Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: ZbVyoUCD5SEL+3iAoE5bXnIo2EO9fKJK0pSoOXGRc/Y=
Subject key identifier: 1C:70:1C:8B:DA:85:2D:29:3D:A4:73:D4:DA:70:5D:F1:EF:98:F4:84
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 01A1547777FDE9EC858708242026DFCF1E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 1AB0
Signing time: Mon 19 Oct 2026 14:01:17 +0000
Manifest this update: Mon 19 Oct 2026 14:01:17 +0000
Manifest next update: Tue 20 Oct 2026 14:01:17 +0000
Files and hashes: 1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: kIprUeDjbMbinBzLafX2Z84UWxDQLoHWBb3GiOcrhVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:77:fd:e9:ec:85:87:08:24:20:26:df:cf:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Oct 19 14:01:17 2026 GMT
Not After : Oct 20 14:01:17 2026 GMT
Subject: CN=1c701c8bda852d293da473d4da705df1ef98f484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f0:81:12:04:e6:5f:ac:12:79:5b:d2:56:33:
4e:29:1a:1b:ad:ac:91:fb:f9:e6:b0:32:21:10:45:
c1:1f:4c:8c:74:f2:6a:d4:47:ff:31:e5:58:e1:d8:
13:b4:09:e6:11:4c:69:20:1e:7a:d9:ad:b4:b6:85:
e2:04:e8:77:67:78:83:26:39:1f:18:19:1b:43:ed:
7a:6b:70:9b:c7:98:79:b7:dd:d4:a1:5a:0e:1a:60:
55:85:5d:d0:24:3b:bc:30:45:91:a3:e9:a8:52:1e:
b3:50:3b:32:61:08:78:72:d8:95:e9:33:01:25:c7:
fd:35:45:10:8d:82:27:14:df:0d:3b:ff:e6:69:85:
a7:e2:5b:3a:4b:8d:f7:dc:7b:ab:ca:b2:29:0e:e0:
64:7e:34:42:29:b3:32:2a:01:9c:5d:52:4a:e8:3f:
bc:0b:25:c9:6b:eb:38:e7:97:ed:62:d0:3b:29:b2:
63:41:6d:01:83:19:bf:c8:c1:39:6b:5b:de:93:17:
3c:b3:c2:fb:78:b9:3a:e3:43:6b:fe:57:80:6a:ac:
39:68:ca:ec:17:52:bb:d8:a8:0c:4b:f1:d1:5d:dc:
64:61:2e:41:23:43:3b:ad:02:b5:4a:e2:24:d1:f9:
8f:00:e0:45:13:94:b4:6d:e2:30:62:d0:f4:14:89:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:1C:8B:DA:85:2D:29:3D:A4:73:D4:DA:70:5D:F1:EF:98:F4:84
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c6:e9:f9:18:91:7c:9c:49:db:ae:94:a4:29:72:3d:49:e7:
7a:7c:f0:31:bd:0c:73:ce:a6:eb:e6:bd:a5:40:7d:57:aa:a1:
44:5c:57:69:0c:bd:5c:f1:04:08:b5:1e:80:ed:e7:ca:97:fc:
ed:a3:a5:ba:b4:d6:05:0f:90:98:89:4b:98:90:1d:db:ee:34:
0b:9a:a5:63:9e:19:fd:b4:95:b7:50:6a:63:4c:18:69:82:92:
87:ff:11:5d:db:a9:3c:d5:79:fc:d5:16:27:6e:3d:fc:66:44:
58:0b:53:6c:70:9d:16:e1:d8:ff:0e:ae:d8:16:52:cf:b0:2a:
03:9d:b0:2d:38:e7:d4:e1:28:c0:5d:ff:61:61:fd:e2:c3:23:
89:ad:32:07:55:bb:21:92:5c:b1:1a:5e:16:21:9b:50:c5:cc:
0d:f3:0c:69:47:06:c8:87:af:38:23:ad:07:10:6b:21:32:e6:
07:b0:dd:05:03:44:88:36:3e:15:22:47:e8:47:d2:2e:b6:c5:
1e:7c:da:74:36:2e:e8:fc:42:75:92:79:34:59:92:11:cd:0b:
ce:d7:ea:ed:da:e5:7e:83:89:c4:79:02:13:a7:17:ad:2b:48:
22:6a:60:ab:cd:25:ab:00:ed:e0:90:04:d7:6d:c7:51:1a:cf:
c7:50:5a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:50:24 2026 by rpki-client