Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
File: uUUIWZXzy3x9vQXkF3TaYksa8uk.mft (raw, json)
Hash identifier: nR30mxiw3OaEObW5NFJouqEV/FCTptxCIrtG5EPGqSM=
Subject key identifier: 28:D9:48:2E:E9:F4:B7:A8:72:2A:AB:26:8E:BA:17:DC:2C:D2:33:73
Authority key identifier: B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
Certificate issuer: /CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Certificate serial: 01A176951CE6E7B13A47FE6B53BD23ED9236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
Manifest number: 1A71
Signing time: Mon 26 Oct 2026 05:00:46 +0000
Manifest this update: Mon 26 Oct 2026 05:00:46 +0000
Manifest next update: Tue 27 Oct 2026 05:00:46 +0000
Files and hashes: 1: WNWghHX6A_--K_9pGoPdOa9nJP0.roa (hash: fxFsmGn7IXBiC3Spc2QXBEY5TjOgzlGq+3Gi493dDJw=)
2: uUUIWZXzy3x9vQXkF3TaYksa8uk.crl (hash: XVMEWMqeH1zAUUD7iyEdu+mEG9cUk/S2tXTTqbP8+NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:95:1c:e6:e7:b1:3a:47:fe:6b:53:bd:23:ed:92:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b945085995f3cb7c7dbd05e41774da624b1af2e9
Validity
Not Before: Oct 26 05:00:46 2026 GMT
Not After : Oct 27 05:00:46 2026 GMT
Subject: CN=28d9482ee9f4b7a8722aab268eba17dc2cd23373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:0e:73:08:9f:97:32:62:13:ee:16:0d:b3:
a6:3e:d5:08:0a:d3:ae:78:93:2e:7f:9c:21:22:12:
78:3d:66:46:7b:9a:3a:0c:d3:2d:b0:3b:f2:29:a0:
ee:d0:49:55:95:10:43:9b:a3:79:95:ff:c6:b0:28:
24:33:c4:8d:b7:3a:58:fb:02:a6:64:65:61:fb:3c:
ec:5f:bb:25:cf:3f:fe:30:f3:ac:94:ff:6f:e1:5e:
a6:42:ce:f9:7b:cd:61:2c:20:28:70:8e:7a:0f:ab:
c9:bf:3f:57:88:04:ea:bb:cf:45:c1:7e:88:30:12:
76:bc:1d:1d:20:d5:77:89:73:5f:5d:4d:f4:02:13:
54:1a:51:ea:0f:3d:2c:75:87:2f:96:13:9c:f1:1b:
38:6b:de:7b:d0:c1:2e:1e:59:14:e0:c2:01:5c:36:
a0:36:bb:8c:2f:ed:84:73:23:00:bc:f7:79:ae:52:
62:4a:f7:f8:91:1e:9c:32:66:73:92:20:de:14:80:
ba:d3:ee:d1:a6:21:e7:cf:5e:1b:c0:72:66:aa:f9:
4c:4c:17:71:a8:b2:98:29:1a:db:fd:e0:6f:23:4e:
ee:5a:2a:af:f6:d8:01:a8:eb:ed:a1:cb:ad:de:2a:
74:db:ad:e3:b2:8b:13:55:3f:f2:b1:6d:fb:8c:95:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:48:2E:E9:F4:B7:A8:72:2A:AB:26:8E:BA:17:DC:2C:D2:33:73
X509v3 Authority Key Identifier:
keyid:B9:45:08:59:95:F3:CB:7C:7D:BD:05:E4:17:74:DA:62:4B:1A:F2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUUIWZXzy3x9vQXkF3TaYksa8uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/057a69-e68e-4004-8625-9177b14ee633/1/uUUIWZXzy3x9vQXkF3TaYksa8uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9c:31:97:ab:d4:19:ff:e3:6e:d0:09:e4:01:b8:e4:db:7a:
7e:55:99:29:a3:79:6a:fe:a5:ac:db:45:fb:ab:bc:d0:5c:5d:
68:3b:3f:98:cd:05:32:c0:82:68:01:42:d5:c2:91:7f:19:e7:
8a:3e:f3:d4:9e:c4:5a:f4:ac:7e:55:f6:c9:fb:0f:f5:23:ea:
dd:82:8a:87:8e:3b:d3:c3:1a:f6:0a:09:49:d1:33:ab:fa:56:
9d:5b:18:0d:35:20:6e:5f:f6:2d:2a:47:e2:38:c2:24:01:05:
58:2a:96:70:f8:a1:8d:48:89:43:39:dd:9e:74:e3:97:88:ca:
2c:d5:fd:a3:96:a8:ea:30:28:d7:71:c2:6e:a4:88:55:ae:1e:
c0:37:6e:0a:67:c6:82:2d:6f:be:1b:d6:17:9e:7d:fc:86:dc:
50:7d:3c:f5:7c:38:6a:d5:e4:e8:1a:a9:cc:a8:b9:dd:de:e9:
bf:95:43:ad:96:5d:af:23:3a:88:31:a9:06:1d:2a:bf:14:50:
34:4d:39:a5:6d:0a:b9:65:f4:f0:10:ce:ea:3d:f9:2d:81:49:
b4:88:db:d4:e3:39:ef:e1:2a:ea:1a:c7:48:de:80:a9:0c:b7:
60:e5:3b:c4:94:07:c2:f6:74:c3:3c:90:07:72:39:0d:88:e2:
e8:6a:9d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:05 2026 by rpki-client