Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: oX679a8zaft+68gCmvoyHgLPaHGR4rLeH/dEh35ApaY=
Subject key identifier: C4:EB:6E:64:60:40:69:11:2C:BD:A3:DA:26:84:00:53:91:30:0C:AF
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 01A180AAE69F249ED1C186F42F7C900BE6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0E70
Signing time: Wed 28 Oct 2026 04:00:46 +0000
Manifest this update: Wed 28 Oct 2026 04:00:46 +0000
Manifest next update: Thu 29 Oct 2026 04:00:46 +0000
Files and hashes: 1: msj-QCorJnXKr4kvj6gncmTacwY.roa (hash: 9SrsATf3LBoprWf5FN/vM5cjeV8i1QEYJtsGy50JnIY=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: 3b7+M90f+JIMhuSxZCU5p/jpcDD4ArSlUxW0q6501Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:aa:e6:9f:24:9e:d1:c1:86:f4:2f:7c:90:0b:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Oct 28 04:00:46 2026 GMT
Not After : Oct 29 04:00:46 2026 GMT
Subject: CN=c4eb6e64604069112cbda3da2684005391300caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:d8:4f:58:3b:c9:a1:c7:35:0f:35:bb:42:
18:d5:9c:d7:ea:2e:95:a1:39:4a:82:fb:b4:56:b8:
ea:0c:b5:5a:70:0f:53:89:65:a8:11:aa:68:ab:8b:
62:fa:ab:3f:06:7d:2f:7b:57:16:61:a0:2f:76:ff:
8f:e7:a7:cd:d9:2a:2d:cc:5d:9e:6b:80:da:84:0d:
af:87:96:ec:19:f4:eb:97:45:b5:2e:72:e2:f9:d3:
8a:43:ce:76:01:d4:e1:5a:67:d1:f7:22:4d:2c:c3:
39:83:c8:72:73:fd:56:97:bf:e5:e3:7c:c9:62:5d:
45:4b:d3:dc:7d:85:b1:77:70:f2:52:b0:bb:ca:42:
c2:ef:51:1c:8a:24:89:96:92:9e:59:a3:46:9c:c3:
86:d8:ba:dd:16:16:85:4e:85:b8:90:78:99:be:8c:
da:05:b8:0f:0e:5c:02:5d:88:29:e3:58:61:59:9b:
01:35:5a:48:44:33:6a:da:dc:ad:f1:59:b0:a0:0c:
56:e1:e1:5f:87:a1:65:c5:cd:e2:91:59:19:19:66:
5d:5c:b2:b1:42:db:31:b1:14:72:c0:20:c4:99:94:
f4:02:55:13:c1:ae:4e:dd:da:0c:63:05:da:79:a2:
dc:47:cf:a1:8f:1c:1a:cc:f9:7a:04:e5:d0:5d:12:
a8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EB:6E:64:60:40:69:11:2C:BD:A3:DA:26:84:00:53:91:30:0C:AF
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7b:56:60:75:b5:6a:8a:f5:73:65:3b:da:1f:28:6a:ed:bc:
29:34:27:a6:3d:e2:0c:45:54:fc:fd:79:8a:a2:4b:ff:f5:67:
56:72:04:6d:d3:e1:b6:a8:b7:6d:44:34:66:f4:06:ae:06:7f:
75:36:15:5d:7d:f0:23:61:47:ca:24:06:2e:f6:44:7e:ec:11:
1b:de:35:5f:71:cd:ef:69:37:f0:58:11:87:e3:49:cf:62:ec:
10:15:ff:0c:38:9f:a2:7f:aa:bd:32:49:8b:41:16:2d:64:5f:
d2:e5:e4:7b:2f:d9:6e:07:dc:7d:7d:f7:dd:54:df:af:36:58:
5f:9f:f0:12:7c:d8:12:80:1a:b4:d5:99:e5:4d:bc:40:1f:2b:
20:8b:3b:f1:47:7f:56:aa:8a:b0:80:06:20:c8:a0:fd:6f:b0:
0a:b0:28:5d:37:71:3f:90:09:4c:89:38:72:de:a7:2f:91:09:
2d:3e:c9:b9:9e:90:4b:3b:c9:a0:38:e2:00:57:9e:55:3d:d0:
de:14:af:1a:c3:31:27:fb:74:3f:c5:15:45:d3:6c:a5:7f:ee:
17:59:2a:8f:61:07:94:26:84:51:ce:b2:da:82:03:14:ee:5e:
bc:ae:93:60:7e:fd:05:70:ae:4e:86:ce:3b:39:6a:f5:0f:ce:
a8:2a:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:49:44 2026 by rpki-client