Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: OyItlY5D7INNpDXtu/HhBD3VWf5x5sQeC8w3s4M7gRQ=
Subject key identifier: 1B:F1:09:00:C4:3C:24:DE:D2:61:B3:14:46:B9:A4:BD:57:E0:2C:AA
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 01A16232DD3D147D6C9FA92B45E25826EB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 10E8
Signing time: Thu 22 Oct 2026 06:01:02 +0000
Manifest this update: Thu 22 Oct 2026 06:01:02 +0000
Manifest next update: Fri 23 Oct 2026 06:01:02 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: hfFqnf2V4rvbRy47VZVzFOF3WhEYB7LAjbtQk/X12ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:32:dd:3d:14:7d:6c:9f:a9:2b:45:e2:58:26:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Oct 22 06:01:02 2026 GMT
Not After : Oct 23 06:01:02 2026 GMT
Subject: CN=1bf10900c43c24ded261b31446b9a4bd57e02caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:0b:6b:54:6f:df:5e:4f:7f:b0:f0:80:41:
3b:b2:b7:9d:e7:5f:12:15:10:5b:b4:9e:af:2b:fd:
5f:e8:24:f6:e9:ba:2f:a3:f2:71:c6:3e:75:79:a2:
df:7f:76:f7:5c:b8:2d:76:ac:8d:9c:4e:ea:7d:fb:
79:c3:f0:e4:ee:61:2c:4e:bf:42:42:bb:24:6f:74:
53:1d:03:5f:56:89:87:fc:00:6c:9a:c3:08:c2:76:
a9:dc:46:1f:91:2e:29:b9:9b:1c:9a:5b:d7:9f:b1:
24:c3:35:46:7f:52:39:cd:bc:ee:da:d4:39:84:5f:
08:bc:43:df:d7:48:64:b7:04:7a:4c:b2:cb:1a:88:
e6:d4:ff:0f:80:f4:cd:8b:d9:ba:a0:33:49:7d:ef:
e1:97:34:83:af:1f:1a:52:08:4c:9c:6a:43:e3:09:
f8:62:48:1b:f7:1e:1b:c6:cd:18:ee:7d:ce:20:98:
ab:67:3e:c9:c1:fe:5a:fb:2f:d4:50:31:f9:66:53:
42:07:fe:e1:5a:39:10:e4:fe:d8:75:8e:f8:02:68:
78:80:44:c2:cd:00:87:a4:59:a3:3c:7a:b7:0c:6a:
c2:8e:5d:e2:8f:09:14:34:bf:5c:fa:14:91:a8:a5:
39:08:f0:b7:c2:95:3e:25:b1:e7:28:f5:06:f1:10:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:09:00:C4:3C:24:DE:D2:61:B3:14:46:B9:A4:BD:57:E0:2C:AA
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a0:01:0a:f4:56:03:77:6d:31:64:ec:6c:6a:34:82:6f:7f:
0c:de:62:06:7d:1d:c3:75:0d:5a:ce:e4:21:3a:09:d5:f1:8e:
ba:a5:ca:70:63:9f:73:98:2e:15:10:37:7c:18:af:08:3f:43:
e0:1a:61:05:ca:2a:9a:0b:17:ae:75:9b:d0:4e:9c:b3:9d:9c:
12:d5:34:63:0f:5c:82:da:e7:79:d3:e3:d7:08:b0:c0:bf:0d:
20:d1:ce:77:d8:8e:95:6c:a4:10:69:05:4c:c0:54:5e:54:03:
1f:35:d7:c5:10:b9:44:79:cd:83:09:ec:e1:a6:f9:c2:3f:d5:
1d:c8:fc:70:e8:da:4b:82:fd:ca:6e:66:1a:a9:f6:8e:e0:f8:
69:8c:b2:15:ac:81:2f:8c:df:1f:0f:ee:9b:1a:d9:d7:c5:09:
f0:0a:43:60:42:11:c0:d1:2e:72:b0:ad:01:01:42:79:57:2c:
e2:46:e6:ae:2e:b8:77:5b:1b:10:ed:b0:a5:e1:e9:03:c6:2b:
30:f9:0a:61:ef:4a:56:f8:cf:1d:0e:b5:cb:46:d6:f2:ce:36:
9d:fe:b4:8f:02:37:20:43:b3:4a:01:2a:46:59:76:a5:14:32:
f0:cc:15:bb:e4:3b:ce:56:d9:25:e1:29:95:b5:6e:1e:00:22:
83:66:a2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:52:27 2026 by rpki-client