Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
File: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft (raw, json)
Hash identifier: rqEvCwTFkN1uii9zYn6C2+a/FVbz0s5Yd1rqiSS7gH8=
Subject key identifier: 04:22:CE:69:C4:57:4C:48:73:BD:E4:1F:A2:1D:65:18:F0:D7:FD:0D
Authority key identifier: B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
Certificate issuer: /CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Certificate serial: 01A12B7B40E9B3422F478F130ACAB353D83C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
Manifest number: 1AAB
Signing time: Sun 11 Oct 2026 15:01:00 +0000
Manifest this update: Sun 11 Oct 2026 15:01:00 +0000
Manifest next update: Mon 12 Oct 2026 15:01:00 +0000
Files and hashes: 1: JxSMfmZSqI3JsHq7y-Q3lsW7V_k.roa (hash: LqYFlCxZmCemaTuAC/WiD/gTuuU0Q9CM+YPDQviSwnI=)
2: ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl (hash: aAnK0rdG0m4gSZsC7RBEsC7Z3BssGguBbZIqvnyL4f0=)
3: zEeP9jNbHcrziM4NoTdt_uL6054.roa (hash: ub4Z+QcgKEhR/M0Z+CEOAnRu0nqsZI8hpuezxPH15Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7b:40:e9:b3:42:2f:47:8f:13:0a:ca:b3:53:d8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e67fcb0bdc6001d8cf7073c649eb9819fc5eb8
Validity
Not Before: Oct 11 15:01:00 2026 GMT
Not After : Oct 12 15:01:00 2026 GMT
Subject: CN=0422ce69c4574c4873bde41fa21d6518f0d7fd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1e:58:56:ec:21:26:3f:72:c3:cb:9f:37:26:
48:7f:1c:e4:08:a8:55:29:10:3f:9e:09:7a:e5:b0:
e7:0d:20:24:b8:44:86:e9:68:cf:c3:4f:1c:51:22:
e6:4e:1c:39:43:bd:6e:98:3b:41:a8:83:82:48:71:
eb:5f:f4:f9:54:5f:75:02:96:0f:dd:b8:c8:bf:44:
eb:87:64:62:1c:9d:98:c2:87:e0:a6:4b:c8:77:7f:
cd:ec:a2:b2:6f:9e:32:e2:91:6d:90:0b:70:59:97:
ec:2d:3e:97:1c:d4:ca:40:38:31:e8:f9:ab:d8:8a:
f3:d7:64:33:01:80:d4:e7:02:e1:c2:53:1e:78:be:
cc:43:4d:30:fe:64:07:11:07:0d:dd:c1:db:10:e3:
c1:58:87:2e:75:b8:da:84:90:78:92:40:e5:39:08:
3c:98:a7:a3:12:bd:d8:ea:70:94:59:2a:69:a9:68:
dd:cb:29:62:d1:49:8f:ad:ea:7f:0a:b4:58:87:83:
7d:ee:e3:9b:94:eb:f2:cb:e2:20:25:e9:31:a1:04:
59:c4:8d:e3:0c:14:8e:69:59:46:e8:b5:7e:0b:0d:
af:fc:7f:de:6e:ec:b5:ac:49:43:07:5e:4b:d1:c2:
b2:0d:df:72:cd:27:5a:84:ad:19:7d:9f:47:db:fa:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:CE:69:C4:57:4C:48:73:BD:E4:1F:A2:1D:65:18:F0:D7:FD:0D
X509v3 Authority Key Identifier:
