Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: wgI97yg4ut2AXC2FZSo0Q9nBCTrwmcFYLS/DHJnlQ9A=
Subject key identifier: AC:D9:51:91:9B:79:3A:27:25:79:B0:52:61:5E:1D:B9:EC:C9:B1:67
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 01A1612045FBDD1F18A27F409A6B9A8B45DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 1556
Signing time: Thu 22 Oct 2026 01:01:07 +0000
Manifest this update: Thu 22 Oct 2026 01:01:07 +0000
Manifest next update: Fri 23 Oct 2026 01:01:07 +0000
Files and hashes: 1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: 2eZsrtIGHqplOPx71OUYTItHS6UJZAgRSl1NnDMXcmk=)
3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:20:45:fb:dd:1f:18:a2:7f:40:9a:6b:9a:8b:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Oct 22 01:01:07 2026 GMT
Not After : Oct 23 01:01:07 2026 GMT
Subject: CN=acd951919b793a272579b052615e1db9ecc9b167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:7d:1e:59:44:9e:31:11:21:b5:df:01:75:
50:5f:99:da:54:d7:bb:45:8b:db:96:b3:4a:18:28:
d2:56:a6:6a:de:c9:9f:53:f0:3e:2e:a4:9c:3a:98:
7a:d2:3c:66:79:da:64:c9:65:e1:88:9e:5f:b3:63:
5b:39:08:0e:3d:7b:65:9a:14:1a:b3:e0:d9:1f:25:
ce:c5:5b:f5:20:ee:4a:6e:83:ca:bf:61:d5:86:ca:
76:ac:c4:30:cc:74:80:1f:f4:b1:f4:a1:84:41:63:
d2:32:ff:f6:cd:71:36:17:18:96:27:4f:4e:2a:f0:
2f:1e:29:ed:5d:ff:68:bc:2b:9d:36:ea:92:2a:79:
52:95:5e:ef:eb:80:c9:28:64:56:ca:06:65:49:c7:
cd:f7:e2:75:b5:06:8a:ce:26:58:63:87:16:0d:9e:
dc:2a:70:b8:21:3b:e2:95:0b:18:7d:94:96:c4:21:
e1:40:2b:c8:3d:f1:87:ec:5b:83:44:b4:65:65:4d:
cc:7c:50:af:fa:19:16:19:24:a4:aa:79:ef:83:9a:
39:2e:a2:29:9c:7a:c8:55:ee:b7:5e:97:b6:bc:a2:
77:1b:46:57:93:ea:5e:4e:75:bf:03:92:a5:80:a0:
86:73:b1:68:99:22:3a:3c:b9:19:c5:38:1b:9f:50:
b3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D9:51:91:9B:79:3A:27:25:79:B0:52:61:5E:1D:B9:EC:C9:B1:67
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:87:8a:94:fc:cf:a3:4b:b7:54:bc:1f:65:bd:50:df:3a:
47:0f:f5:4b:81:91:d6:b5:9d:aa:8c:e8:dd:15:9d:94:b9:45:
e2:1e:4e:e4:57:7a:be:c4:fe:8d:c3:9a:ea:41:5d:c2:fe:54:
44:a7:8b:fe:a6:e5:8c:8a:13:7e:e6:85:0d:05:f1:f1:bb:6a:
ec:f2:da:fd:b7:d8:0a:28:4b:fa:49:87:fb:89:b2:66:04:be:
6f:97:d8:62:a0:b0:da:1a:c0:42:7d:0d:d3:0e:ca:5b:8c:dc:
7d:18:91:73:fe:6d:c1:67:1e:91:e5:ce:2e:d2:c0:46:84:d2:
f1:30:d4:af:41:26:ae:62:f1:f0:f7:e9:89:ea:0e:ac:64:2b:
f0:89:b5:80:01:b6:b3:cd:b8:ad:b3:66:10:47:46:f7:a8:7f:
00:b4:6d:2b:fe:09:14:35:8f:ad:fa:54:8b:2d:98:96:ca:29:
9e:0b:19:24:37:13:1d:26:12:bb:4d:e1:de:2f:5e:ac:d1:ff:
81:47:a5:05:40:ec:1f:c7:ec:ac:5a:dd:04:bb:7f:56:3b:ae:
9f:3a:6d:c2:6c:17:bf:e6:08:27:ac:5e:74:29:57:1c:70:45:
5f:98:64:7b:c5:bb:90:03:ed:d8:14:88:48:43:9f:49:32:ad:
98:c5:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:48:58 2026 by rpki-client