Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 0CViaqtZlKebz6AHnrwWgnqL682iI4nZ7Mg3Ez43+68=
Subject key identifier: 07:8E:0D:84:A4:1A:91:FA:49:41:36:18:D2:3B:B1:70:79:98:41:8B
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 01A1848825348B318A1CD2423C9120BD0A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 0796
Signing time: Wed 28 Oct 2026 22:01:17 +0000
Manifest this update: Wed 28 Oct 2026 22:01:17 +0000
Manifest next update: Thu 29 Oct 2026 22:01:17 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: MPruj6oGQeDwK1Ux54W9VIOsr2iIJRlB8PI2Cv/ZNaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:88:25:34:8b:31:8a:1c:d2:42:3c:91:20:bd:0a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Oct 28 22:01:17 2026 GMT
Not After : Oct 29 22:01:17 2026 GMT
Subject: CN=078e0d84a41a91fa49413618d23bb1707998418b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:d3:ad:6b:b8:13:48:c3:3d:2c:c3:b7:c5:
36:04:59:5a:7e:92:d4:93:62:fd:87:c2:e4:fa:1a:
ec:97:02:7a:d1:65:7e:12:20:a0:68:be:6a:89:51:
2f:99:1c:cc:87:dc:c3:b3:55:e3:20:c8:fe:f8:c7:
18:0d:5d:da:1d:0d:84:08:67:05:1f:9e:6d:7f:f5:
c4:1f:eb:37:f6:72:45:4a:10:9b:c7:bc:05:0c:c6:
0b:f4:a3:3d:5d:c3:49:4d:fb:ad:83:ad:0d:13:5a:
44:3c:87:ef:25:fa:9c:35:8b:bb:0c:05:30:58:06:
de:b2:53:00:25:34:02:21:58:90:2b:3d:1b:39:84:
84:23:d2:88:30:c6:f4:63:0a:11:7e:f4:15:91:2a:
6f:6e:0e:b0:50:b4:25:fe:4c:b4:0f:de:94:b0:e7:
ef:08:8e:35:56:97:f7:13:58:fd:c3:87:c8:56:36:
2a:d9:0a:8c:81:b5:c3:bc:fd:5b:40:8d:22:e7:bd:
e8:39:49:dc:e9:fb:11:ec:ee:94:d2:3c:92:23:7b:
32:27:51:c5:36:1a:24:a2:48:0b:7f:c3:30:f5:84:
5d:50:6b:54:f9:04:fd:ae:e4:0f:cb:51:3b:a6:61:
4b:90:b8:d1:cf:17:88:a0:12:5e:99:85:27:d0:77:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8E:0D:84:A4:1A:91:FA:49:41:36:18:D2:3B:B1:70:79:98:41:8B
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:50:9c:63:ca:25:09:4a:66:a1:b1:61:20:2c:e0:6e:34:
8e:b4:b6:de:26:d6:76:46:7a:46:90:fb:7c:f4:48:3f:49:85:
cd:37:29:49:f5:d1:47:64:11:40:f9:86:30:1c:97:ec:c3:6f:
a9:b5:3e:0c:75:91:5f:3a:ef:1f:2c:6f:1c:4c:26:c0:cf:6c:
67:a4:a6:31:d5:4c:75:88:85:7e:04:12:5b:57:e0:46:40:9d:
4f:6c:09:75:3b:de:9c:80:e7:3e:64:64:fc:e3:38:a0:c8:f1:
23:96:73:7e:d4:f5:fd:e5:3e:9d:40:ad:1f:18:73:e6:fd:82:
cf:10:ee:b0:9f:38:9c:b8:88:7b:8e:c1:bf:9c:61:03:ea:8c:
69:64:4b:cb:ec:10:15:9a:2b:14:28:d7:4d:cd:28:fa:6e:31:
73:a0:4a:a9:99:5f:3f:8f:5f:17:e8:6e:76:76:20:87:67:76:
9f:c6:64:da:ba:5f:16:74:2c:9e:fc:57:47:0d:9e:21:1a:f8:
bb:13:bc:48:c1:bd:1d:d4:f4:ab:be:a2:2f:7f:55:e7:25:1f:
a2:82:0d:77:22:16:c7:89:f1:42:69:0e:9c:84:c3:46:f6:64:
1e:af:4b:20:23:11:64:39:2e:97:5b:31:f5:25:5f:68:82:75:
62:ad:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:12 2026 by rpki-client