Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
File: _uFCR8uC-eVrfl_3tBaq8evFByg.mft (raw, json)
Hash identifier: xGmo024SLI1trSLvDdBWHq/rek8Nk1Zof+Dg/Y+0gZc=
Subject key identifier: D6:CA:49:F5:C0:9D:0D:3A:3E:EF:8B:37:39:61:FA:3C:46:51:9A:EA
Authority key identifier: FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
Certificate issuer: /CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Certificate serial: 01A18D53F708BFC38DE652E2176B8FFC3AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:00:52 +0000
Manifest this update: Fri 30 Oct 2026 15:00:52 +0000
Manifest next update: Sat 31 Oct 2026 15:00:52 +0000
Files and hashes: 1: DmwwyIeryxnXouje06GcnKLjOck.roa (hash: 77qcCPWlKYbSecG3Tkcuy3v3wioir535GQOABIXvPKc=)
2: _uFCR8uC-eVrfl_3tBaq8evFByg.crl (hash: 5P+vLq+jAR4AoxZisUFlDk2ty4l2xlL6JYdTESnijEI=)
3: nmYhqDzscOD4WXJul6VqdubZXuE.roa (hash: NXKrupN7UtGQb1J9RMrCPRHescON/MpPuAeIS3YOdGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:f7:08:bf:c3:8d:e6:52:e2:17:6b:8f:fc:3a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Validity
Not Before: Oct 30 15:00:52 2026 GMT
Not After : Oct 31 15:00:52 2026 GMT
Subject: CN=d6ca49f5c09d0d3a3eef8b373961fa3c46519aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f9:b3:56:2b:4b:df:72:e9:68:c6:87:b9:9b:
8d:12:02:e4:5f:31:de:54:06:b3:5e:52:b1:c8:81:
ad:57:91:e0:e1:c3:d0:c6:85:8e:ef:a3:7a:31:2b:
22:67:d8:5d:1b:35:91:a9:98:09:03:40:21:10:c7:
31:f5:43:25:9f:2d:07:81:4c:d7:d6:4c:d5:a7:c7:
bc:98:fc:d5:27:6d:9b:14:16:ba:8a:f3:22:25:99:
47:95:ba:4f:08:74:15:32:4f:6b:1a:95:13:8d:38:
e4:42:39:41:8d:86:48:04:31:a5:e1:67:ff:7c:77:
b4:f7:e6:fe:72:6e:3d:3e:16:e0:e4:9c:b0:3c:f6:
78:e7:38:a9:89:96:60:61:06:18:b9:5e:b5:76:08:
6f:84:47:b2:88:6c:c7:76:28:e3:18:56:8c:4b:f5:
b2:a5:ff:ef:cc:07:9b:3d:5f:25:47:0f:4e:fd:42:
4a:40:c2:03:cc:43:24:da:df:2b:fd:b5:77:01:72:
78:0a:b5:f9:51:12:6c:6b:84:82:74:f9:d0:0a:7f:
a8:44:83:f0:f3:42:03:ca:02:f9:05:fd:84:06:e6:
3a:e2:b2:c3:df:53:e1:7c:90:d5:26:c6:ac:41:6d:
c9:38:62:f3:f3:32:c7:e8:28:80:4f:32:01:3d:d1:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CA:49:F5:C0:9D:0D:3A:3E:EF:8B:37:39:61:FA:3C:46:51:9A:EA
X509v3 Authority Key Identifier:
keyid:FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7a:c3:ba:a8:a8:8a:e6:5e:32:7b:36:37:66:8f:83:08:8f:
2c:31:f4:d1:cc:be:e7:da:9d:a0:5c:07:34:db:ab:cb:84:3e:
2f:07:fa:bf:ae:d1:e5:50:6e:96:d0:f1:4c:dd:0e:14:36:41:
ce:64:6f:37:0c:95:b3:e5:b9:16:cd:cb:48:2b:6a:b0:f6:66:
88:96:b8:0b:7b:09:a6:d5:f6:c8:dc:59:47:8f:e5:1b:79:c4:
e5:f2:32:be:9a:0a:70:99:f1:63:60:76:7d:b7:fe:d7:63:b1:
92:99:b7:3a:a3:21:f0:6a:6a:52:10:9a:5c:a8:25:94:01:bd:
31:bd:52:70:79:3b:a0:66:0f:f7:23:ab:8e:3e:41:36:4f:9a:
49:44:d2:66:dd:4f:28:95:c7:57:95:88:2e:98:89:04:43:5e:
a6:9a:c4:3d:98:0d:cb:c8:68:e0:6a:5c:01:06:94:a7:b2:ee:
fe:7e:db:a2:72:15:e0:41:44:a5:b4:d5:a5:a1:d7:7a:14:64:
74:32:11:e0:02:8f:d8:4b:19:8c:0d:34:5f:a3:a4:7e:f1:11:
0d:92:5d:20:d8:c6:6d:cf:3b:19:89:c7:44:ce:86:d9:31:03:
55:b9:82:c2:f4:5d:23:9e:9d:a9:0d:f3:b3:45:6f:67:ff:45:
2d:04:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:14:39 2026 by rpki-client