Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: +8610uiI4MArEZyKbWWGRRyxIj86dwQruFXxD/2mnKM=
Subject key identifier: 9A:D1:8C:46:98:BB:EA:9A:6B:4E:2D:61:F3:98:9F:31:B3:43:92:78
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 01A142A8056377E849B41B5990EA636A9878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0D08
Signing time: Fri 16 Oct 2026 03:01:09 +0000
Manifest this update: Fri 16 Oct 2026 03:01:09 +0000
Manifest next update: Sat 17 Oct 2026 03:01:09 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: jF+TJ8Dw/A+vBxg5c2RMWnDcCH6e1Ky5ls238Tf5eJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:a8:05:63:77:e8:49:b4:1b:59:90:ea:63:6a:98:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Oct 16 03:01:09 2026 GMT
Not After : Oct 17 03:01:09 2026 GMT
Subject: CN=9ad18c4698bbea9a6b4e2d61f3989f31b3439278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:7e:34:09:24:91:70:59:50:8c:5e:74:13:
e6:26:dc:31:bc:e7:66:e5:27:07:2e:b0:77:f5:50:
13:7c:09:06:85:39:82:64:9f:cd:ab:f9:85:99:35:
05:d3:96:65:11:2c:ca:17:ac:d1:5f:95:13:d7:c7:
12:b0:92:80:17:33:a2:a9:42:56:8b:50:4c:4d:d9:
6d:51:bc:78:31:68:d3:32:6a:c5:91:65:ea:0d:54:
f5:58:cc:e6:a7:d6:03:99:97:6d:69:dd:17:83:1d:
7c:b9:eb:d1:0b:ef:b8:6f:95:3e:11:74:20:0d:f3:
c6:87:0a:00:65:f0:00:48:65:b6:74:1c:b9:c3:9f:
09:0f:b4:55:e4:83:15:91:90:98:e5:e5:10:c7:96:
0c:52:0a:96:0f:81:44:a5:32:0d:9c:86:82:03:59:
53:23:be:fa:78:3a:49:b4:6c:a7:20:2e:f4:bf:47:
c1:7b:09:90:68:eb:8d:df:28:c4:34:5a:17:49:17:
f1:09:d3:7f:71:c9:98:54:df:b1:ba:67:25:69:a0:
4f:65:58:00:65:63:cf:1a:6c:dd:87:09:0d:19:5b:
e8:57:62:b1:b0:ef:88:e4:48:bf:f1:82:bd:0e:b1:
a2:8e:18:0e:5a:9b:98:07:86:c0:47:f9:1f:49:c8:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D1:8C:46:98:BB:EA:9A:6B:4E:2D:61:F3:98:9F:31:B3:43:92:78
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2b:5d:f1:c0:02:50:00:26:e7:f7:0e:42:86:e0:93:f8:53:
77:f3:20:52:88:ce:e5:cf:19:d1:a4:96:29:d0:25:5d:bb:11:
1d:69:19:a6:57:10:a7:f7:3b:6a:ce:da:9d:8b:16:53:ee:d8:
92:d5:e4:f2:eb:85:97:61:a4:dc:b7:1e:82:d3:62:13:87:00:
fc:fb:17:1f:f1:86:46:32:85:36:f1:15:2f:32:91:ac:1c:81:
00:23:76:d8:c8:d3:d4:1f:ab:4b:90:9f:24:00:0c:0a:9b:a1:
f4:1c:d1:66:0b:91:81:ec:bd:ca:1f:9b:63:cc:4c:a7:58:0a:
ee:89:4d:ef:08:60:fc:e1:4c:2a:db:22:0e:22:1e:60:be:73:
70:6d:2d:74:b0:27:d5:28:7d:b5:5b:25:66:cd:df:3d:bd:18:
87:dd:6f:d8:4f:ad:f7:ca:aa:30:51:99:09:b2:7d:98:8c:e2:
d4:56:13:dc:dd:0e:35:98:12:f0:7a:b9:70:1d:f1:5d:63:eb:
9a:d7:ab:26:0f:6c:52:86:ca:70:f6:2c:ad:f1:b4:5c:cc:55:
68:cd:70:ec:a1:b9:77:a5:72:e4:d0:9a:71:25:7e:94:3a:3b:
63:10:f6:64:f6:d1:e2:51:69:67:4f:40:6a:18:bf:69:0b:0d:
48:5c:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:51:39 2026 by rpki-client