keyid:B9:E6:7F:CB:0B:DC:60:01:D8:CF:70:73:C6:49:EB:98:19:FC:5E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/0dbe56-3daa-4a64-925a-fa71ae05dc3f/1/ueZ_ywvcYAHYz3BzxknrmBn8Xrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:16:ae:af:70:87:db:75:b5:28:63:d7:c4:46:2e:80:1b:f7:
0a:a1:8c:6c:fe:e6:2e:0c:4e:da:2a:2a:c8:d0:b9:78:22:55:
61:a1:0e:d2:61:6e:85:ff:b1:ce:0f:da:b8:78:8e:da:70:71:
88:d8:a4:49:a9:10:0f:e5:82:18:ac:42:72:05:e6:83:b4:6d:
48:21:17:2d:01:87:53:35:a6:5e:e2:14:27:0e:77:11:19:61:
b3:ee:11:a0:29:26:a0:54:a0:bb:2d:c2:66:a1:03:a2:bd:eb:
ca:d7:20:fc:d4:43:64:1d:9f:a7:64:6e:c3:88:0a:5a:7c:2f:
a4:f9:5c:12:2c:ea:8b:77:60:59:5d:e1:20:75:e7:29:2d:f3:
8a:eb:98:4c:73:51:25:db:b1:a1:a0:82:37:a9:dc:6e:09:fa:
6c:66:ef:a8:f5:f1:6a:8b:41:fe:03:df:85:6e:73:25:09:de:
e6:dd:2e:32:fa:42:18:c2:ce:61:3e:6b:b8:28:50:4d:5f:82:
85:65:61:f1:b3:92:60:46:cb:12:6f:e0:b1:45:32:e1:f4:25:
cb:6c:51:5f:d4:17:f5:52:1e:6e:e3:6f:b2:67:e3:54:bb:48:
7a:9d:1d:33:2e:db:d1:68:ec:b2:bf:46:e1:8d:95:80:c4:eb:
05:2d:17:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEre0Dps0IvR48TCsqzU9g8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTY3ZmNiMGJkYzYwMDFkOGNmNzA3M2M2NDllYjk4MTlm
YzVlYjgwHhcNMjYxMDExMTUwMTAwWhcNMjYxMDEyMTUwMTAwWjAzMTEwLwYDVQQD
EygwNDIyY2U2OWM0NTc0YzQ4NzNiZGU0MWZhMjFkNjUxOGYwZDdmZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B5YVuwhJj9yw8ufNyZIfxzkCKhV
KRA/ngl65bDnDSAkuESG6WjPw08cUSLmThw5Q71umDtBqIOCSHHrX/T5VF91ApYP
3bjIv0Trh2RiHJ2YwofgpkvId3/N7KKyb54y4pFtkAtwWZfsLT6XHNTKQDgx6Pmr
2Irz12QzAYDU5wLhwlMeeL7MQ00w/mQHEQcN3cHbEOPBWIcudbjahJB4kkDlOQg8
mKejEr3Y6nCUWSppqWjdyyli0UmPrep/CrRYh4N97uOblOvyy+IgJekxoQRZxI3j
DBSOaVlG6LV+Cw2v/H/ebuy1rElDB15L0cKyDd9yzSdahK0ZfZ9H2/rSwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQizmnEV0xIc73kH6IdZRjw1/0NMB8GA1UdIwQY
MBaAFLnmf8sL3GAB2M9wc8ZJ65gZ/F64MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEt
ZmE3MWFlMDVkYzNmLzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC8wZGJlNTYtM2RhYS00YTY0LTkyNWEtZmE3MWFlMDVkYzNm
LzEvdWVaX3l3dmNZQUhZejNCenhrbnJtQm44WHJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhaur3CH
23W1KGPXxEYugBv3CqGMbP7mLgxO2ioqyNC5eCJVYaEO0mFuhf+xzg/auHiO2nBx
iNikSakQD+WCGKxCcgXmg7RtSCEXLQGHUzWmXuIUJw53ERlhs+4RoCkmoFSguy3C
ZqEDor3rytcg/NRDZB2fp2Ruw4gKWnwvpPlcEizqi3dgWV3hIHXnKS3ziuuYTHNR
JduxoaCCN6ncbgn6bGbvqPXxaotB/gPfhW5zJQne5t0uMvpCGMLOYT5ruChQTV+C
hWVh8bOSYEbLEm/gsUUy4fQly2xRX9QX9VIebuNvsmfjVLtIep0dMy7b0Wjssr9G
4Y2VgMTrBS0XfA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:41:50 2026 by rpki-client