Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.mft
File: uIVgb7AHZgWtHR_hrGHov8NqFvw.mft (raw, json)
Hash identifier: HxoyA3gJOfOcWvDkvJOg6YqhSQjg6wQch9xOBb1ZDdg=
Subject key identifier: 4A:A7:4E:1C:3B:46:20:E3:EE:1B:70:65:1D:B5:A2:1F:4C:44:DE:55
Authority key identifier: B8:85:60:6F:B0:07:66:05:AD:1D:1F:E1:AC:61:E8:BF:C3:6A:16:FC
Certificate issuer: /CN=b885606fb0076605ad1d1fe1ac61e8bfc36a16fc
Certificate serial: 01A17D3C360270B5FDEA470543135781CEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.mft
Manifest number: 50
Signing time: Tue 27 Oct 2026 12:01:00 +0000
Manifest this update: Tue 27 Oct 2026 12:01:00 +0000
Manifest next update: Wed 28 Oct 2026 12:01:00 +0000
Files and hashes: 1: TzZDRLyZV9xu5ytuWDDtHzbeQ-8.roa (hash: vtuHNNVgEzYtIxuT+Bguvs6DdKUT6H+XxL3A5uwf/d4=)
2: uIVgb7AHZgWtHR_hrGHov8NqFvw.crl (hash: BL/tkqukKjgpRVGtFpEe4BICMvWMXoI8vQIJ0qyitKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:36:02:70:b5:fd:ea:47:05:43:13:57:81:ce:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b885606fb0076605ad1d1fe1ac61e8bfc36a16fc
Validity
Not Before: Oct 27 12:01:00 2026 GMT
Not After : Oct 28 12:01:00 2026 GMT
Subject: CN=4aa74e1c3b4620e3ee1b70651db5a21f4c44de55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:d1:8a:19:84:ab:3e:49:ae:cc:09:ee:6f:
78:04:87:98:31:e6:85:25:5d:b7:86:99:a7:6f:f6:
5e:ec:bc:d0:41:53:9c:73:90:08:7a:06:fe:7b:ae:
57:84:c8:f7:b5:7b:9b:5d:73:83:4b:53:df:06:9f:
ed:e6:c6:c2:af:37:6d:7f:c2:40:48:64:85:fc:c3:
1f:29:d5:70:8e:c6:c0:b4:bf:38:ef:12:b2:fc:28:
b3:03:29:c7:6f:3e:20:69:5c:5b:4b:13:02:ca:a4:
43:0a:3e:02:f2:6d:5a:70:4a:1d:4b:d8:bb:b3:d0:
13:40:7e:4f:1a:e8:3e:8d:b4:88:c9:0d:e2:56:48:
13:46:91:51:8e:4d:0f:8a:ee:c4:4d:5e:5b:4c:a5:
66:5e:f4:56:da:34:24:17:e5:ed:6e:19:3e:4d:48:
cc:16:45:1c:8c:d1:3c:a4:16:c9:1f:71:68:7c:0e:
fb:15:ab:92:74:68:29:2b:86:46:9b:2c:13:bf:64:
09:b6:be:76:cb:9a:b0:0b:12:3b:99:fa:97:09:cc:
0d:47:9e:59:7f:d2:00:62:c3:da:20:41:28:98:28:
22:63:4b:2e:70:8b:81:4a:15:02:ed:8f:f2:9c:7a:
07:71:bd:ab:f9:26:c3:c5:c7:51:0b:91:6a:2c:d7:
65:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:4E:1C:3B:46:20:E3:EE:1B:70:65:1D:B5:A2:1F:4C:44:DE:55
X509v3 Authority Key Identifier:
keyid:B8:85:60:6F:B0:07:66:05:AD:1D:1F:E1:AC:61:E8:BF:C3:6A:16:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uIVgb7AHZgWtHR_hrGHov8NqFvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f4db4f-0d5c-4465-946b-0226c6867b53/1/uIVgb7AHZgWtHR_hrGHov8NqFvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5e:08:ce:b7:25:30:58:38:f2:77:d3:40:a5:f4:90:7a:ea:
03:33:72:72:34:d0:fe:a4:16:4f:4b:1e:7a:ac:9e:86:bf:b5:
b8:8f:e4:22:c7:32:2c:60:8b:44:62:e8:de:ec:b9:a0:07:19:
78:4e:d9:75:ea:ca:1a:01:ec:ce:22:94:32:17:03:ee:ca:1d:
94:3b:0e:6a:3c:ed:77:05:21:31:4c:9c:5b:ff:98:b8:c1:33:
ec:39:fb:5c:a9:29:3e:10:87:5d:50:6d:af:b5:98:45:cf:48:
4a:b2:2e:a1:be:36:d5:1e:89:9f:aa:87:b2:69:91:71:95:76:
82:78:c9:71:b2:d2:cb:9f:34:ef:76:49:49:15:4b:5e:c4:63:
c4:b6:b2:7b:e5:61:85:d5:7a:12:86:c1:0e:20:6e:8c:dc:ec:
c7:ee:3c:55:34:da:c3:51:40:12:67:37:df:05:4a:f3:c2:6f:
61:49:5a:aa:b8:64:31:54:aa:a4:72:47:53:54:da:f7:0a:5b:
b8:f8:d7:aa:b4:22:5c:ed:68:57:d8:1a:6c:1b:d9:16:d9:ff:
22:65:72:0e:b0:66:b1:36:19:12:8c:50:48:9d:f1:27:f3:d4:
e6:49:70:d0:4f:a4:88:15:aa:0c:59:c8:85:25:f6:64:02:80:
78:c3:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:50:59 2026 by rpki-client