Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: fc3AGSQ+/C8LY+N/uYGcxuBfxpd4iWYGTk78KW004mc=
Subject key identifier: 6A:A3:64:15:7D:39:9B:78:85:9A:19:1C:B8:3E:BB:48:69:38:B7:94
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 01A14FBEABB6EBFD11DC60EBA7AD97F8FEC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 01E5
Signing time: Sun 18 Oct 2026 16:00:58 +0000
Manifest this update: Sun 18 Oct 2026 16:00:58 +0000
Manifest next update: Mon 19 Oct 2026 16:00:58 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: GwcMLHVA1s7JA3pn2VTzBkZaq+Vmx0/PoToxa/APgnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 14:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:be:ab:b6:eb:fd:11:dc:60:eb:a7:ad:97:f8:fe:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Oct 18 16:00:58 2026 GMT
Not After : Oct 19 16:00:58 2026 GMT
Subject: CN=6aa364157d399b78859a191cb83ebb486938b794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:33:7c:1b:55:d7:9e:e7:4a:99:3c:16:ad:
a9:38:59:11:75:69:0a:7c:4d:dd:9f:1f:6d:66:6d:
ba:ad:98:0f:2c:67:9b:c7:c5:89:b5:f3:8a:0e:8c:
cd:10:6c:45:5a:d5:0a:e4:67:93:f8:01:59:f7:9a:
17:af:b2:96:05:70:35:22:e8:25:f4:4b:86:2d:e2:
6b:68:54:16:46:64:6d:5b:2b:d7:19:91:2d:2d:93:
49:95:d1:22:2f:bd:be:20:2e:e1:6c:2a:c8:8d:4d:
22:e8:f9:c2:4f:8f:e5:5e:23:05:7e:07:35:fe:43:
95:35:32:86:06:5e:5f:42:ae:13:1f:67:29:94:4d:
46:4e:16:ba:6b:4b:c8:77:29:2e:e0:30:6c:f6:40:
d2:4a:dd:8b:3f:9d:03:79:2f:ef:49:ae:0d:27:a0:
9a:ba:62:4f:a2:1d:75:86:22:c2:57:80:9d:9e:8f:
34:0a:f1:2f:ff:72:47:65:8a:fd:4f:34:e5:39:0e:
a9:a8:6d:1d:dc:77:ab:7a:ea:8d:a6:f5:94:3e:b0:
0d:1a:f4:ce:35:a9:f3:d0:d9:73:c8:4a:b4:49:af:
22:b5:77:86:d4:81:8b:4c:a2:4e:5e:f8:8d:82:ee:
d0:11:eb:bc:1a:73:43:08:4c:59:7f:94:e7:df:e9:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:64:15:7D:39:9B:78:85:9A:19:1C:B8:3E:BB:48:69:38:B7:94
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d8:ae:01:e6:50:92:53:b3:87:b4:7a:0b:da:f7:24:7b:fd:
d4:9f:9a:10:db:8d:dc:1f:5e:50:9c:ab:33:f0:f5:7f:33:be:
45:50:e9:bb:9f:08:3c:bb:2e:55:49:34:3c:a1:88:57:6d:c6:
36:2e:7e:d9:ce:b3:3b:45:a9:31:19:a2:9b:40:7a:0a:4b:be:
61:0f:0f:d8:d3:ae:98:92:5d:7e:b8:c8:4f:13:27:09:11:b2:
54:62:4e:3e:cf:3e:7b:9b:44:15:1b:e4:cf:05:3c:db:b8:81:
8a:3a:12:1a:8b:74:7a:de:86:15:a8:b9:97:25:d0:35:35:e6:
f8:55:1b:dd:4c:c6:56:dc:57:26:f4:57:03:07:26:79:65:89:
a4:c3:ec:91:b5:a8:6d:24:95:45:85:6a:b5:71:e6:49:cf:fd:
c0:73:20:05:8e:7a:7e:ac:55:18:f8:cf:6a:4a:1d:ac:4e:24:
5c:9b:40:6a:d3:f7:ef:f0:a1:63:bd:7f:ed:be:d8:aa:f9:89:
61:7c:92:9c:6d:58:74:4f:20:61:7d:95:f1:a1:16:3a:ca:18:
53:8e:1f:7b:64:ab:6d:89:cc:94:bf:81:68:16:9f:ba:70:63:
b8:45:6d:c8:5e:46:84:73:de:e9:c1:f8:32:10:9d:f9:2b:d0:
42:a4:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:40 2026 by rpki-client