Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: 1rR2ePb63rhixkmLeRLy/M5HasQG4D/PPSdG5O2jwH8=
Subject key identifier: 5E:E4:F7:78:92:9F:E0:19:E2:D5:FE:66:ED:EE:92:EC:C9:67:8F:AE
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01A15DE7BB6274ECD48F7290F959A01CB8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0EBB
Signing time: Wed 21 Oct 2026 10:00:30 +0000
Manifest this update: Wed 21 Oct 2026 10:00:30 +0000
Manifest next update: Thu 22 Oct 2026 10:00:30 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: scKHzD00f9/7rn+jDl3KSQ9/vLIBNnFRk6xB8787Qns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:e7:bb:62:74:ec:d4:8f:72:90:f9:59:a0:1c:b8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Oct 21 10:00:30 2026 GMT
Not After : Oct 22 10:00:30 2026 GMT
Subject: CN=5ee4f778929fe019e2d5fe66edee92ecc9678fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:d6:9c:58:d9:d1:af:80:e9:08:35:b6:b5:
35:1f:25:2d:a4:9a:59:08:26:3d:5d:98:e8:d5:fc:
07:85:bb:97:0f:ec:16:dc:8c:65:29:8c:8a:aa:37:
92:89:c4:0e:ce:9c:d8:8a:5d:04:7a:83:49:6e:31:
0a:8e:19:a7:f0:ac:2f:a1:4f:8b:9b:ec:29:a5:ed:
44:96:ea:6e:e4:84:a1:db:29:6c:e8:61:64:51:8b:
e8:df:7e:ca:5c:08:bf:17:02:a2:2d:d1:28:4e:a6:
3e:53:46:e6:5c:06:7d:9b:cf:a1:0f:58:db:a2:d5:
f2:91:69:90:21:78:05:79:7f:b6:ea:3d:18:a4:b6:
71:f9:26:60:d8:1b:b4:cd:80:62:16:ae:44:30:c4:
23:9b:1d:c7:92:12:8e:b8:67:fc:a8:56:1e:21:23:
e3:9c:2b:c0:d1:5c:74:75:44:76:af:f1:9d:d0:cc:
34:60:8c:34:41:a3:9f:7a:e9:d4:b8:05:7d:33:22:
f9:28:a8:13:5b:40:2f:71:a4:7c:df:00:89:7c:46:
ab:ca:c9:99:ff:02:89:c0:80:30:ff:69:65:ec:16:
67:be:1b:20:b1:80:76:18:ae:56:9d:76:23:c6:76:
59:4a:38:7a:e3:36:24:de:da:b9:b2:d9:d6:04:cc:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E4:F7:78:92:9F:E0:19:E2:D5:FE:66:ED:EE:92:EC:C9:67:8F:AE
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:77:54:b8:26:70:a7:83:c5:98:b2:53:7d:d8:10:17:41:00:
8a:bf:b2:36:a8:69:9d:9c:a9:9a:22:f2:20:70:b3:46:f4:53:
e5:a1:24:dc:12:8a:b3:97:47:a7:aa:68:9b:38:93:d8:40:a1:
37:19:5b:ce:2c:98:dc:d9:cf:8f:e6:aa:7f:b1:1f:b3:e1:8a:
77:71:a8:e5:0e:5b:e1:14:56:90:b8:8a:cd:c0:79:f9:5f:4b:
80:51:ac:37:4c:dc:a3:ff:fd:95:a6:1e:0f:19:1c:5b:c5:9c:
dc:64:e8:14:22:4d:b5:df:2d:97:86:00:9d:bf:19:c2:ca:3e:
1b:ac:85:ec:fd:24:04:b4:b4:05:8b:c8:6a:34:91:c4:ab:fd:
31:c0:24:50:b3:9b:3f:d1:99:8c:c6:be:21:c8:e4:57:a7:de:
8f:9d:ad:92:31:88:ac:14:20:b8:99:9f:9c:83:c4:c2:18:16:
3e:ea:49:e4:6c:69:c8:d4:45:42:24:67:de:a6:1e:b7:51:17:
e0:74:e7:7f:8d:2c:01:8f:dc:94:e8:56:09:9d:db:c5:c2:7a:
83:c6:f0:d9:24:75:e2:bc:a6:09:a0:a8:d3:39:3a:10:27:d0:
fd:64:b4:0b:d8:cb:27:68:4c:a4:3d:a6:8e:2e:5e:6b:ea:2b:
89:2a:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:05:13 2026 by rpki-client