Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: UPil95KksesAA0skPhmMzmICtIOKOu0F0nKIpH/TWVI=
Subject key identifier: 66:A0:17:2A:82:78:9B:3E:EF:A7:E1:3C:82:A1:36:D0:CC:D8:50:EA
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 01A1803D48C9C8DAA1AA420BE9D70F37140A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 1682
Signing time: Wed 28 Oct 2026 02:01:02 +0000
Manifest this update: Wed 28 Oct 2026 02:01:02 +0000
Manifest next update: Thu 29 Oct 2026 02:01:02 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: PpuRTYIgTz0bsegXGZXOkjJVFcPsmrnA0omzYNUpFbQ=)
2: 6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa (hash: sAYJD+I7oIyAkdboyJMkSqHc+dfvfVcmdQnsD35+5Do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:48:c9:c8:da:a1:aa:42:0b:e9:d7:0f:37:14:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Oct 28 02:01:02 2026 GMT
Not After : Oct 29 02:01:02 2026 GMT
Subject: CN=66a0172a82789b3eefa7e13c82a136d0ccd850ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:22:de:b2:b7:cb:ba:26:40:c1:e4:cd:43:fe:
bc:5d:c3:18:da:a4:78:44:77:10:af:67:a0:c2:f5:
08:32:de:0d:c1:95:15:24:6e:a3:0d:d5:ac:20:80:
05:e0:a5:86:be:69:0a:b5:56:84:0f:e9:92:ff:58:
39:d9:5d:50:5e:8b:bc:01:13:d2:ad:3e:1c:5d:73:
f0:3b:67:87:af:97:dc:3f:ca:1d:4f:c9:14:2e:05:
ea:fa:15:e7:1b:86:b7:89:d5:3a:29:e9:1b:fc:5f:
95:a8:6d:6f:66:c4:87:4e:db:0c:d2:11:44:c8:67:
af:9e:c1:36:26:0c:ac:f9:ac:89:62:9d:6f:c7:11:
1d:60:51:b3:ea:88:ce:7a:5a:a0:eb:fb:f5:cd:74:
d6:31:fd:8c:46:3a:89:c3:6a:27:b5:24:2d:ec:21:
e8:cd:ad:38:a2:a6:8b:24:f7:c8:bf:f6:c2:82:be:
96:89:3d:00:60:a6:6d:73:8b:49:db:15:0a:c8:33:
fe:af:dd:01:ea:88:31:ae:68:36:57:ea:28:21:e0:
88:6d:b2:40:3b:76:e2:19:f6:38:bf:cc:22:14:d2:
f0:fa:a4:be:ec:cf:63:b4:0c:ef:32:27:7d:7e:a1:
99:7b:99:fb:b6:5f:72:b7:ae:bc:64:35:e7:77:76:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A0:17:2A:82:78:9B:3E:EF:A7:E1:3C:82:A1:36:D0:CC:D8:50:EA
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d8:a2:fb:b5:a3:58:e7:ad:cf:78:c7:c1:80:f3:90:c7:0d:
6a:df:d3:bc:5b:ec:67:c5:29:05:76:be:e2:36:0b:46:94:2c:
12:d1:50:91:06:4a:b6:1d:77:b5:f7:81:9e:c6:f1:40:ec:54:
a2:da:fa:f4:76:ea:18:b8:30:3a:73:6f:45:0f:22:2a:bd:87:
6a:70:44:71:6d:ea:22:68:60:a2:b2:8d:73:2c:0a:65:3f:5a:
6f:5a:18:25:10:e2:18:6f:e5:60:b7:6a:ec:82:61:56:45:f4:
53:34:44:0d:35:62:f3:73:8d:90:14:dc:a3:96:d6:14:a9:5e:
22:5d:f0:18:c9:35:75:4b:7c:2a:d6:7b:c4:cc:41:31:f8:11:
94:b1:94:6d:cd:b6:0f:d9:3c:4b:51:8a:cc:30:62:da:6d:f1:
22:8a:fd:81:5b:33:ec:a4:ce:17:50:13:f9:78:7f:a7:ff:a4:
d9:f8:67:d3:09:e0:59:8b:fb:37:8c:66:ff:93:46:4c:fc:06:
bc:24:b8:c3:64:17:04:30:88:8d:c7:d2:05:20:88:2b:00:3e:
b8:3d:46:e1:80:ae:10:7e:de:32:89:f6:ae:1c:af:2c:9e:fc:
19:49:80:e6:79:71:f1:fe:2d:63:0c:83:fb:05:17:ec:ce:9d:
05:5a:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:53 2026 by rpki-client