Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: D05ftSlw0ZrUzSNehf3aiQsLQK+ypu9IYXpHNZ+Bwgs=
Subject key identifier: 78:44:67:79:B5:27:C5:5D:41:F7:00:D3:98:23:5C:C5:3C:2A:FB:4A
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 01A16F4934B525964B626D380767DE22A8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1819
Signing time: Sat 24 Oct 2026 19:00:30 +0000
Manifest this update: Sat 24 Oct 2026 19:00:30 +0000
Manifest next update: Sun 25 Oct 2026 19:00:30 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: ayEPoMXD0cvG/K0GSiMNRCcjbQbQAuzlEhSK38rL6Aw=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:34:b5:25:96:4b:62:6d:38:07:67:de:22:a8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Oct 24 19:00:30 2026 GMT
Not After : Oct 25 19:00:30 2026 GMT
Subject: CN=78446779b527c55d41f700d398235cc53c2afb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:ef:2e:58:0c:db:77:6c:7d:b9:cc:a8:8a:
1c:e8:a7:d3:47:dc:ca:5b:17:5e:4c:e9:e4:24:6d:
63:fe:80:c3:21:4d:ab:81:2d:08:fa:a8:b1:cc:22:
b3:85:0f:7a:a6:c8:b8:78:82:28:8e:ee:27:ab:c4:
4d:f2:d9:02:4d:29:90:a0:ad:f7:f3:e5:35:d8:47:
76:6f:24:5d:35:7b:4c:13:28:7f:f9:ae:dc:0d:74:
09:4a:a1:25:34:1c:63:96:d8:41:a3:e1:e1:3c:7b:
e0:8c:ae:74:39:76:ff:78:7b:4c:1a:7e:6a:81:c1:
76:fc:27:c1:4d:81:e6:a2:bb:fc:96:b6:72:41:e5:
2e:4c:70:ae:77:6c:9c:e3:4c:38:32:b0:8c:2c:d0:
27:dc:5a:c3:75:bd:2c:69:25:45:c3:09:9d:bb:81:
35:08:d8:e7:a7:68:ec:cb:58:7e:24:4f:86:17:2e:
37:74:5e:4b:b9:aa:19:3a:47:d2:d0:e5:e5:56:d4:
c0:44:35:6e:6c:cb:57:65:ef:d5:a8:ca:8c:7f:8d:
56:ac:f2:af:dd:12:fa:cd:b5:36:ee:ff:a0:f2:59:
94:83:d4:67:66:9f:e8:26:0f:60:0d:1c:fd:99:66:
48:23:9a:37:2e:3b:37:c2:7c:ae:cf:29:45:c2:8f:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:44:67:79:B5:27:C5:5D:41:F7:00:D3:98:23:5C:C5:3C:2A:FB:4A
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ce:82:1c:52:ba:e3:22:34:aa:ba:47:3b:95:13:18:66:1b:
f5:1c:c4:ee:ce:be:04:e3:ac:55:b0:fa:aa:0e:60:38:ab:3f:
b8:b7:ea:44:7d:18:86:87:09:58:1d:f4:3a:14:81:93:c9:98:
9a:a0:38:ff:7f:1c:18:35:cb:ce:fe:6e:32:18:87:84:0b:bb:
37:47:01:c6:5b:39:04:49:6a:1e:86:5b:d0:a8:ae:b6:89:50:
d8:58:d9:23:db:c5:f5:92:0b:d6:fe:45:b8:db:62:a5:03:7f:
ea:e3:04:8b:f0:5c:fa:9c:d8:57:68:64:a0:f6:12:c4:e8:11:
5d:8f:f2:84:77:1d:fe:61:d9:7b:31:a9:3c:7a:00:6a:b4:7d:
ea:38:42:ae:f1:1c:1a:30:60:fb:50:f6:5d:67:ae:31:28:28:
86:8f:3a:ac:80:7d:d1:8f:19:a6:a8:af:f3:cd:e5:d2:4e:3d:
c2:61:f4:dc:57:c6:8f:a6:ed:c6:96:28:ac:ff:fd:2e:77:cf:
7a:5e:48:a0:72:ea:e2:78:ea:55:3b:35:ae:76:ca:a9:be:7b:
26:17:e0:5c:a9:51:36:ac:93:83:da:4b:7c:f0:1d:c0:3d:78:
0e:60:c9:e4:3c:24:a3:8d:25:9d:07:cd:f5:78:97:87:5a:04:
3b:70:c2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:26:33 2026 by rpki-client