Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: r6dp+8UoFBWebIKwg2pT+/doAset68JbPGrsU3FuWBw=
Subject key identifier: 34:97:44:00:1F:46:B3:B1:4F:2E:83:B6:1B:AD:33:54:25:E4:94:06
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01A1724AEB165C824F74AD66A7E77DC28C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1AC7
Signing time: Sun 25 Oct 2026 09:01:14 +0000
Manifest this update: Sun 25 Oct 2026 09:01:14 +0000
Manifest next update: Mon 26 Oct 2026 09:01:14 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: TAoh8uivEjDerbDJtKQ9/vynfrf8qP8ybMu42tJ5pLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4a:eb:16:5c:82:4f:74:ad:66:a7:e7:7d:c2:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Oct 25 09:01:14 2026 GMT
Not After : Oct 26 09:01:14 2026 GMT
Subject: CN=349744001f46b3b14f2e83b61bad335425e49406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:23:1b:62:d8:50:63:d7:56:5e:03:6d:eb:
41:65:31:b0:7c:10:47:11:6a:d5:d0:5f:7c:4e:ff:
0e:ee:25:3d:f2:89:c8:c7:5e:f8:bd:98:3b:b4:d9:
f6:8f:c7:ab:b3:7f:f6:84:90:03:1c:e5:96:9b:c9:
f5:29:1f:52:cd:79:f0:40:69:2e:29:18:c6:7a:3d:
93:ad:2c:fd:c6:b1:22:d3:70:92:62:9a:b6:1f:98:
82:71:81:42:31:78:15:61:f8:b2:f5:06:f7:0e:e0:
e1:55:f5:01:eb:da:c7:e8:c6:f7:14:2a:29:ae:3c:
ba:1a:36:41:f8:ad:0b:ab:1e:6f:bf:3b:f4:d6:83:
ec:96:37:c6:7d:4a:5d:2f:b6:60:b5:1f:ea:3b:7e:
48:43:ed:30:d4:ef:67:8c:ab:69:b6:97:0d:02:c0:
de:3f:74:e4:61:75:be:29:ef:31:9f:9a:e9:2d:12:
fd:18:0a:9a:b5:64:e5:4d:28:af:12:f9:7f:3a:aa:
5f:13:d3:d6:5a:11:0a:a1:c9:0b:da:c8:44:22:30:
2c:7b:f4:e7:17:c9:3a:60:92:2f:86:24:75:3f:b9:
91:7f:ad:47:91:7e:59:52:26:4b:d3:ca:be:b8:72:
61:c7:c1:bb:9e:05:6e:c3:4e:c0:58:6e:66:33:86:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:44:00:1F:46:B3:B1:4F:2E:83:B6:1B:AD:33:54:25:E4:94:06
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:60:ff:1e:66:e6:81:b0:23:37:7d:f8:17:11:7b:b8:50:42:
84:81:c9:e0:09:07:8c:41:ed:af:16:53:b4:75:3e:67:e6:60:
bb:76:e9:fd:a6:e2:03:63:32:85:8f:5a:8d:97:b4:ec:f0:ca:
5b:52:5c:d4:e2:64:fb:ad:b1:c5:3c:89:50:af:d3:7b:1f:02:
08:83:d4:cf:ee:c1:86:ca:fa:86:24:bc:a3:a8:30:10:57:7e:
8e:4e:3f:7e:d2:98:89:16:fb:9d:a1:b6:c6:80:cb:62:ab:8b:
98:b5:38:27:34:42:29:57:4d:d7:b2:70:1b:ae:9a:aa:80:4a:
20:40:ca:4f:37:77:d6:e8:95:a0:4c:95:13:05:3f:c9:01:05:
6f:d0:37:f3:39:5b:00:4d:e3:d8:e1:aa:db:60:f3:dd:8c:c5:
eb:ff:de:cb:15:47:5d:3f:46:49:1b:de:d9:78:38:67:89:14:
c5:cf:56:76:6d:cb:e2:3f:2b:dd:b7:31:49:dd:d7:a3:93:4e:
ab:fc:0d:e1:ba:45:c5:da:27:f2:8f:09:09:53:de:40:c7:b0:
de:eb:9e:16:ce:a6:8c:c7:3c:4a:75:f1:4c:92:48:87:8f:3a:
e8:a7:25:e4:aa:a6:ee:35:62:1c:21:3d:22:d9:91:a5:4e:48:
fc:61:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 16:12:20 2026 by rpki-client