Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: Ljr+ULrT1sAU2dKh/+BOlqrN2vivjyQ4BIkusvKfOHY=
Subject key identifier: 6C:58:C1:3F:7E:2A:E6:7F:49:31:28:BC:6C:3A:A9:7C:AD:8D:85:69
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01A17F985ED8B49BC995232ED3CD108EF99C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 17E8
Signing time: Tue 27 Oct 2026 23:00:54 +0000
Manifest this update: Tue 27 Oct 2026 23:00:54 +0000
Manifest next update: Wed 28 Oct 2026 23:00:54 +0000
Files and hashes: 1: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (hash: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: WlDZ+mmn73sRbDkTnzsxGxZKtkSxmcUfZWV8wHY5ZwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:5e:d8:b4:9b:c9:95:23:2e:d3:cd:10:8e:f9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Oct 27 23:00:54 2026 GMT
Not After : Oct 28 23:00:54 2026 GMT
Subject: CN=6c58c13f7e2ae67f493128bc6c3aa97cad8d8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:f1:60:22:d8:00:33:61:d1:5e:5e:58:be:
c4:c0:cf:aa:a7:94:8e:a7:63:d1:28:75:fe:aa:e6:
9f:8a:dc:41:45:4d:17:f7:a3:56:5e:40:5b:94:c6:
15:7a:6e:77:1a:87:8f:47:56:7a:d1:12:83:a2:cb:
9f:d7:23:c4:31:ee:dc:5b:86:4f:d7:3c:a2:30:cd:
df:ed:ce:71:62:43:db:18:91:25:9c:f2:52:82:b8:
ad:1a:5c:85:9d:04:83:6a:22:ca:21:b9:b3:da:9b:
c1:c8:44:1d:39:0c:c6:55:dd:53:85:0c:95:46:6d:
f3:51:59:0a:53:4d:ac:37:e5:07:e9:8b:a2:41:e8:
93:8d:84:af:e3:1a:f7:35:3f:95:80:4c:4e:93:45:
85:3f:97:21:e0:7c:f0:04:ab:25:84:dd:42:55:62:
43:90:f2:1e:9f:da:9a:68:7f:62:74:ab:58:d8:37:
d3:23:ed:83:dc:c9:fe:64:dc:c5:fd:9e:3d:67:e5:
40:d2:f1:0c:8b:9b:a8:72:f2:4f:79:03:5b:70:c8:
d7:b7:45:6a:40:50:e7:4b:9a:5b:c9:43:ce:73:34:
e6:04:a7:57:07:69:06:14:93:94:e4:92:26:e3:37:
db:c9:f0:35:d1:04:6a:27:e2:23:4c:ce:f8:97:38:
ab:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:58:C1:3F:7E:2A:E6:7F:49:31:28:BC:6C:3A:A9:7C:AD:8D:85:69
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:68:29:0a:16:65:7d:bb:03:32:3f:7d:23:d5:e2:95:a8:a8:
07:43:9c:c3:0f:8b:e0:2f:5e:12:ec:53:99:f5:b3:a3:72:e3:
69:6b:72:e0:f1:58:ea:5b:d4:4f:1f:fa:ec:41:88:68:a7:81:
bb:59:a7:d4:dd:60:6c:e0:3f:b8:5b:83:7f:71:29:fa:7c:c7:
40:c0:3f:02:35:5a:98:7a:ce:3c:b5:db:ea:ce:00:34:5e:7f:
ee:f7:6e:53:1c:8d:c4:9d:5e:0e:a1:c7:14:9d:c5:26:5e:2c:
7f:20:a9:b2:4a:8c:f8:b8:b8:94:1d:c0:e3:db:28:e5:15:8e:
69:fa:05:ae:33:1d:d6:97:2c:98:5c:3e:29:2b:a0:b3:8d:cd:
d0:c0:d5:1d:2d:a0:10:b4:89:c3:f5:d0:66:26:90:55:7f:1a:
35:25:5f:6c:07:2f:e0:ef:60:89:14:3e:11:a3:85:07:ff:5a:
39:11:f4:d6:c5:f2:2b:38:13:fa:08:f4:be:95:6d:d6:bc:e4:
e7:c9:c7:23:d6:7b:1e:08:3e:24:49:dd:e5:8b:5a:d3:87:86:
d5:01:90:b1:38:e2:01:b5:e4:fb:1b:b2:3c:40:e1:66:f9:ef:
7d:da:a1:40:03:ed:b9:d6:f2:d8:67:ac:db:b7:90:b4:c6:5e:
35:53:58:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/mF7YtJvJlSMu080QjvmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj
MDEzZDUwHhcNMjYxMDI3MjMwMDU0WhcNMjYxMDI4MjMwMDU0WjAzMTEwLwYDVQQD
Eyg2YzU4YzEzZjdlMmFlNjdmNDkzMTI4YmM2YzNhYTk3Y2FkOGQ4NTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCjxYCLYADNh0V5eWL7EwM+qp5SO
p2PRKHX+quafitxBRU0X96NWXkBblMYVem53GoePR1Z60RKDosuf1yPEMe7cW4ZP
1zyiMM3f7c5xYkPbGJElnPJSgritGlyFnQSDaiLKIbmz2pvByEQdOQzGVd1ThQyV
Rm3zUVkKU02sN+UH6YuiQeiTjYSv4xr3NT+VgExOk0WFP5ch4HzwBKslhN1CVWJD
kPIen9qaaH9idKtY2DfTI+2D3Mn+ZNzF/Z49Z+VA0vEMi5uocvJPeQNbcMjXt0Vq
QFDnS5pbyUPOczTmBKdXB2kGFJOU5JIm4zfbyfA10QRqJ+IjTM74lzirXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxYwT9+KuZ/STEovGw6qXytjYVpMB8GA1UdIwQY
MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt
OGFjMTdlOWM0MGRiLzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi
LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWgpChZl
fbsDMj99I9XilaioB0Ocww+L4C9eEuxTmfWzo3LjaWty4PFY6lvUTx/67EGIaKeB
u1mn1N1gbOA/uFuDf3Ep+nzHQMA/AjVamHrOPLXb6s4ANF5/7vduUxyNxJ1eDqHH
FJ3FJl4sfyCpskqM+Li4lB3A49so5RWOafoFrjMd1pcsmFw+KSugs43N0MDVHS2g
ELSJw/XQZiaQVX8aNSVfbAcv4O9giRQ+EaOFB/9aORH01sXyKzgT+gj0vpVt1rzk
58nHI9Z7Hgg+JEnd5Yta04eG1QGQsTjiAbXk+xuyPEDhZvnvfdqhQAPtudby2Ges
27eQtMZeNVNYEQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:55:45 2026 by rpki-client