Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
File: UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft (raw, json)
Hash identifier: 16cZJq6LccdTxabK0uUXZTlqsLSklxpBumVczAQ0p7s=
Subject key identifier: DB:31:AA:EA:14:AF:31:16:10:FB:02:AB:97:29:7D:76:29:00:B0:C1
Authority key identifier: 51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
Certificate issuer: /CN=5177b45dbe49582983871498e928aee77607e4d2
Certificate serial: 01A181BE3C2F9E9EC3C2E459B7BCF7651D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:30 +0000
Manifest this update: Wed 28 Oct 2026 09:01:30 +0000
Manifest next update: Thu 29 Oct 2026 09:01:30 +0000
Files and hashes: 1: 9Hex18TBKBueDomTw4vvvqZLwVk.roa (hash: AvD4BYdpz590SrzArOTz39pFBwhxq164wDsdMrG1gDA=)
2: UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl (hash: m0YwOfD3Q7xfpLXOV3l2d7ghNI/GhPgJHoY75AgLoyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:3c:2f:9e:9e:c3:c2:e4:59:b7:bc:f7:65:1d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5177b45dbe49582983871498e928aee77607e4d2
Validity
Not Before: Oct 28 09:01:30 2026 GMT
Not After : Oct 29 09:01:30 2026 GMT
Subject: CN=db31aaea14af311610fb02ab97297d762900b0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:55:16:fb:b4:f4:25:84:40:d3:3c:42:98:
8b:1a:09:61:27:80:56:b3:7c:8e:ec:63:1a:7d:6c:
fb:a8:27:87:65:5a:74:50:cf:ba:0d:bc:6d:ed:02:
86:35:5b:0a:85:14:a0:87:c6:34:27:26:b0:89:93:
5c:15:00:0d:51:84:1d:87:cd:90:76:33:42:10:4d:
4c:18:9d:0c:ef:30:9a:55:2b:20:76:2e:10:55:56:
f6:6d:5f:2a:75:c7:dd:f6:45:00:41:e7:8e:37:44:
9d:02:f4:b2:a4:53:dc:fa:92:0c:39:0e:35:1b:5c:
44:79:94:e8:42:e8:eb:c5:a7:d5:37:bb:2a:ae:ec:
c5:3d:f7:9f:47:60:c7:63:a1:16:b9:ed:46:3b:75:
a7:f6:27:7e:87:a1:5e:86:d3:6a:44:af:38:14:e8:
e8:c2:cf:d6:7a:d4:e8:b1:9f:6e:ab:d6:fb:2f:66:
ff:c9:cd:a8:9d:0e:c8:b1:f9:78:fa:a5:9a:3e:9b:
34:84:c7:cb:46:3e:87:4e:f9:4d:19:23:10:92:d0:
25:94:21:19:1d:25:b7:c1:ad:de:f3:16:fd:59:e0:
32:a4:49:2f:08:10:8b:79:89:1b:6b:df:fe:5a:2f:
ac:ab:6f:48:96:5d:a6:b3:78:22:95:dc:7f:1d:f6:
f9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:AA:EA:14:AF:31:16:10:FB:02:AB:97:29:7D:76:29:00:B0:C1
X509v3 Authority Key Identifier:
keyid:51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:db:c6:8b:a0:92:ba:50:63:45:52:46:67:77:28:81:da:31:
95:c9:2f:46:da:a2:fe:79:ab:30:16:b5:4d:c2:26:3a:35:5c:
a9:d7:5e:d2:f0:21:18:71:d7:fb:c6:fd:be:93:e3:6f:2f:3f:
b3:16:03:a5:d6:f8:69:2f:cb:36:e5:2c:2f:3d:9f:06:f8:fa:
0e:f1:11:aa:84:49:cd:58:36:12:a7:cb:41:43:5d:7c:b1:cb:
5b:b4:8d:e5:1e:44:90:4f:39:e9:35:16:f3:72:d9:b9:5f:89:
72:a6:7b:75:2e:af:6f:5f:bc:f3:be:0b:6b:74:c2:3f:19:fe:
10:da:ea:c6:0c:3d:18:3f:68:1c:8f:76:92:4d:7f:b8:cb:85:
36:5f:5a:9e:d8:67:81:3d:75:37:09:cc:4a:ea:e0:ee:cc:5e:
9f:6d:f9:7e:97:31:23:d4:da:2f:45:ab:cd:73:2a:e4:07:29:
a0:99:49:fe:78:76:0b:80:c6:e6:8d:06:2d:5a:c3:63:64:14:
97:38:c5:9f:8b:f8:72:f2:69:d7:c0:67:f6:a1:f7:c1:4b:07:
b8:11:9d:cc:c7:8d:b4:c8:db:d4:a3:37:ed:23:eb:1b:e8:2c:
96:56:5d:be:59:06:46:20:8f:dc:da:c6:e7:f3:7a:90:8f:34:
6d:26:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:28:40 2026 by rpki-client