Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: 2fQtOcN+oryUqVwjybmG/n6GX6mj5m67gTut+6ReTMw=
Subject key identifier: CD:AF:4D:8F:50:89:7C:FE:F8:B6:71:86:AB:1B:A3:E7:8A:2C:A8:62
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01A17A0430F1D97B32F7EA3A2BA551D92A4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1A58
Signing time: Mon 26 Oct 2026 21:00:57 +0000
Manifest this update: Mon 26 Oct 2026 21:00:57 +0000
Manifest next update: Tue 27 Oct 2026 21:00:57 +0000
Files and hashes: 1: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (hash: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: bd+vsK7fJEQ8omso+NuL1A8rK7Y75Xz1ZKbhb8CSa58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:30:f1:d9:7b:32:f7:ea:3a:2b:a5:51:d9:2a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Oct 26 21:00:57 2026 GMT
Not After : Oct 27 21:00:57 2026 GMT
Subject: CN=cdaf4d8f50897cfef8b67186ab1ba3e78a2ca862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:3c:73:d9:84:55:52:39:6d:71:0f:56:23:
6a:bc:8c:b0:58:31:5f:28:fd:fe:30:fb:3b:56:74:
de:1d:a0:3d:14:50:47:55:53:9a:bd:f4:74:2d:29:
1c:f9:b8:78:cc:b1:a5:15:0d:83:c1:c1:7b:c0:47:
a0:c9:34:3e:38:ec:49:ef:07:ff:09:e6:f0:5f:7f:
4d:97:2f:bf:46:46:5e:97:98:c8:79:d4:8f:92:5e:
95:3f:52:d0:da:a9:d5:48:eb:b6:f6:66:80:6a:b2:
d7:28:84:bc:d0:4a:78:11:b9:f8:46:19:14:e4:3e:
2b:f4:6d:9d:a1:18:8b:d8:fe:65:bb:de:38:1c:ef:
d4:f8:41:c9:13:55:65:ad:b3:7c:61:c7:4d:6f:cd:
ec:5c:1f:17:4f:cd:3d:fc:26:a7:b1:1e:95:b0:da:
63:3c:40:a1:ca:45:f9:b8:ef:3c:1f:e2:1c:7e:eb:
fd:49:ee:f2:b1:6d:93:2a:9d:2c:79:a7:bb:d0:2c:
a9:68:81:76:1c:5e:88:44:0b:1d:e4:a4:39:a5:3e:
22:97:c2:18:07:80:eb:f6:a8:26:db:73:68:24:fc:
26:a7:1c:99:31:f3:d2:0c:67:fd:89:ae:87:62:99:
07:b4:fd:dc:39:3b:6c:80:b5:fc:b2:92:71:6c:f4:
2a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:4D:8F:50:89:7C:FE:F8:B6:71:86:AB:1B:A3:E7:8A:2C:A8:62
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bb:15:a8:00:2d:5d:cd:0e:e9:e1:3c:84:11:16:9a:0d:07:
9c:09:0b:1f:51:6a:33:48:2d:a8:d4:59:24:ba:06:01:f7:22:
12:ce:99:b6:57:98:cb:1b:89:b9:e7:08:11:ed:cd:dc:97:18:
f6:3f:b6:82:a2:fc:bd:f4:45:4d:35:05:a4:a8:3b:e3:54:89:
3e:15:11:24:2f:6c:ca:89:cb:ed:d7:c4:05:5f:22:1e:0c:20:
f2:91:a3:a2:56:14:0f:5f:98:8f:e2:37:c7:39:a4:66:c1:f8:
57:07:55:b7:fe:8b:2a:97:84:a9:78:20:a1:59:87:12:23:f4:
a0:6e:f7:91:fd:20:8c:66:d7:1b:5b:d2:1e:0d:94:cc:4c:b3:
5a:4a:35:67:b1:4b:4d:bd:8f:5f:c1:4f:cf:7e:01:7a:d8:6b:
52:76:fd:80:f8:31:56:1c:58:7d:a3:13:e8:56:c1:b2:50:8a:
16:73:06:ac:a4:2d:99:6b:0e:6e:f2:34:c7:6b:b0:d8:20:0d:
37:6a:71:d2:f8:4f:ee:43:d2:96:56:4f:2f:7e:1f:03:0b:d1:
f8:19:bb:79:6e:77:43:3c:48:94:d0:d1:5b:5c:5f:d7:2d:9c:
10:7f:d1:58:58:74:e2:b2:4b:8b:ab:0a:08:f1:5a:69:00:28:
97:86:aa:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6BDDx2Xsy9+o6K6VR2SpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMmQ1ZmQzMDlkZDZjYzZjZjc4ODYwNDFlNWU5YzJjMWEy
NmNlYWIwHhcNMjYxMDI2MjEwMDU3WhcNMjYxMDI3MjEwMDU3WjAzMTEwLwYDVQQD
EyhjZGFmNGQ4ZjUwODk3Y2ZlZjhiNjcxODZhYjFiYTNlNzhhMmNhODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweA8c9mEVVI5bXEPViNqvIywWDFf
KP3+MPs7VnTeHaA9FFBHVVOavfR0LSkc+bh4zLGlFQ2DwcF7wEegyTQ+OOxJ7wf/
CebwX39Nly+/RkZel5jIedSPkl6VP1LQ2qnVSOu29maAarLXKIS80Ep4Ebn4RhkU
5D4r9G2doRiL2P5lu944HO/U+EHJE1VlrbN8YcdNb83sXB8XT809/CansR6VsNpj
PEChykX5uO88H+Icfuv9Se7ysW2TKp0seae70CypaIF2HF6IRAsd5KQ5pT4il8IY
B4Dr9qgm23NoJPwmpxyZMfPSDGf9ia6HYpkHtP3cOTtsgLX8spJxbPQqWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2vTY9QiXz++LZxhqsbo+eKLKhiMB8GA1UdIwQY
MBaAFLotX9MJ3WzGz3iGBB5enCwaJs6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2Yt
NmQ3NTUwNTJiYjI0LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yY2JkZTktODQ4MC00NDBkLWFiY2YtNmQ3NTUwNTJiYjI0
LzEvdWkxZjB3bmRiTWJQZUlZRUhsNmNMQm9tenFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbsVqAAt
Xc0O6eE8hBEWmg0HnAkLH1FqM0gtqNRZJLoGAfciEs6ZtleYyxuJuecIEe3N3JcY
9j+2gqL8vfRFTTUFpKg741SJPhURJC9syonL7dfEBV8iHgwg8pGjolYUD1+Yj+I3
xzmkZsH4VwdVt/6LKpeEqXggoVmHEiP0oG73kf0gjGbXG1vSHg2UzEyzWko1Z7FL
Tb2PX8FPz34BethrUnb9gPgxVhxYfaMT6FbBslCKFnMGrKQtmWsObvI0x2uw2CAN
N2px0vhP7kPSllZPL34fAwvR+Bm7eW53QzxIlNDRW1xf1y2cEH/RWFh04rJLi6sK
CPFaaQAol4aqQg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:41:49 2026 by rpki-client