlZXW4+H3od9buAqO8aOlEVxJgRXUBA1DI1Z/6Hw/3
5Zu9fzwWKQGt6v0myQaJKSh9u/66Pk49a6SdZz5RONizWvDSmKr8YDUoAlFVGM/q
fqRRgSRVVst9aq5faUbrx9rSsbkE3VnfVkr4EsldKcsQ9OwZQGYJALP5sO0WQvmC
+5ZgfRxlSEwemQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 16:50:42 2026 by rpki-client