Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: Mah+zio+HChhd3rCowEC/qImpnR8SwsqwyRNcFFbaWk=
Subject key identifier: A5:27:63:A4:FE:59:BD:97:E2:4C:16:7D:3B:E0:DB:5A:05:E5:F1:D6
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 01A15665DB03F42CF5716EB0B2066134E060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 1AB1
Signing time: Mon 19 Oct 2026 23:01:18 +0000
Manifest this update: Mon 19 Oct 2026 23:01:18 +0000
Manifest next update: Tue 20 Oct 2026 23:01:18 +0000
Files and hashes: 1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: OtndQJEboNnsGI2fm61uCfkAtI6kBfQqzV6FwvENc34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:65:db:03:f4:2c:f5:71:6e:b0:b2:06:61:34:e0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Oct 19 23:01:18 2026 GMT
Not After : Oct 20 23:01:18 2026 GMT
Subject: CN=a52763a4fe59bd97e24c167d3be0db5a05e5f1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:9e:e6:21:af:b3:4a:05:ce:d2:3a:53:32:
6f:01:f6:c3:96:78:d6:f5:6e:f9:6f:01:e5:42:27:
c6:ee:bc:fd:30:02:20:2c:c2:51:72:9f:08:8c:53:
58:60:e7:c5:bb:43:4a:58:96:44:b8:14:d8:4a:16:
1e:dd:d3:1f:99:62:57:2d:82:81:87:c7:1a:13:ee:
d8:ba:f0:d7:5f:d4:d4:fa:a5:0f:5e:51:c8:d0:dd:
e1:83:8e:95:02:eb:b7:85:50:a8:09:4b:94:54:9e:
19:d4:f3:96:99:be:a3:a1:ed:c3:66:f7:9b:35:3b:
96:da:ff:4c:6c:84:f0:88:6f:ff:76:22:7b:77:e8:
ad:0b:fb:06:6f:98:b4:dc:f2:37:f9:d8:6f:cf:44:
da:fb:b0:d1:a2:71:24:66:6e:71:14:2e:09:f1:47:
94:01:3d:d8:50:40:01:73:d3:ea:1b:7c:bd:c5:4c:
a6:7a:b5:f0:6b:11:d5:d3:2c:61:80:fe:71:17:77:
17:db:7f:d5:25:02:54:ae:e7:b1:87:26:bc:d3:31:
f1:23:28:c0:d4:bf:d0:3c:68:58:14:5b:c2:ba:4b:
b7:b3:99:81:d4:d0:b9:78:ce:79:9f:37:05:72:eb:
84:01:2b:62:83:12:0e:c3:ae:55:11:3e:2b:c4:d1:
8e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:63:A4:FE:59:BD:97:E2:4C:16:7D:3B:E0:DB:5A:05:E5:F1:D6
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6d:2c:c7:09:a5:d0:a6:20:a7:28:b4:6d:b5:39:be:43:fb:
ff:aa:0d:41:6f:66:96:35:35:28:89:3c:bc:5c:70:3f:38:c6:
18:01:d3:2a:b9:df:38:01:bc:02:97:3d:bb:0d:b5:ca:f9:12:
71:05:1f:c5:09:45:f9:6b:44:90:90:b7:15:42:bd:c4:fa:bb:
f4:43:5e:0c:55:8c:a0:76:6b:f2:df:e6:16:f0:6d:ab:9d:25:
1d:66:2b:f4:75:44:9d:99:ad:dd:92:83:5d:2d:7c:e8:17:52:
d9:2c:47:0a:be:fa:ed:05:f8:f6:35:33:6a:b0:3e:ff:51:f5:
9e:ad:32:ff:a2:2b:d8:56:7c:e0:0b:d4:1d:06:51:ef:41:f9:
a3:35:4c:61:48:c8:b1:ec:d5:b8:79:69:60:fa:c5:38:3c:67:
7b:56:87:68:1d:92:3a:11:b8:ea:1f:4b:4c:1c:fc:b8:8b:37:
7f:51:b3:b2:34:1b:a5:3e:89:60:c5:5f:b5:ce:e5:2f:05:cb:
c1:27:93:02:43:80:2d:8c:f7:1b:8e:c9:6d:a6:5d:09:73:a2:
a3:5c:ec:3e:bc:30:04:00:f0:a8:13:21:ef:ce:6f:95:2d:61:
05:1f:b5:6a:53:83:a3:cb:27:67:e1:4a:d3:bb:eb:1a:58:4a:
e2:be:21:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:03:56 2026 by rpki-client