Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: 9cHtYbwkwNrIN2mubQsnV4kbdop0EJbC0nXlcTbq+XI=
Subject key identifier: E1:D2:D7:56:A3:4F:B3:0F:99:58:07:C5:49:56:F0:EF:AA:E0:AC:D1
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01A17D052B9E4AA20CC91B22AC449C7EB441
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0F6F
Signing time: Tue 27 Oct 2026 11:00:53 +0000
Manifest this update: Tue 27 Oct 2026 11:00:53 +0000
Manifest next update: Wed 28 Oct 2026 11:00:53 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: RL2zfwPpmXt3pFuIgMyVx0WJLpdgJv6Ja+7zZ/6xK5c=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:2b:9e:4a:a2:0c:c9:1b:22:ac:44:9c:7e:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 27 11:00:53 2026 GMT
Not After : Oct 28 11:00:53 2026 GMT
Subject: CN=e1d2d756a34fb30f995807c54956f0efaae0acd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:51:5e:fd:e8:f1:62:d5:31:3d:f1:69:54:
d3:b7:a2:dd:e1:05:0d:0b:88:1b:fa:26:2c:e7:9c:
ff:e6:82:9d:1d:a7:7a:82:56:46:db:01:c3:7c:3b:
31:68:77:d6:7e:de:ac:db:5c:3b:64:f7:96:a4:96:
9b:34:da:02:be:05:65:c7:da:e7:83:d8:05:56:2a:
0a:1c:b1:7d:ff:9b:ab:e7:3f:3e:68:f6:ab:8a:61:
e5:58:f5:db:de:78:b5:91:54:f6:bc:3b:0c:cf:ab:
2d:1c:41:71:4b:09:42:b0:4b:20:39:64:4d:c5:87:
22:b2:23:2d:f3:16:c9:84:4a:23:dd:b6:5b:6e:11:
06:f1:ad:e0:95:ed:b0:d4:4c:6e:7d:4c:06:40:ee:
da:03:81:e2:65:b3:eb:89:49:6e:72:5e:cc:42:4b:
19:97:0f:e8:61:26:ec:54:78:4e:80:96:9a:46:ac:
89:5e:56:83:09:b8:09:da:e3:3c:ad:25:65:d8:4d:
d7:b7:1c:60:7c:04:b3:7d:21:ff:12:f8:21:7f:7f:
de:fe:8f:2a:35:22:3a:50:7f:c1:7f:68:25:46:57:
fb:a9:f7:42:4f:ab:c2:0e:4a:34:96:d3:6f:cc:c5:
f5:50:0d:d7:cb:9d:4d:51:47:6d:eb:53:77:a3:6c:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D2:D7:56:A3:4F:B3:0F:99:58:07:C5:49:56:F0:EF:AA:E0:AC:D1
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b4:45:e3:a8:2a:ef:23:1a:93:79:f8:fd:d1:e6:53:a3:4f:
31:3c:bf:cd:ef:f6:b4:64:5c:d2:86:68:58:b2:00:e2:b8:79:
db:66:42:3f:4a:fb:10:8a:55:4f:84:5d:53:ab:54:80:94:b0:
80:7c:7d:7d:49:1a:1a:5c:ec:82:38:12:46:2b:aa:53:ac:5c:
c8:71:b8:c1:9b:56:09:f2:a4:c4:47:4f:45:a5:76:29:23:14:
7a:58:e6:e9:fa:83:f7:7b:23:f3:64:62:b5:3f:65:6b:04:40:
cd:0c:d4:e7:2e:0d:7f:3b:26:f1:6e:d2:08:c2:ec:fb:76:c1:
b6:30:b7:f4:27:69:06:19:32:8d:46:93:c6:29:d2:a2:d1:6c:
5e:82:3a:f1:00:81:a3:5e:ce:0e:25:65:0f:57:69:9f:96:c5:
1b:fb:e3:09:9a:43:5f:ae:8d:b6:38:b6:f6:52:40:ae:25:ae:
7b:93:fc:f2:03:b5:40:bd:13:06:5d:af:45:35:d7:4b:47:72:
4b:f7:7d:64:0d:df:12:33:5b:11:85:57:36:61:4a:cf:d4:66:
fc:2a:af:61:45:38:0c:21:60:aa:15:0f:9a:06:f4:70:33:fb:
e6:79:d1:e4:49:10:33:d0:fb:f7:e8:b7:8d:2f:c6:64:ae:a8:
5f:1d:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:26:08 2026 by rpki-client