Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: jl7hJ3XlwlT6pQU2TSccinPRrlJyXcgCGGREqVJvd/w=
Subject key identifier: 4D:33:EC:57:0C:BB:E7:6B:38:51:27:FE:3A:32:21:90:49:1E:E1:41
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 01A1DE395F0438D706FBF21593374F8EE84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 094E
Signing time: Sun 15 Nov 2026 08:01:04 +0000
Manifest this update: Sun 15 Nov 2026 08:01:04 +0000
Manifest next update: Mon 16 Nov 2026 08:01:04 +0000
Files and hashes: 1: FkGFSTiq5BTDIV0uKenhvjL2tcI.asa (hash: Y5X3Z8T/UCk94Wms3MTRlVD25xL3eqTFHoV5OpErNXQ=)
2: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: wtdAUEqyWNhmMhYqgwHEg9SQjk5dGlB/o4NxpB/lc3I=)
3: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:5f:04:38:d7:06:fb:f2:15:93:37:4f:8e:e8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Nov 15 08:01:04 2026 GMT
Not After : Nov 16 08:01:04 2026 GMT
Subject: CN=4d33ec570cbbe76b385127fe3a322190491ee141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:d1:d9:e3:70:cb:44:83:da:f8:b0:a2:b2:
16:fb:5c:f8:5a:a1:53:72:db:1f:9b:17:a7:1d:1a:
52:cd:bf:21:62:cd:9a:69:7d:90:8e:2d:f0:d7:cf:
57:1d:43:b7:0a:58:1a:e2:81:dd:28:a2:d7:00:37:
1c:07:ec:a8:ef:31:c8:3f:69:14:c1:b2:0d:27:fc:
96:3e:4c:d1:45:b4:e7:d0:b3:c1:4e:c7:83:1d:3b:
06:6a:7f:f8:74:42:28:1c:f2:97:f5:0c:08:5a:3c:
82:c3:bf:a7:57:99:cf:92:6c:f5:3c:24:f9:2c:a7:
c8:43:6b:21:10:03:4c:58:b4:85:57:9b:e4:27:ef:
ab:01:f2:bf:24:7f:1d:cb:ac:f9:16:36:b5:a0:08:
01:35:7f:59:50:fa:06:ee:58:6a:9a:7e:af:3a:9c:
0c:b0:a5:8e:2a:75:b0:48:5b:a3:7b:8f:53:30:c1:
63:4c:f6:3e:8e:0f:01:44:d2:48:cc:10:72:2b:2d:
a9:dc:a1:26:99:e8:20:f2:cf:fe:ce:6d:28:0e:e0:
26:ac:5b:cb:28:04:4d:c2:d4:cf:c6:a4:e2:37:60:
e9:d3:21:dc:2d:f1:50:91:a6:14:5f:cf:9c:25:5e:
dd:6e:02:e0:7a:ec:2f:1b:a0:95:ae:d7:4d:bc:7c:
84:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:33:EC:57:0C:BB:E7:6B:38:51:27:FE:3A:32:21:90:49:1E:E1:41
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:01:ec:54:0b:b8:0b:41:5e:03:ee:1e:e2:a0:99:6d:19:28:
ac:6d:f6:85:2c:73:88:b1:9e:e4:7a:e5:53:57:06:ae:ec:51:
35:0d:ed:f7:38:ff:93:fa:4d:84:7b:c5:eb:71:19:9b:c4:2a:
88:6e:c8:ae:4b:c7:0a:99:24:ea:f4:4f:a3:99:79:70:49:e9:
21:cc:f1:d2:76:6e:36:c6:2b:97:e3:9c:d5:3b:c5:52:ea:7a:
5f:28:76:f9:1b:bd:12:a4:9e:c9:f9:ec:62:38:ac:5f:23:15:
ca:ed:be:ca:ba:6d:c9:7d:97:8f:9a:bb:8e:e6:11:27:0b:ee:
ff:84:f2:b4:42:ac:fb:47:37:ee:c8:09:47:a7:9a:5d:82:87:
3e:e3:70:bf:96:a1:dd:26:dd:e9:9f:b8:dc:c7:c4:fc:2d:59:
2d:98:18:89:fe:c3:38:c0:00:a0:22:a3:aa:0e:bf:86:05:0f:
00:d2:ac:4d:4c:cc:f1:69:52:72:0a:2e:50:4b:37:f2:da:7e:
c2:53:9a:69:22:60:03:e9:31:b9:ca:1b:88:e1:7f:2c:90:48:
ba:c6:40:6e:76:67:87:50:9c:1e:33:62:22:74:49:f8:37:cd:
59:83:36:72:b1:55:57:08:2d:37:3e:9a:da:57:fa:7d:f5:20:
54:99:2c:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOV8EONcG+/IVkzdPjuhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NmRkYWJmYzQ4OTUyYmVlMjZkNmQ1ZjgyODgzMWY1OTZh
MTU0ZTkwHhcNMjYxMTE1MDgwMTA0WhcNMjYxMTE2MDgwMTA0WjAzMTEwLwYDVQQD
Eyg0ZDMzZWM1NzBjYmJlNzZiMzg1MTI3ZmUzYTMyMjE5MDQ5MWVlMTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nHR2eNwy0SD2viworIW+1z4WqFT
ctsfmxenHRpSzb8hYs2aaX2Qji3w189XHUO3Clga4oHdKKLXADccB+yo7zHIP2kU
wbINJ/yWPkzRRbTn0LPBTseDHTsGan/4dEIoHPKX9QwIWjyCw7+nV5nPkmz1PCT5
LKfIQ2shEANMWLSFV5vkJ++rAfK/JH8dy6z5Fja1oAgBNX9ZUPoG7lhqmn6vOpwM
sKWOKnWwSFuje49TMMFjTPY+jg8BRNJIzBByKy2p3KEmmegg8s/+zm0oDuAmrFvL
KARNwtTPxqTiN2Dp0yHcLfFQkaYUX8+cJV7dbgLgeuwvG6CVrtdNvHyENwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0z7FcMu+drOFEn/joyIZBJHuFBMB8GA1UdIwQY
MBaAFLht2r/EiVK+4m1tX4KIMfWWoVTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTIt
N2RlYThmZmYyZTA4LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy82Njc5ZjQtOTE2NS00YThiLTg4OTItN2RlYThmZmYyZTA4
LzEvdUczYXY4U0pVcjdpYlcxZmdvZ3g5WmFoVk9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwHsVAu4
C0FeA+4e4qCZbRkorG32hSxziLGe5HrlU1cGruxRNQ3t9zj/k/pNhHvF63EZm8Qq
iG7IrkvHCpkk6vRPo5l5cEnpIczx0nZuNsYrl+Oc1TvFUup6Xyh2+Ru9EqSeyfns
YjisXyMVyu2+yrptyX2Xj5q7juYRJwvu/4TytEKs+0c37sgJR6eaXYKHPuNwv5ah
3Sbd6Z+43MfE/C1ZLZgYif7DOMAAoCKjqg6/hgUPANKsTUzM8WlScgouUEs38tp+
wlOaaSJgA+kxucobiOF/LJBIusZAbnZnh1CcHjNiInRJ+DfNWYM2crFVVwgtNz6a
2lf6ffUgVJksxQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:36:15 2026 by rpki-client