Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: xfzqEBMNmwk8wkn7w/Lc9ZGfHzSfPOk9iAq6FW+ZWbU=
Subject key identifier: C8:81:CE:CB:63:95:CB:E4:D9:42:42:F6:28:47:85:B9:E6:DB:5D:3B
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 01A14DCFFFD4B2E97077B066FE045E7AE86F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 07:00:39 +0000
Manifest this update: Sun 18 Oct 2026 07:00:39 +0000
Manifest next update: Mon 19 Oct 2026 07:00:39 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: qFVK3tYKL0VZIFcQ3V4NiGWB+CfEi4lyaso4Ys5bU1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:cf:ff:d4:b2:e9:70:77:b0:66:fe:04:5e:7a:e8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Oct 18 07:00:39 2026 GMT
Not After : Oct 19 07:00:39 2026 GMT
Subject: CN=c881cecb6395cbe4d94242f6284785b9e6db5d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:40:90:6d:6b:f7:be:eb:4c:d9:f8:bb:44:ec:
c2:cc:e6:a2:57:2b:23:22:5a:68:22:2b:d1:e2:19:
c6:2f:6f:b5:46:9b:f7:1f:e4:e1:ff:d9:9e:c2:8b:
aa:9b:09:1d:3f:5d:c0:4c:10:fd:9b:9e:ba:c5:61:
ce:b9:4d:e1:bb:7b:d7:1d:0e:24:74:28:a5:6a:3b:
2c:c9:f4:de:32:aa:bd:e6:39:51:19:f8:1e:c8:b8:
d3:b2:d6:53:13:d6:70:ac:b6:97:4e:b4:bb:d4:7a:
94:4a:93:47:27:6c:64:33:bd:cc:8e:86:8b:3c:41:
f9:69:a5:65:c7:fc:a4:71:95:19:22:84:f1:34:78:
39:13:f4:57:19:68:7a:48:05:c4:d0:6f:fa:dc:34:
50:6f:1f:fa:30:4c:ab:a3:56:c7:f1:70:79:ad:11:
4d:3f:39:69:23:7a:c2:53:4c:4a:71:bd:88:6e:44:
ac:a5:8d:56:66:b9:e8:44:c1:3c:0c:0a:32:94:c9:
d9:c6:be:6d:5a:66:19:cd:40:28:05:d9:74:27:16:
1e:3e:58:29:9e:28:5f:65:54:cb:75:42:6a:7a:9d:
37:2a:70:41:e3:53:03:b4:c3:0b:61:6f:8f:30:de:
e9:04:3d:96:a9:0b:ba:91:a4:b0:21:e8:dd:6f:fe:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:81:CE:CB:63:95:CB:E4:D9:42:42:F6:28:47:85:B9:E6:DB:5D:3B
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a8:7a:83:c5:c8:47:d0:9c:b8:96:38:4f:d6:0d:1d:82:ec:
05:71:4d:2a:7a:a6:10:fe:9c:23:1e:f3:48:c1:cc:dd:4f:f7:
3a:0c:e3:fb:32:af:c1:76:64:d7:2d:2b:0d:25:31:e1:30:9a:
7d:6f:b7:e7:89:b1:80:9d:fb:1b:5e:cb:6b:2f:dd:0b:60:21:
85:6c:02:62:49:43:1f:17:e6:b4:2d:87:a0:07:a8:cd:25:91:
b4:44:56:45:82:5f:6f:fe:23:88:29:79:a3:39:bc:ff:bd:69:
4f:63:32:74:cc:57:b7:df:ae:91:5f:aa:78:fc:79:f1:5a:da:
93:48:23:eb:bb:b6:7d:73:9e:b9:92:b6:c9:60:9e:2e:11:24:
b0:e0:82:75:13:3e:5f:bc:8e:b6:f5:42:50:6e:b5:da:1a:27:
9e:44:c9:27:bb:7c:35:eb:ec:35:69:40:0e:9b:34:e8:93:bc:
69:29:1c:10:91:6b:13:b2:a5:d1:bb:75:c4:59:d1:59:eb:c3:
f5:7f:f9:11:cf:e0:69:11:5c:27:95:68:41:f2:ba:23:cc:c6:
10:f2:cb:44:66:f6:32:2c:76:0d:48:fe:0d:18:9b:63:b8:39:
63:bb:ff:f9:ae:55:3a:c2:62:8f:8e:11:99:de:f3:21:58:e1:
79:68:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:51:44 2026 by rpki-client