Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: NvcwU8LGlw4aNruwl0MbavLITq8YSd5OuwtmcRhvLCY=
Subject key identifier: 45:D2:53:D4:36:5D:DF:A8:A1:27:2D:CA:33:E7:2A:B0:67:F0:71:77
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 01A17BF29522A2AF3BDAC3970E9B89DA5B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 1220
Signing time: Tue 27 Oct 2026 06:00:57 +0000
Manifest this update: Tue 27 Oct 2026 06:00:57 +0000
Manifest next update: Wed 28 Oct 2026 06:00:57 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: fZP+Ojwf+m1YaCGaF3uBm0BME2kQNAwMhGHXrLKtnxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:95:22:a2:af:3b:da:c3:97:0e:9b:89:da:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Oct 27 06:00:57 2026 GMT
Not After : Oct 28 06:00:57 2026 GMT
Subject: CN=45d253d4365ddfa8a1272dca33e72ab067f07177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5c:47:c6:0d:80:98:96:77:95:b1:4c:11:13:
8c:54:d3:4c:3b:5b:7e:77:33:18:6e:ff:52:d2:1a:
de:ec:0d:33:e4:6e:39:23:c2:14:2b:4e:38:77:1d:
33:50:c3:00:d5:1e:b2:44:1c:16:3e:3d:57:a0:6d:
8e:f7:a1:aa:63:54:da:d6:19:bd:19:94:a2:75:7b:
1e:e7:1a:ec:b0:59:a8:9f:d6:1c:7e:44:24:00:08:
00:f7:bb:23:92:08:e7:4b:42:d1:3a:c2:fd:2a:ee:
e2:65:40:07:f6:6c:02:14:6c:43:d4:80:53:04:18:
c2:97:29:fb:30:53:b1:5b:cf:9f:fc:cd:d5:ec:3c:
c8:52:de:91:df:f9:39:4c:a4:78:a6:90:d5:f5:2c:
b2:4f:34:9f:35:97:46:b0:77:ad:a7:0b:d0:60:6d:
e4:a8:37:5c:a4:36:00:e2:3c:40:06:d8:c9:5d:5b:
19:cd:c2:d7:64:b7:97:ce:1d:0a:67:d3:44:f6:25:
5d:3e:0b:02:45:74:94:58:cf:9f:25:e2:42:24:04:
06:e1:26:a5:f6:db:31:19:ae:98:44:63:e1:73:89:
b2:d6:b5:2c:72:ce:d1:da:08:3e:fd:c1:6f:42:e5:
72:4b:62:eb:9f:9b:d9:51:62:4f:9d:2c:2e:29:6e:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D2:53:D4:36:5D:DF:A8:A1:27:2D:CA:33:E7:2A:B0:67:F0:71:77
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:59:24:f8:a3:68:62:8e:8f:ea:70:6c:31:50:ec:2c:f8:12:
4b:40:08:8e:4f:77:7d:52:79:82:81:ce:bd:04:18:77:f8:df:
31:bb:e2:17:74:31:63:f9:3f:2a:2d:9b:23:07:5c:03:c2:8a:
96:c7:f1:1d:09:c7:3b:be:fd:9e:19:20:96:93:e8:d8:fd:0a:
3c:9f:46:c6:7d:1c:67:56:76:6e:af:a7:b7:f3:81:76:0e:4f:
86:88:b6:6c:bd:98:a0:22:cc:ae:27:ba:9b:c8:78:97:89:be:
04:f4:3d:8b:5b:95:55:e2:ab:19:f9:63:e5:e7:92:d7:68:87:
63:ee:eb:10:7a:b8:29:83:20:b9:68:b2:1e:eb:bc:92:89:f9:
52:8f:52:a2:d4:24:95:5c:f8:b2:62:ad:19:62:99:a4:ae:da:
98:3a:7e:c2:c9:ae:fe:4d:d0:ce:31:86:35:32:b0:90:dc:86:
0b:fa:fa:6f:11:75:72:b7:f0:7f:f5:10:34:a6:b3:1c:69:94:
c0:73:fd:01:60:44:b8:09:89:e9:05:fb:0d:f2:27:29:74:21:
4a:f6:7c:80:75:72:66:a6:00:8f:51:6f:4f:1b:9e:da:32:85:
6a:f3:60:79:c0:22:0d:0f:97:f3:cd:3c:cd:19:b6:41:4a:91:
eb:50:1e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78pUioq872sOXDpuJ2lsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTlkYjdmMmMyZTNiM2FiZDhiZjQxNWYwY2UxZmZmMzM0
MzI5ZWMwHhcNMjYxMDI3MDYwMDU3WhcNMjYxMDI4MDYwMDU3WjAzMTEwLwYDVQQD
Eyg0NWQyNTNkNDM2NWRkZmE4YTEyNzJkY2EzM2U3MmFiMDY3ZjA3MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lxHxg2AmJZ3lbFMEROMVNNMO1t+
dzMYbv9S0hre7A0z5G45I8IUK044dx0zUMMA1R6yRBwWPj1XoG2O96GqY1Ta1hm9
GZSidXse5xrssFmon9YcfkQkAAgA97sjkgjnS0LROsL9Ku7iZUAH9mwCFGxD1IBT
BBjClyn7MFOxW8+f/M3V7DzIUt6R3/k5TKR4ppDV9SyyTzSfNZdGsHetpwvQYG3k
qDdcpDYA4jxABtjJXVsZzcLXZLeXzh0KZ9NE9iVdPgsCRXSUWM+fJeJCJAQG4Sal
9tsxGa6YRGPhc4my1rUscs7R2gg+/cFvQuVyS2Lrn5vZUWJPnSwuKW4i5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXSU9Q2Xd+ooSctyjPnKrBn8HF3MB8GA1UdIwQY
MBaAFLhZ238sLjs6vYv0FfDOH/8zQynsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzIt
NGMxYzU3YTgxZmZkLzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZWI3YzMtZTM0YS00ZmJjLTkyNzItNGMxYzU3YTgxZmZk
LzEvdUZuYmZ5d3VPenE5aV9RVjhNNGZfek5ES2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVkk+KNo
Yo6P6nBsMVDsLPgSS0AIjk93fVJ5goHOvQQYd/jfMbviF3QxY/k/Ki2bIwdcA8KK
lsfxHQnHO779nhkglpPo2P0KPJ9Gxn0cZ1Z2bq+nt/OBdg5Phoi2bL2YoCLMrie6
m8h4l4m+BPQ9i1uVVeKrGflj5eeS12iHY+7rEHq4KYMguWiyHuu8kon5Uo9SotQk
lVz4smKtGWKZpK7amDp+wsmu/k3QzjGGNTKwkNyGC/r6bxF1crfwf/UQNKazHGmU
wHP9AWBEuAmJ6QX7DfInKXQhSvZ8gHVyZqYAj1FvTxue2jKFavNgecAiDQ+X8808
zRm2QUqR61AesQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:31 2026 by rpki-client