Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: EMO3PLVuwhMuyed5pSQyx3GMzVBRFNM/QCBPgARl7HE=
Subject key identifier: 28:99:0A:49:94:2E:F7:B0:C9:3B:51:02:6F:43:3D:52:68:BB:1D:AC
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01A13290F103EC515B7781FAD978201F94AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1858
Signing time: Tue 13 Oct 2026 00:02:02 +0000
Manifest this update: Tue 13 Oct 2026 00:02:02 +0000
Manifest next update: Wed 14 Oct 2026 00:02:02 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: cSud09mxOfuXTM234k59LsAFSlvCCuRVUvVdikf1TGI=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:f1:03:ec:51:5b:77:81:fa:d9:78:20:1f:94:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Oct 13 00:02:02 2026 GMT
Not After : Oct 14 00:02:02 2026 GMT
Subject: CN=28990a49942ef7b0c93b51026f433d5268bb1dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:68:bc:d0:f2:95:4f:d7:1d:b0:c3:88:83:
b6:f3:d0:9c:bb:1d:43:88:6a:90:d4:8c:0f:85:62:
7e:f7:1d:29:34:7f:c2:0e:b7:3b:55:53:8f:c5:cf:
00:99:03:6f:24:24:9b:f2:79:c7:1c:29:eb:27:7e:
80:2b:3c:d3:a9:46:76:b9:ff:ac:77:24:42:08:3d:
8f:26:72:4a:69:05:bb:e9:ef:b3:c2:bb:ad:36:5d:
4c:97:63:c2:99:88:50:e7:aa:ff:b2:ce:02:5a:63:
55:5e:80:29:5b:c7:69:2a:82:08:69:3f:1f:a3:cc:
29:98:4f:1f:0e:92:23:ac:64:7e:b0:c2:20:1d:f0:
0d:ff:f9:ac:ee:c6:b7:82:96:a1:b6:2e:01:9e:eb:
4a:f9:ef:7e:bf:4b:67:05:9c:ed:6e:39:67:9a:bc:
d2:a8:f6:74:32:59:a6:92:a6:de:a3:53:79:c5:f0:
6e:3a:4f:c2:71:21:d6:c8:8d:81:06:03:5a:93:cf:
cf:3b:9b:da:7b:57:ef:d0:7a:d9:d3:3b:a5:56:61:
07:13:f8:32:93:63:28:6a:49:d0:c1:70:88:57:b8:
3d:14:79:a7:b6:f5:b6:25:da:7a:6d:e7:24:49:e6:
38:b9:d0:05:e2:ce:fe:e5:95:3f:87:a2:e6:9e:6c:
af:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:99:0A:49:94:2E:F7:B0:C9:3B:51:02:6F:43:3D:52:68:BB:1D:AC
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:fb:e1:e5:8e:86:b4:46:d8:15:cc:c6:03:b2:51:d5:30:4e:
fb:92:8b:75:5c:43:3f:dd:a8:06:fa:90:c7:72:1c:81:59:01:
57:78:36:06:f1:49:6a:84:0e:16:0b:6d:74:e1:c4:d3:20:77:
af:15:27:80:fe:ea:2b:a4:49:e3:94:50:e5:b8:c0:54:99:c0:
27:1c:ca:f0:12:45:9d:30:f1:52:a8:46:2b:d9:7f:83:ef:35:
69:0e:b6:f1:f5:5c:66:f1:c4:b1:62:cb:2c:54:45:69:a8:a3:
19:d9:da:d5:e3:95:85:3e:bb:7f:81:eb:9a:1d:66:e7:11:6f:
dc:85:0e:e3:7b:e6:7c:df:e1:b1:bf:6e:4d:89:c6:89:9b:82:
59:55:a4:e6:f2:49:64:31:ff:7c:40:e9:2f:87:6c:2b:1d:95:
4a:76:ea:36:1a:d9:a3:ce:b5:15:bd:9e:47:10:07:05:a9:a5:
38:1a:63:77:47:2d:e5:cd:32:c1:cc:68:32:9a:41:e5:28:18:
b7:a3:28:86:dc:55:ef:30:fd:de:96:d6:e4:16:b2:fa:da:88:
e1:88:c4:e5:5e:ae:42:6a:87:b8:4d:0b:aa:e9:86:69:63:83:
93:ea:21:f0:4c:56:dd:ea:9b:21:df:17:07:ed:96:6c:71:d5:
23:20:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:18:01 2026 by rpki-client