Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
File: UiI961w70fWf3qw84Sve7HTnNj0.mft (raw, json)
Hash identifier: siW+ZZnFhNBcHis7JQI2EqpPTRn4LJIVKetYwyYame4=
Subject key identifier: 06:0B:0C:C6:3F:E0:9F:55:D9:4E:8A:0D:C7:C7:39:71:CE:B3:CC:AA
Authority key identifier: 52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
Certificate issuer: /CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Certificate serial: 01A15F31BAD9EFF0AF2D75D8F4103EAA95CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
Manifest number: 4D
Signing time: Wed 21 Oct 2026 16:00:56 +0000
Manifest this update: Wed 21 Oct 2026 16:00:56 +0000
Manifest next update: Thu 22 Oct 2026 16:00:56 +0000
Files and hashes: 1: UiI961w70fWf3qw84Sve7HTnNj0.crl (hash: xPO3wAFx/4trEZzXF2s4X88flk9qPTKCVyL/BfLd/gc=)
2: Z4As5jdK0zqqLdqcEYEpyza0LWU.roa (hash: 57a2i1Qehwj+//Suej0ubTZbtNBhcr4cBpOYAp/+H0s=)
3: kee-TAF1NP5oKCB1iTJjqT_b2Mc.roa (hash: N7D6JbWuKqcfI7WtKVNjHFaHj7JY9sozkTCyXD/KWh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:ba:d9:ef:f0:af:2d:75:d8:f4:10:3e:aa:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52223deb5c3bd1f59fdeac3ce12bdeec74e7363d
Validity
Not Before: Oct 21 16:00:56 2026 GMT
Not After : Oct 22 16:00:56 2026 GMT
Subject: CN=060b0cc63fe09f55d94e8a0dc7c73971ceb3ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:9e:88:6b:7a:6a:ab:0b:ad:59:8a:8d:a0:
78:23:6a:bf:9a:28:19:d6:d2:eb:9d:66:74:53:44:
26:72:ba:88:4c:d6:5a:c4:ff:ae:4a:c9:76:ca:25:
31:73:42:b6:7c:70:df:2b:b3:9c:a1:59:18:2a:02:
74:8e:37:71:66:08:e3:23:61:96:e2:13:f6:23:4d:
c7:2e:23:76:9d:1d:b8:a6:80:20:aa:ce:c6:a8:62:
4f:48:52:65:af:d7:99:8d:46:23:66:3c:1f:e5:4d:
23:bb:57:16:a5:65:60:6d:c5:36:fb:b6:70:83:c9:
27:90:18:24:b9:b9:dd:b0:f0:31:01:04:30:97:af:
98:08:db:cc:84:e5:f9:f2:8d:0a:a3:49:eb:7b:6a:
f8:da:08:ce:84:d7:fe:e2:b0:c4:b4:8e:75:9c:64:
64:90:18:23:25:1b:61:e4:c0:bb:55:53:14:5d:15:
c4:0e:eb:10:a2:0c:ad:87:ee:1f:29:28:80:af:0c:
7e:b6:38:54:52:a4:22:04:d0:5c:dc:dc:4f:19:d0:
07:23:ef:68:97:f4:4f:21:9e:7f:79:29:16:b5:e6:
c0:37:9e:fa:e4:86:cf:b2:3e:34:a9:a1:61:90:b3:
ef:e8:c9:f9:df:70:92:4f:db:a5:9b:89:81:94:03:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0B:0C:C6:3F:E0:9F:55:D9:4E:8A:0D:C7:C7:39:71:CE:B3:CC:AA
X509v3 Authority Key Identifier:
keyid:52:22:3D:EB:5C:3B:D1:F5:9F:DE:AC:3C:E1:2B:DE:EC:74:E7:36:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiI961w70fWf3qw84Sve7HTnNj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2ceefd-d7d4-418d-8443-2960d6ec7b46/1/UiI961w70fWf3qw84Sve7HTnNj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:86:60:f5:ad:ea:19:cc:f0:33:21:b2:ee:4b:8d:fc:89:3c:
11:19:02:c6:1f:77:2d:a3:89:80:8c:66:42:93:83:60:94:07:
e6:5a:47:a6:25:6d:36:03:66:94:66:26:37:de:de:5e:08:69:
78:a7:0c:92:f1:37:b6:3e:27:1a:51:0c:6a:9e:15:8c:56:06:
0a:3e:53:34:80:88:01:fb:1f:9f:88:ae:17:d4:fa:e8:df:6c:
e2:37:18:96:63:b3:f9:3f:55:cd:49:b1:a2:34:28:4e:9d:6c:
c3:5c:23:22:45:f4:31:8a:1e:1c:c8:a6:70:b6:a6:78:af:60:
a2:7f:9a:17:52:89:ab:a9:7e:f1:7d:41:36:92:22:87:8c:69:
cb:f9:e5:f8:00:fe:7f:b1:82:01:cd:e7:a5:06:56:2e:63:e4:
5d:0d:79:05:f3:63:6e:bb:c3:55:91:d9:47:55:86:55:32:ce:
b2:72:18:73:58:ff:a4:ae:ee:d7:6a:f6:c7:c0:d9:d4:1a:93:
07:d8:d6:56:83:ac:f8:d3:fb:c7:ba:23:6e:5b:34:2b:98:0c:
24:fd:f4:98:5c:15:f2:26:93:76:16:c7:5c:af:53:2c:cc:af:
9c:72:07:3c:b2:02:1f:06:1a:e0:6e:53:b5:53:a8:78:c7:ae:
57:5d:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:40 2026 by rpki-client