Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: 4cIR+vvqfUYs47ouMI+zeBtbsVicheB/bED9djMlXi4=
Subject key identifier: D4:13:6B:37:AA:13:55:D7:5E:0C:EE:7C:FD:E4:5C:BD:11:F2:2B:F9
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 01A16EA4A44FC69FAD75EBC9B991D86F4BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 1218
Signing time: Sat 24 Oct 2026 16:00:45 +0000
Manifest this update: Sat 24 Oct 2026 16:00:45 +0000
Manifest next update: Sun 25 Oct 2026 16:00:45 +0000
Files and hashes: 1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: cEWCZnPIYeTAIUZI/+Y16g6GuPn8vV+XXNy7mfuy8+4=)
3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:a4:4f:c6:9f:ad:75:eb:c9:b9:91:d8:6f:4b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Oct 24 16:00:45 2026 GMT
Not After : Oct 25 16:00:45 2026 GMT
Subject: CN=d4136b37aa1355d75e0cee7cfde45cbd11f22bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:62:1d:62:ec:06:51:31:be:8b:78:75:3c:
6d:57:69:89:2e:4f:ba:e8:3e:5c:68:06:5d:9b:9b:
96:99:98:79:45:fc:04:f4:49:f0:fa:df:80:d2:c0:
5f:46:9b:25:ff:ec:ef:52:bc:44:2b:bf:c0:67:5e:
30:43:9a:0e:51:de:c5:14:09:01:50:ca:80:ab:bc:
2f:ed:7e:b7:3a:be:58:67:61:fc:f0:ff:d9:42:88:
d9:21:9c:dc:04:8e:6b:0c:4a:0d:c0:31:ff:e7:6b:
76:97:c4:0b:21:82:82:10:ac:c8:5f:43:6a:f7:e0:
81:25:8b:f6:f2:61:9e:3d:44:2d:f8:e2:bf:86:5c:
d1:d9:f0:44:67:a6:29:2c:e8:fa:d1:f3:b3:fe:92:
b1:70:fa:84:fe:52:fe:66:09:ed:25:04:d6:83:2e:
70:0b:11:91:34:53:29:37:80:3a:31:e7:df:43:2d:
59:5b:19:67:e3:0f:b8:9d:2a:c2:8f:4c:dc:aa:a7:
dc:5c:87:bb:53:1c:03:21:c9:ed:0a:03:4c:cb:b8:
d9:9f:ef:8f:c2:07:6a:2b:c3:fa:cb:0f:58:34:59:
92:9c:a2:19:c2:73:33:a1:0c:76:12:a7:9d:81:e3:
18:e2:c6:e3:39:ab:51:32:6a:32:0c:01:4c:1e:85:
39:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:13:6B:37:AA:13:55:D7:5E:0C:EE:7C:FD:E4:5C:BD:11:F2:2B:F9
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d4:03:e6:c6:bb:4c:f9:25:ab:a9:6c:20:88:1c:e3:03:dc:
a7:56:16:97:40:04:7e:5b:a2:3b:a1:be:fb:97:83:b5:30:03:
42:56:95:62:a5:1d:3e:6f:bc:66:7c:39:78:8e:11:42:7d:59:
9d:09:28:c6:c7:71:d2:a7:fa:bf:b4:d1:9f:2c:c9:91:73:08:
7d:89:c7:ee:ea:ec:1b:49:8d:38:51:3b:6a:9f:4d:71:a0:cf:
4b:0f:79:91:d3:22:f0:26:63:fa:02:8b:90:5d:51:36:f3:a3:
22:27:1a:fe:da:26:7c:aa:0f:d0:2a:11:11:17:f7:fb:0a:45:
98:c4:af:e0:12:0b:9b:9b:9a:d2:ae:b7:51:58:08:31:4d:5a:
09:b6:62:bb:e1:81:fb:a7:6e:a2:87:2d:11:64:7d:90:86:b5:
57:19:25:8e:2f:d4:51:24:cb:f6:67:40:21:8a:ae:70:e0:16:
1e:31:da:ca:ab:00:ab:70:a5:24:93:86:64:26:36:40:8a:4f:
49:f2:a1:db:35:b6:96:86:d6:87:76:ad:9b:63:13:2b:71:21:
d2:de:24:4b:ea:60:13:5f:7f:3c:cf:62:e2:eb:1c:83:42:e4:
6e:28:55:f8:ed:2b:f9:e6:d4:bf:bf:f9:dd:09:2e:f5:27:a9:
46:94:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:40:42 2026 by rpki-client