Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: xMkp97lydcCNLjFsMgQ46OP4JUO4YSbF49QXbpJ2C98=
Subject key identifier: DA:92:6E:A0:FE:A6:8D:0C:9D:24:EA:D0:74:63:55:7B:E4:3B:E0:C2
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 01A167FD54B66FDF2EB2AD0A0D26F9ED330A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 0A53
Signing time: Fri 23 Oct 2026 09:00:17 +0000
Manifest this update: Fri 23 Oct 2026 09:00:17 +0000
Manifest next update: Sat 24 Oct 2026 09:00:17 +0000
Files and hashes: 1: _E-18Yix5OeOjpkpq4btG5ylqEQ.roa (hash: G5MMNAQN+PyBy79Pw9SL7XUT08jrMuESj9HjH5BbLWA=)
2: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
3: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: HmPhd0gPYYNM/hwW7mREbEysVH+qfg/eDOvk1oNR9I8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:fd:54:b6:6f:df:2e:b2:ad:0a:0d:26:f9:ed:33:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Oct 23 09:00:17 2026 GMT
Not After : Oct 24 09:00:17 2026 GMT
Subject: CN=da926ea0fea68d0c9d24ead07463557be43be0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:78:3e:88:65:e7:6c:03:8b:5f:bb:3a:98:
e5:aa:4a:3d:a3:e4:ee:c3:3b:1c:04:a6:7b:d9:50:
89:74:3f:7d:20:ee:b7:02:c7:b7:8b:dd:54:95:47:
72:a6:de:f4:16:be:32:7a:18:3d:01:7e:df:f3:61:
b2:23:8e:5a:30:1e:c3:3a:1a:18:77:97:31:c1:14:
0e:4e:99:04:27:fe:c5:9f:a4:20:99:dd:d3:ac:46:
fa:9f:2c:65:3b:96:66:b1:24:b6:57:db:c3:2b:b6:
a5:c5:a9:0e:bc:ba:2e:3a:16:45:bb:9b:06:fa:d7:
f5:9e:a7:4f:7b:a5:9f:e3:1d:53:ba:b8:5a:d1:51:
f5:1e:36:fd:50:5f:e7:2a:d8:e1:18:19:09:33:66:
9c:a6:18:66:76:59:f0:a9:17:05:4a:86:3a:1d:de:
bb:57:29:71:35:80:97:22:e0:be:76:59:67:c0:59:
66:91:2b:18:11:43:25:f8:4b:0a:4f:28:5d:5d:2f:
98:b8:77:71:aa:10:a0:60:1c:92:4e:b5:1b:14:79:
b7:7e:4b:67:4c:93:69:21:18:8c:cc:22:45:4f:b7:
ff:6e:9d:d6:16:0c:64:db:44:62:25:49:14:ed:ce:
c3:d1:1a:5c:c3:df:ee:bd:a9:90:10:a5:ba:38:fc:
79:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:6E:A0:FE:A6:8D:0C:9D:24:EA:D0:74:63:55:7B:E4:3B:E0:C2
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:15:d3:7a:cb:b3:25:8b:db:ab:9c:e0:2e:a2:55:79:57:27:
12:17:68:e5:af:b6:bf:14:bf:20:b5:2c:c8:76:dc:3a:b3:c7:
61:e0:1d:2a:95:41:b4:30:3d:9d:e8:f9:d7:4d:1a:79:ee:18:
61:16:73:fe:b8:04:80:93:fe:3d:82:74:28:9d:a9:74:25:c7:
1e:97:cd:e8:7b:7e:f8:b2:64:ff:a0:38:8b:18:6e:c0:4e:57:
1f:f4:b7:a2:bf:6c:94:6f:95:b7:25:82:11:84:7b:30:37:a2:
87:03:6c:34:48:6d:bb:8a:38:f3:1f:e8:83:43:31:b8:61:2f:
a3:2a:dc:0c:b7:af:47:ef:75:ed:63:5d:da:d6:3c:4f:56:62:
76:8e:9f:dd:a4:40:4f:48:17:a9:64:a4:96:81:49:ca:fa:37:
76:c0:d9:75:02:31:43:53:8b:d3:6d:96:bc:d3:b4:3a:06:11:
cb:90:69:ea:b7:e8:3d:5f:c4:f2:60:05:0b:31:4d:b5:07:2d:
2c:59:be:a2:bc:75:44:0a:bf:72:9e:8e:aa:67:4c:06:cc:90:
4d:92:64:25:0d:03:61:b2:2d:89:5a:16:91:1e:ca:de:21:ff:
da:da:56:bc:94:17:0b:ae:b6:9d:7c:78:63:17:78:77:6b:f2:
b6:01:53:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 17:48:54 2026 by rpki-client