Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
File: uNr6fqVTF4Ez5-hP7risOp28-co.mft (raw, json)
Hash identifier: XvRSWUjx/7/BQQ17m3K7BK69hvW/CmDyPXDJabeojYs=
Subject key identifier: 5E:28:A3:6B:DB:73:8B:B3:70:43:20:3E:2F:D6:50:D5:B1:28:8B:3E
Authority key identifier: B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
Certificate issuer: /CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Certificate serial: 01A16722487C7145A14DC90EC8FBFEA65B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
Manifest number: 0D6F
Signing time: Fri 23 Oct 2026 05:01:01 +0000
Manifest this update: Fri 23 Oct 2026 05:01:01 +0000
Manifest next update: Sat 24 Oct 2026 05:01:01 +0000
Files and hashes: 1: 9NcfTMLVoNSYpzrSkWvCRuMOb5Q.roa (hash: mlHMZG1glKs9hrx1o4pEeWTBfTmCOu0t+uHHFDpEA0Y=)
2: uNr6fqVTF4Ez5-hP7risOp28-co.crl (hash: 6fIYcKt2TIJgk9xNNk6/4bYXfqTFK91GkzKTGE+IgG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:22:48:7c:71:45:a1:4d:c9:0e:c8:fb:fe:a6:5b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8dafa7ea553178133e7e84feeb8ac3a9dbcf9ca
Validity
Not Before: Oct 23 05:01:01 2026 GMT
Not After : Oct 24 05:01:01 2026 GMT
Subject: CN=5e28a36bdb738bb37043203e2fd650d5b1288b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:37:ce:28:28:4d:67:31:06:f7:14:7b:0e:
c5:1e:ba:31:c1:52:6c:5b:9d:8f:88:fc:97:5d:e4:
de:61:d6:9c:df:05:0b:7f:ca:6c:60:58:64:e3:6f:
f7:b3:05:88:18:e2:e4:dd:90:15:90:b7:f3:95:28:
59:5e:40:ae:d5:c7:8b:24:ac:1d:03:d3:04:38:8c:
c0:92:69:ea:ca:24:1f:da:16:3e:24:da:63:5c:56:
55:36:86:dd:59:ed:60:91:16:62:62:bb:1b:fa:37:
47:ab:46:64:ca:a4:79:b7:29:a0:a1:f2:4e:61:ed:
08:5c:c6:f1:cf:45:5c:5a:9f:e9:92:50:ae:fc:61:
c0:94:eb:a3:d6:96:55:b0:96:76:ba:b9:a7:1a:95:
00:f4:d8:1b:c7:19:23:8a:72:dd:0c:2f:1e:90:63:
f5:6f:37:13:28:77:3b:77:e5:0f:12:02:16:03:cd:
ab:bc:e3:8e:0c:b2:ff:67:00:30:7c:b3:b8:3f:4b:
e1:db:87:62:9b:0f:e0:ee:b5:db:85:af:d9:ae:00:
0c:f6:c3:0a:fb:92:c4:b9:28:59:70:c9:4e:17:b5:
2f:4e:21:68:5d:4b:81:5c:e3:5f:d9:04:b2:7f:12:
69:a6:85:2b:0a:88:cc:df:32:8a:2d:4c:0b:7e:e4:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:28:A3:6B:DB:73:8B:B3:70:43:20:3E:2F:D6:50:D5:B1:28:8B:3E
X509v3 Authority Key Identifier:
keyid:B8:DA:FA:7E:A5:53:17:81:33:E7:E8:4F:EE:B8:AC:3A:9D:BC:F9:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNr6fqVTF4Ez5-hP7risOp28-co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f57b93-d253-4fbb-a31e-6b89fa46757c/1/uNr6fqVTF4Ez5-hP7risOp28-co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7d:96:e5:13:f8:bd:3d:e9:19:3a:51:0a:31:8a:ad:14:2b:
57:1a:39:b1:e7:26:8a:4c:a0:85:36:71:44:9e:f7:94:66:14:
58:00:0c:ff:e1:a6:1c:a5:d3:32:09:32:c8:bc:2f:be:02:b4:
ab:09:92:d1:8b:f1:0a:5f:f8:bb:b4:db:87:29:93:45:18:89:
cc:07:e0:c7:1b:b1:5c:0a:dc:ff:24:4e:9a:b0:2b:d8:cc:88:
c2:61:e3:6c:da:3d:36:09:2f:6a:22:b5:da:c5:65:79:c6:0f:
55:f3:31:06:42:97:19:42:ad:00:47:af:05:b3:06:a8:11:32:
f7:61:70:ab:b5:ec:bd:6a:3c:ce:fd:cf:92:52:48:3c:79:a0:
9c:89:c0:a3:c2:d4:b4:d1:c5:7c:d6:de:01:6b:3e:c8:e5:08:
94:ee:e1:94:e3:9b:cb:df:75:d1:00:b9:c6:cf:bf:c9:24:9c:
17:18:a6:b9:d2:ff:28:46:37:8f:28:e2:b6:2a:98:e8:de:52:
bb:93:18:5c:09:78:e6:af:bb:3b:56:e0:c6:95:50:22:78:2d:
39:10:ab:3b:3a:f9:9d:f8:cb:a2:73:90:9f:65:7d:e0:00:27:
a5:db:98:72:7b:7f:a1:31:95:a4:c2:ca:c6:c7:46:2e:88:cf:
82:50:58:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:35:48 2026 by rpki-client