Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
File: uJQ3VOkjRai7qz2yvDbWGOXswOg.mft (raw, json)
Hash identifier: MwPW5oqLwU7Yv/nm5bmthXYGmf/0hlawkQh29mwhjCQ=
Subject key identifier: 9F:B9:9A:37:4B:82:63:44:15:2D:E5:BD:A0:B8:46:20:5C:9D:54:D5
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 01A17F2AAA99EA4DD3721E9299B48E265E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
Manifest number: 1A5A
Signing time: Tue 27 Oct 2026 21:01:04 +0000
Manifest this update: Tue 27 Oct 2026 21:01:04 +0000
Manifest next update: Wed 28 Oct 2026 21:01:04 +0000
Files and hashes: 1: uJQ3VOkjRai7qz2yvDbWGOXswOg.crl (hash: 1vgiwcHvbDDBo6243g/DJQ7IhVAC53xO3qNBdcPgnGo=)
2: wFgOguyGf2k_urlg3TTD49UB-Bc.roa (hash: mmkwLxl45AUjDJ9WsNq5QpGXB2gTpDmmeU8A9ngZEvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:aa:99:ea:4d:d3:72:1e:92:99:b4:8e:26:5e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Oct 27 21:01:04 2026 GMT
Not After : Oct 28 21:01:04 2026 GMT
Subject: CN=9fb99a374b826344152de5bda0b846205c9d54d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:9d:ab:c8:d1:06:5f:f1:0c:2d:5a:2e:16:
7f:98:a3:ca:ce:8a:1a:23:9e:57:f4:07:3f:3b:ac:
96:62:1a:96:b6:24:eb:c2:d2:b5:3e:76:31:60:1c:
fd:72:d9:83:56:57:79:14:38:62:85:d5:3d:83:3a:
01:ec:93:b6:5e:67:15:39:12:73:70:ce:65:79:6a:
80:33:40:0d:10:6b:61:c3:99:81:52:60:66:6f:32:
8c:5f:96:6b:75:37:d5:36:52:d4:a3:49:cd:2d:c6:
54:98:ca:01:bf:62:f8:50:78:67:d6:9c:cc:54:10:
a9:03:68:60:a2:1f:0e:1a:08:2e:79:fa:b1:11:5c:
bb:ce:65:ce:b0:6a:af:29:d9:c9:13:30:0c:fe:8a:
c2:22:24:60:d6:00:b2:41:1a:eb:f7:df:df:25:68:
40:39:c0:df:85:a2:d3:59:50:0e:ec:22:97:b3:49:
56:54:95:ca:9d:f8:5b:82:c8:82:91:da:7a:49:ba:
7d:c6:44:69:63:e1:f5:62:a0:75:42:86:65:d7:30:
ad:20:64:15:86:13:58:ba:9f:0e:01:97:c3:eb:88:
45:11:a0:ce:ca:66:28:1c:7c:bd:df:6a:8c:6d:4d:
87:93:07:d2:e0:e6:90:00:cb:50:2a:d6:d0:dd:e5:
21:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:9A:37:4B:82:63:44:15:2D:E5:BD:A0:B8:46:20:5C:9D:54:D5
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:65:82:fb:7e:3c:27:7d:f7:3f:82:91:db:ad:e7:8a:8f:36:
83:37:83:f2:01:f4:27:c7:79:ed:30:18:4c:0b:52:39:0a:42:
09:42:bc:17:34:d1:6c:ce:b7:f7:89:5c:81:3d:6d:d7:46:20:
eb:86:13:65:cb:38:51:fb:c3:f1:d4:9a:58:3d:49:8b:66:71:
0e:3e:40:87:ac:ba:e7:04:82:43:ff:5f:44:f3:3d:e9:6b:1f:
1f:a8:97:61:e0:9d:c7:73:4b:f1:31:db:94:47:64:bc:1e:ef:
b0:1f:bc:8c:df:c1:7c:c1:fc:c9:00:c9:1d:38:46:09:a2:cd:
3f:5d:00:dc:52:64:82:00:e9:6b:53:bd:72:86:87:6b:a0:4a:
68:e9:2b:f7:1e:f1:2a:b2:37:52:ae:25:c4:7b:5f:01:02:1a:
00:c8:ac:3c:52:f3:be:b0:54:17:c5:79:df:88:ae:f0:33:be:
aa:de:9a:51:cd:af:61:ac:0f:12:8a:ec:3a:5c:d3:20:a4:b1:
ca:63:cb:f8:e7:32:39:98:09:bd:1a:d7:d4:23:3b:95:a9:c2:
09:84:36:2d:3c:6e:5b:6f:42:8c:8f:68:5e:b2:cb:ef:62:07:
c5:32:59:71:bb:76:e7:dd:e8:97:f5:bf:d2:d5:a1:1a:6a:cd:
89:f9:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:24:20 2026 by rpki-client