Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
File: ujG8-SPF8lyvvavf3UblEfld8NE.mft (raw, json)
Hash identifier: iHGyjUJRwbBPIzQZZ+xnxh/Xoeaxytkk/Cf1cuDcB9Q=
Subject key identifier: CD:0D:98:20:B2:4D:9A:92:44:71:AB:33:3B:B3:6D:03:9B:B2:5B:E8
Authority key identifier: BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
Certificate issuer: /CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Certificate serial: 01A197D74819F5DA14F64991B768CD141557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
Manifest number: 1AE3
Signing time: Sun 01 Nov 2026 16:00:30 +0000
Manifest this update: Sun 01 Nov 2026 16:00:30 +0000
Manifest next update: Mon 02 Nov 2026 16:00:30 +0000
Files and hashes: 1: 8-xxpDwUI-SMOUJkeoKUw4jnrSU.roa (hash: ltI8pUplbk09D+p72n3xemvqUOhES2+4gjg9EzenNiU=)
2: RmvPAWbj_XcB62TPDMPL7nVrWRg.roa (hash: dg98lrwCVVp6N+sZOL3UlutJNWjeHKVRwUZrHFAjOcw=)
3: bNRuTlB0fzyI9CGmSgXBXA-B5so.roa (hash: 3U824o26TdTCJO0oNfs1eyzOIoGDTofZcJsuKnrhEM0=)
4: cZ8kvN2zYx2_I2osJ7iM_ygXnTw.roa (hash: Po1Sl6+19ysmuX4vxEqFxRVJ7iUNhtQroKjjE4MBrwI=)
5: kBUNjbSsmm7Mn3Q5G8pHzfSdrJM.roa (hash: btnz9PZAp3acMBNeW36Iy/hL1kzMf0nqH+ga7/me2mw=)
6: ujG8-SPF8lyvvavf3UblEfld8NE.crl (hash: HcS52ViKX8JeHAzWz6wGGMtRhtvUjAPfEpnRoyqefXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:d7:48:19:f5:da:14:f6:49:91:b7:68:cd:14:15:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba31bcf923c5f25cafbdabdfdd46e511f95df0d1
Validity
Not Before: Nov 1 16:00:30 2026 GMT
Not After : Nov 2 16:00:30 2026 GMT
Subject: CN=cd0d9820b24d9a924471ab333bb36d039bb25be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a0:d4:be:f1:14:15:49:4b:e0:06:24:7c:d5:
22:81:8a:2b:7c:01:ce:34:22:68:55:cf:b3:50:a6:
dd:8d:7a:f4:48:c0:cb:d7:76:3b:08:52:fd:24:28:
73:e7:f8:30:ca:bd:7e:68:1f:8f:30:84:c9:a4:ac:
5b:ee:61:c4:97:d3:e2:a0:cb:32:01:63:78:aa:2c:
22:55:6a:ee:06:1c:da:59:a0:c3:ea:d3:8d:9a:f6:
86:40:ef:66:4b:8a:39:9b:56:37:54:22:25:97:a7:
ec:cb:82:92:72:e7:a6:89:bd:ca:6e:88:89:f2:6d:
5b:1c:82:66:cf:74:77:44:8c:ae:fd:1e:a9:2a:cf:
7a:d9:22:46:85:17:11:25:62:ec:4a:42:72:dc:e5:
91:12:2e:ab:9a:de:0c:22:df:52:49:c9:11:68:93:
ab:ca:78:20:ed:65:04:a5:51:0d:f8:48:96:0b:f5:
14:f2:a8:8d:03:cb:5f:37:1d:c4:ce:c0:e9:3e:6b:
f9:cd:a7:14:06:78:01:32:c5:4d:e4:c6:6c:5f:8b:
b2:0e:70:af:21:a4:87:c0:dd:d0:68:72:d9:76:2b:
d7:2d:fd:39:77:26:d8:33:0a:4c:76:a0:e1:0d:b4:
5f:60:91:84:21:2a:9e:c8:39:16:87:b4:ce:b9:a5:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:98:20:B2:4D:9A:92:44:71:AB:33:3B:B3:6D:03:9B:B2:5B:E8
X509v3 Authority Key Identifier:
keyid:BA:31:BC:F9:23:C5:F2:5C:AF:BD:AB:DF:DD:46:E5:11:F9:5D:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujG8-SPF8lyvvavf3UblEfld8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76a7f1-748d-406c-a51f-1ba343f17ec2/1/ujG8-SPF8lyvvavf3UblEfld8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d2:6e:04:cb:a5:0d:86:71:45:24:7b:72:f8:16:4c:aa:37:
1f:18:12:11:92:af:47:14:2b:11:49:4a:77:b2:ab:0b:f1:3a:
f4:ca:ad:0a:4f:c1:f2:5b:7f:58:aa:47:b6:d8:06:f7:80:1c:
df:7c:7b:1f:f3:04:11:5b:c5:e1:bf:d1:f2:1f:0a:47:fc:56:
45:a1:89:35:46:6c:6a:aa:30:d0:c7:ef:c2:fe:11:73:14:85:
1d:14:7a:d6:a6:9e:9e:c0:45:e9:1f:f4:cf:88:1c:bb:6f:b6:
3d:25:33:bc:3d:96:2e:c8:b2:6f:e5:89:2c:d1:23:3e:33:b6:
98:f1:c4:50:3e:cb:00:1a:68:61:19:a4:a5:53:b0:c6:2e:0f:
c6:b2:ce:78:d9:4d:d8:e1:64:b4:81:64:97:0b:97:ae:d7:7f:
45:85:7c:2b:b1:e2:d1:38:19:0d:7b:59:9e:5f:2e:d3:f5:42:
63:e5:1f:da:65:7c:4a:7a:f4:87:b1:d8:66:b8:22:e8:68:01:
5f:22:8d:aa:18:c1:db:00:52:cd:2d:1d:0c:b9:81:01:26:13:
8f:46:47:bb:28:fe:76:da:06:79:5b:2c:02:74:ca:7f:4c:c4:
49:9f:5e:85:69:ed:bf:2b:30:71:f6:9a:c9:e3:e9:cf:c2:df:
2f:3d:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:42:58 2026 by rpki-client