Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: RhDIqJiq0RpQ4xoUeCaxvOAwbgfFNPVmVQDHVsUNpbM=
Subject key identifier: AE:6A:B4:75:75:8B:1A:71:4B:DE:57:3E:19:3D:36:95:EB:A8:EC:36
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 01A137B6755D8F98F37663DD4419F0FB4F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 00:01:06 +0000
Manifest this update: Wed 14 Oct 2026 00:01:06 +0000
Manifest next update: Thu 15 Oct 2026 00:01:06 +0000
Files and hashes: 1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: SUp8JQ3yQnxywpM43K+OJAuDgay6gEBkrIoj8AmoQeE=)
3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:b6:75:5d:8f:98:f3:76:63:dd:44:19:f0:fb:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Oct 14 00:01:06 2026 GMT
Not After : Oct 15 00:01:06 2026 GMT
Subject: CN=ae6ab475758b1a714bde573e193d3695eba8ec36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:5b:fb:76:1e:89:9a:04:30:83:43:5d:c8:
af:bf:20:3e:68:6f:ca:86:92:bf:28:22:f3:13:8a:
9a:72:e5:a7:bf:1f:04:d9:d1:9d:2d:71:2c:29:1e:
aa:23:7b:72:60:20:8b:d5:6c:74:78:38:29:14:36:
a6:d2:ca:9e:cd:a7:f6:3f:80:a6:4f:d6:41:c2:98:
ae:cf:55:1f:9e:d3:8e:56:78:d9:df:d3:05:91:79:
90:dd:0c:43:ee:cd:8a:f1:30:26:7d:71:98:22:fe:
1a:ea:81:6a:5a:29:fe:6f:c4:3d:d1:f8:28:d0:f3:
0a:b8:50:b5:8b:55:ec:45:c5:e4:2b:ba:90:46:75:
34:42:58:6e:04:3c:2d:ff:e0:bb:7f:8a:db:cb:c7:
63:da:ce:80:07:ff:a2:e9:49:a4:a9:3c:90:62:20:
41:8c:76:db:16:62:6e:51:d9:09:88:8f:c1:84:39:
f3:ec:1e:c9:a5:17:53:d4:e6:a3:aa:36:81:6f:31:
c9:96:5b:e8:65:32:69:2c:06:8c:bc:67:a4:af:8e:
fc:8f:e5:00:be:a4:73:93:5d:9d:b4:79:cb:28:d0:
06:49:c5:70:91:42:0f:5c:6d:92:94:b6:35:d2:3a:
91:22:85:73:53:8c:d7:a6:9d:2a:c0:19:37:f4:52:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:B4:75:75:8B:1A:71:4B:DE:57:3E:19:3D:36:95:EB:A8:EC:36
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:92:74:6b:ac:74:c3:d7:d4:04:75:38:75:1f:87:28:4b:
60:fe:8b:41:2e:8e:32:c7:dd:c2:19:65:d0:02:5d:2b:58:47:
54:d7:61:fb:5f:b6:c9:fc:5b:7c:b9:09:9d:8e:15:7a:03:e4:
d4:3b:70:c6:77:6a:5e:50:6d:d8:77:26:ec:cb:a5:ad:4e:1c:
0c:65:a7:fc:a5:d2:91:0b:b7:6c:12:fd:40:95:84:89:bf:d8:
f5:39:16:ce:43:49:20:07:06:ff:42:f9:03:5a:79:f2:27:8a:
76:67:7e:e9:26:fe:04:9e:6b:bc:d8:e2:7a:bc:56:a4:e3:a1:
a4:4a:ae:ce:bf:8e:45:e8:61:39:1f:71:4f:41:4c:45:e7:73:
7c:2b:4e:39:e4:0e:66:48:dd:68:e6:e8:3b:f7:01:31:b7:59:
95:f8:3d:53:15:76:33:61:54:24:4d:f3:19:a8:b0:30:4d:c3:
9c:a1:5a:90:70:f9:fc:1d:95:87:7d:24:66:3a:1e:38:37:5e:
51:2e:95:a3:ba:5a:55:d1:a3:87:b3:34:c0:ce:11:a6:9f:90:
fa:6e:24:d2:9a:67:81:81:53:97:17:93:5d:04:ee:8a:5d:23:
7e:7b:f2:f1:5d:ce:9c:8d:93:ed:07:61:23:5d:2a:2c:e2:aa:
a1:3d:78:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:27:01 2026 by rpki-client