Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: FyZvhBoi81qPwxdp4afOsJ9vXVVjI5XtQxDPik0RqKc=
Subject key identifier: EF:40:DD:CA:3D:E3:29:B0:88:91:68:5D:B9:E6:D9:B1:C9:C9:AE:8B
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 01A16E6E10417A33CCC6E67553F8807541CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 1379
Signing time: Sat 24 Oct 2026 15:01:08 +0000
Manifest this update: Sat 24 Oct 2026 15:01:08 +0000
Manifest next update: Sun 25 Oct 2026 15:01:08 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: kZcmU+O/7/GW6PZT6lAsUSAjKHy/S5w82csFN70ZDKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 12:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:10:41:7a:33:cc:c6:e6:75:53:f8:80:75:41:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Oct 24 15:01:08 2026 GMT
Not After : Oct 25 15:01:08 2026 GMT
Subject: CN=ef40ddca3de329b08891685db9e6d9b1c9c9ae8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8f:f3:93:7e:1b:98:6c:01:8c:0c:f5:77:be:
55:ca:bf:78:c3:d2:83:0f:41:64:5c:67:71:98:fa:
b7:6e:b2:95:3b:a1:5a:9b:be:e8:77:39:9d:08:70:
b1:fc:90:b4:d5:ca:69:56:a5:92:d4:f9:d7:cd:b2:
94:d4:05:ba:66:c1:6d:02:f8:30:7b:b4:31:8c:0b:
d9:a2:23:63:56:91:fd:58:bd:a4:da:94:66:a1:86:
d5:1d:66:80:1b:31:18:b4:d2:f0:be:72:06:f6:47:
60:f7:37:4c:aa:9e:38:30:79:89:24:92:ba:72:68:
38:b8:66:a5:76:17:ac:f5:47:14:ac:1a:b0:91:db:
1a:cd:5d:20:13:48:4e:0a:98:fa:eb:47:e6:7f:eb:
bd:fb:3f:17:9d:ac:e4:a2:71:6a:f9:ce:51:d5:17:
70:13:bf:3c:54:a7:c4:9b:54:3d:45:c2:41:b8:ca:
8a:72:f2:6e:27:49:63:73:5b:ad:98:98:69:67:9f:
af:a1:c1:41:ef:69:6d:c5:61:80:3b:35:aa:27:66:
b4:e7:cc:41:c9:4c:e6:ba:9b:5e:ef:44:7d:a7:7f:
c4:36:6f:21:94:79:69:12:5e:48:d8:0e:e2:b4:4c:
88:4e:22:42:08:cb:03:3e:1f:3e:70:1d:d2:6b:57:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:40:DD:CA:3D:E3:29:B0:88:91:68:5D:B9:E6:D9:B1:C9:C9:AE:8B
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4f:75:f2:94:4d:f4:87:ec:bf:27:c3:2b:59:f8:f8:4e:28:
25:bb:a9:67:af:cc:a1:05:4a:9c:14:f5:95:2f:22:4f:3d:30:
9e:f8:5c:b6:83:15:7b:ca:05:32:45:b0:a5:bc:22:4d:15:71:
63:a7:8d:29:d2:0f:9d:d9:db:02:f8:a3:bb:a9:51:6d:08:d0:
2c:da:d9:54:c7:40:d9:e0:17:bc:95:49:ec:bc:41:f6:b9:67:
92:1c:8b:db:7f:5c:7d:50:6a:cf:e4:54:59:ff:ea:72:05:b0:
c6:58:47:06:c2:a5:a2:67:d3:80:31:d0:35:45:f2:49:f2:ed:
7d:e2:24:28:68:74:de:22:1e:87:41:78:a0:6a:6c:92:18:2d:
e0:88:5e:67:74:c0:98:97:aa:60:31:d7:05:fa:78:44:f4:9a:
de:b9:b6:ae:88:a2:ba:16:b4:7d:ef:eb:3c:1d:07:4a:60:97:
fa:b4:45:ad:47:3d:14:4a:5e:d0:f9:fe:de:4f:11:ab:a8:5e:
51:2f:5c:4c:3e:41:a4:ab:86:05:e4:3b:d7:5d:eb:d2:25:28:
27:11:07:5e:db:c1:32:c5:c9:29:03:99:bf:0d:c0:a1:21:3d:
1b:04:ef:33:c5:23:c4:34:8b:7d:9d:a3:8e:e3:56:c2:4e:9b:
60:a6:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:32:13 2026 by rpki-client