
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: IBNLzuSH4pnqEvrQvQx421UhTH9AfzYvOgyQSVQu6nU=
Subject key identifier: 3B:9B:00:78:26:EB:B2:65:3B:6A:E5:AC:05:6B:AE:29:39:3C:A9:20
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 01A178837C90DFF82AAD6AD927154C768198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 1AC4
Signing time: Mon 26 Oct 2026 14:00:45 +0000
Manifest this update: Mon 26 Oct 2026 14:00:45 +0000
Manifest next update: Tue 27 Oct 2026 14:00:45 +0000
Files and hashes: 1: If7ufj-_b2EUoFRKwbI33h0oDZE.roa (hash: aOxlUZckeVrxmkXquW/EMNwg7hPa/yLX7xjosCstJGg=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: Htg2/dUFnjy0HcLvpCfgSpQjs6c9mczvM9hIFuYm3Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:7c:90:df:f8:2a:ad:6a:d9:27:15:4c:76:81:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Oct 26 14:00:45 2026 GMT
Not After : Oct 27 14:00:45 2026 GMT
Subject: CN=3b9b007826ebb2653b6ae5ac056bae29393ca920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:da:8f:7b:88:1a:77:bb:e5:de:ce:3c:06:3b:
e7:d5:95:48:48:75:ab:1d:a8:86:3c:b5:aa:36:ec:
19:30:1d:3c:ba:1c:9c:8a:d4:36:4c:37:fd:2d:14:
87:50:f0:28:f8:da:eb:1f:90:9f:d8:7c:13:eb:78:
5f:4c:29:e5:6f:b0:0c:d0:c9:67:e8:73:25:ba:53:
98:c9:8d:e1:c7:bf:45:4e:93:fa:ad:70:ca:6d:e2:
0a:e8:ce:ef:b0:61:bf:12:aa:83:38:68:04:65:fe:
d4:b8:35:ea:31:b2:b7:00:7f:88:0b:e2:1a:cc:48:
8d:56:02:db:7b:cb:fa:57:36:08:92:5c:1b:25:aa:
7d:36:33:81:18:75:80:4a:19:81:62:76:47:d6:bd:
69:1f:9a:6f:89:92:69:a5:71:15:71:12:df:f4:ff:
b9:81:20:73:93:8a:81:95:82:9c:84:b4:66:13:33:
b6:72:05:2a:98:a8:ad:51:49:c3:d4:98:bc:b8:00:
60:5d:a3:b9:2b:4b:9a:ea:90:18:1f:bd:b9:cf:67:
71:15:76:c4:11:31:1c:06:2e:a8:52:0a:e3:66:f3:
e3:d2:bf:09:7b:1e:6c:30:ac:6a:4b:41:86:5b:c7:
3c:88:77:ea:60:42:b8:f8:7d:09:2b:36:c1:d0:a0:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:00:78:26:EB:B2:65:3B:6A:E5:AC:05:6B:AE:29:39:3C:A9:20
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3d:8b:61:5c:90:d8:aa:fe:fe:f6:a7:9d:4a:d2:c7:32:75:
b3:9b:29:c0:b0:61:19:62:22:83:b6:fd:69:6b:77:da:f5:b7:
08:b2:58:70:d2:84:d2:76:31:77:78:22:cd:9b:37:9b:6b:8a:
2e:4d:bf:c5:f8:2d:61:ac:93:92:d8:18:a7:c8:28:55:69:bc:
f7:4b:1b:d1:56:3e:5f:8a:39:bf:7f:b4:e7:b6:a9:61:eb:81:
fa:f3:28:bb:91:c4:f0:14:cf:7a:ab:26:65:ce:b7:a6:84:6a:
47:38:f0:cb:ac:50:62:d0:4a:38:46:93:09:98:30:f2:98:99:
97:2e:dc:6e:3c:05:c6:61:eb:18:92:fe:2f:e2:a6:c6:71:ba:
c8:28:06:cf:61:9c:a1:25:18:be:14:b7:d4:82:cf:25:7b:1c:
8d:13:9b:91:ec:7a:c3:32:49:a8:34:dd:5f:50:09:73:4c:7e:
71:03:9b:51:b5:c8:4d:0b:1a:70:01:8a:01:2b:47:00:e2:f3:
23:31:8c:79:4c:96:40:2c:ec:67:04:76:67:5f:cf:a9:47:ca:
30:04:52:fe:fe:86:90:27:34:d5:7a:d4:14:8f:e4:bd:fc:55:
4f:df:aa:b6:3a:86:bb:f9:96:b5:19:62:4e:8f:a5:d9:11:07:
47:97:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:35:51 2026 by rpki-client