Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: yXWpcdnosambLEEx06gMv2RVlfJq6LmkWbuD8QR/MXs=
Subject key identifier: 5D:FD:F4:A8:A3:D5:4C:B6:93:F7:B6:AA:28:0F:20:34:F3:BE:DE:90
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01A10EBA401C9CE9BD950532456F83A3EA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 10DB
Signing time: Tue 06 Oct 2026 01:00:49 +0000
Manifest this update: Tue 06 Oct 2026 01:00:49 +0000
Manifest next update: Wed 07 Oct 2026 01:00:49 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: XTd0Z58IIGKxrkbLkWSh/jSDQyLxi8DgAc6Qt81Ss6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:ba:40:1c:9c:e9:bd:95:05:32:45:6f:83:a3:ea:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Oct 6 01:00:49 2026 GMT
Not After : Oct 7 01:00:49 2026 GMT
Subject: CN=5dfdf4a8a3d54cb693f7b6aa280f2034f3bede90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:15:70:a5:ff:b6:a3:cd:06:9d:e7:c5:07:60:
33:35:cc:8a:d7:2a:7d:0c:7e:56:6b:39:f5:81:95:
75:ac:b0:f9:2b:35:a8:cf:ed:ec:47:7c:8d:05:58:
71:5b:e0:0c:7b:a6:8e:23:fd:f3:13:d6:9d:11:b9:
ae:70:1d:e0:81:c5:58:c5:87:45:d8:e0:89:8c:d1:
f6:37:03:fa:97:c3:f9:2e:ad:36:a6:1d:2e:6d:9b:
91:b7:bc:7e:03:98:16:5b:f9:c8:ae:8f:97:46:47:
b1:ac:df:f0:2b:23:21:5f:06:2e:fc:a1:2b:c4:af:
6c:03:6a:8e:d5:6f:fb:78:f8:03:b7:37:f4:bc:5f:
f5:6e:3e:12:bb:e7:a4:dc:58:a5:34:23:37:4e:12:
a9:91:ca:56:a9:c0:84:a5:44:b2:41:ea:ca:97:51:
03:27:41:f7:bc:cb:9b:5f:4f:e6:dd:1d:55:0e:b7:
85:d4:8d:66:3e:9d:18:da:bc:98:dc:ca:b7:bf:be:
1a:bd:c6:1b:dc:31:65:0d:03:a6:aa:58:e6:9a:9e:
dc:06:16:21:9d:1c:35:e2:5b:79:1e:4b:82:9c:fa:
4b:7e:25:25:98:2b:ae:db:ab:e4:63:f2:f7:d6:2c:
c8:1c:66:77:69:fa:b2:27:43:13:9e:0b:38:dd:77:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:F4:A8:A3:D5:4C:B6:93:F7:B6:AA:28:0F:20:34:F3:BE:DE:90
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:db:87:f9:e7:af:3d:dd:76:a7:89:26:2c:ee:3c:1d:7c:d2:
16:99:7b:47:29:50:06:c5:2b:ad:94:8d:13:b2:15:d8:e2:b0:
69:cb:c0:09:49:3a:d0:d9:f8:e9:72:b3:78:f8:57:a7:01:46:
04:7e:76:94:c5:99:66:7f:fc:df:fd:13:8c:34:8f:2e:96:91:
6c:35:1f:44:e4:85:0b:d1:9c:92:04:92:dc:9a:02:8b:f9:e8:
b5:d2:45:52:f4:11:d6:e8:e4:ac:f3:aa:00:de:76:2b:68:e5:
03:af:b4:4f:09:c5:9b:71:2c:f5:b3:72:b4:a1:91:b3:0e:af:
45:a3:3f:f2:fd:b7:c5:04:ee:f7:af:36:40:e6:90:f1:84:a3:
5e:a6:d1:7c:4c:91:6b:ed:79:31:8e:ea:b1:92:9a:91:0f:ed:
58:90:2a:f7:e0:0a:bc:af:bb:89:17:41:f6:40:7c:4f:4a:4d:
19:7b:e5:c1:95:9e:19:d4:bf:16:4c:4f:c1:36:3b:5e:80:11:
dd:ff:0d:bc:48:76:08:57:a8:55:3c:6a:ee:0f:33:71:20:ec:
e4:11:5f:cc:49:79:43:bd:2b:a5:c3:84:64:f3:65:5a:cc:21:
f3:c4:ae:ff:13:4a:ed:c4:81:ad:aa:58:02:4c:af:f8:29:ab:
c5:6d:3c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:47:58 2026 by rpki-client