Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
File: UWyzDNsJEok_oG5StXA266007_g.mft (raw, json)
Hash identifier: uES3NR/V080q/jPDELWbb3UQfiFDiM3YP1u6DIuUsWk=
Subject key identifier: C0:8A:F3:F4:74:82:67:8A:9D:08:34:B0:6A:34:86:4D:C9:B8:9F:6A
Authority key identifier: 51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
Certificate issuer: /CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Certificate serial: 01A17ADF9E5B8735962FCC25848977E5BDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
Manifest number: 01CE
Signing time: Tue 27 Oct 2026 01:00:37 +0000
Manifest this update: Tue 27 Oct 2026 01:00:37 +0000
Manifest next update: Wed 28 Oct 2026 01:00:37 +0000
Files and hashes: 1: UWyzDNsJEok_oG5StXA266007_g.crl (hash: 3JVvJ1+M3WdHG0Bf9+Zqt1/uQgytGgFk5oim1VvihwQ=)
2: dHTSZG8TdSuv5jgCShEUGqyvGiw.roa (hash: +ZC5a7s6sH7l7SttQEXeVRNgey70bU4V9g0KHoqIO/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:df:9e:5b:87:35:96:2f:cc:25:84:89:77:e5:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=516cb30cdb0912893fa06e52b57036ebad34eff8
Validity
Not Before: Oct 27 01:00:37 2026 GMT
Not After : Oct 28 01:00:37 2026 GMT
Subject: CN=c08af3f47482678a9d0834b06a34864dc9b89f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:7e:67:98:b7:57:6c:17:8c:e5:4d:c1:1b:
36:8b:60:7a:f8:69:9d:5b:7e:f4:e3:18:11:67:79:
b4:ad:cb:9b:27:49:80:06:b8:dd:01:f0:92:87:dc:
11:a0:95:91:5b:d8:43:c7:08:16:fa:75:b7:18:43:
ee:7a:af:d9:fb:20:91:38:6a:9b:52:5a:77:b7:5e:
b2:03:db:dd:76:14:51:d1:44:e5:ee:6e:10:63:58:
0e:4e:25:4e:4d:a7:17:62:54:4f:5a:eb:72:fe:e2:
0d:0a:d3:19:a1:cd:96:aa:13:29:64:a6:f7:d1:76:
37:da:1f:00:b6:41:1a:6b:47:54:d8:86:4e:fc:84:
57:91:cb:d5:4b:44:3a:da:6a:67:46:d7:78:d3:e6:
b0:3f:a0:6b:a2:a5:98:e2:c9:dd:cd:98:e9:01:db:
5a:56:4c:87:d3:4c:11:83:16:c3:2f:8f:d8:5d:a9:
81:47:84:0e:79:ca:79:c5:7e:ad:6d:ae:e2:a6:2c:
35:c0:58:39:2e:65:9a:75:54:8e:e3:b1:9c:70:00:
56:b3:bd:0d:1f:7d:06:af:d3:e1:8c:58:70:b2:3e:
b2:79:e2:91:ad:f1:e7:38:c8:c8:c7:bd:3f:4d:86:
e6:e6:2b:30:bc:9b:bc:e0:05:ae:76:eb:85:78:ca:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:F3:F4:74:82:67:8A:9D:08:34:B0:6A:34:86:4D:C9:B8:9F:6A
X509v3 Authority Key Identifier:
keyid:51:6C:B3:0C:DB:09:12:89:3F:A0:6E:52:B5:70:36:EB:AD:34:EF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWyzDNsJEok_oG5StXA266007_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/0e0f62-c49a-4ffe-bc70-12c617b0f674/1/UWyzDNsJEok_oG5StXA266007_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:0e:ed:72:e1:e6:93:09:47:38:30:9a:f7:17:8d:da:8c:5b:
a5:c5:08:c5:5e:93:d0:c5:29:53:ae:88:4a:bf:e6:88:2b:9f:
5a:34:dd:93:7f:48:3f:66:16:dd:2d:f4:84:3a:45:56:11:54:
7f:a0:8a:3e:13:39:9a:d6:1b:a5:f6:b8:aa:b5:11:8e:53:30:
02:87:d8:22:5d:a1:53:62:32:28:81:8d:5b:90:f1:63:c5:ca:
51:67:ae:e5:ff:0e:e2:ef:bc:5e:95:c0:ae:d6:fe:0b:39:7e:
e7:87:8c:0c:be:c0:95:ee:97:c4:09:5c:3e:53:5c:35:6c:33:
98:a7:1f:c3:74:3d:02:47:04:13:b1:51:51:90:95:ff:a6:71:
c0:43:39:c6:aa:85:2c:4f:cb:69:17:52:a9:74:d8:51:65:16:
1b:70:b5:09:c7:78:c2:9c:6a:71:fe:1e:91:73:3b:ec:d7:90:
2c:e3:bf:f3:1c:66:c7:2e:98:43:9c:ee:a0:eb:97:84:b3:1c:
0f:47:c6:1f:6c:58:ef:82:ea:96:61:b4:87:1d:00:b5:09:05:
e5:58:e0:1d:ba:37:17:73:c9:ea:a3:5f:7a:82:0b:1b:df:7e:
cc:1c:a2:e2:59:71:9a:bc:36:57:78:9a:65:5b:73:d4:d9:8b:
0f:03:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:32:03 2026 by rpki-client