Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: ooOc6wxUkpnrujMbROmhNb9DO0L42XquERsplRlC1ro=
Subject key identifier: A1:7E:CA:F2:D2:EC:0B:93:1E:88:BE:1E:5A:CC:2B:56:47:79:27:0A
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 01A18751AF772D5F480F9EC4F0BCB56ECF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1AC9
Signing time: Thu 29 Oct 2026 11:00:39 +0000
Manifest this update: Thu 29 Oct 2026 11:00:39 +0000
Manifest next update: Fri 30 Oct 2026 11:00:39 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: CwBYPY0ACt6WI9K3+4Vh3TLdsHvIt75JZ5A6acfPvAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:af:77:2d:5f:48:0f:9e:c4:f0:bc:b5:6e:cf:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Oct 29 11:00:39 2026 GMT
Not After : Oct 30 11:00:39 2026 GMT
Subject: CN=a17ecaf2d2ec0b931e88be1e5acc2b564779270a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fb:06:20:79:d3:f2:91:d7:4b:6c:8d:65:60:
3c:b9:0a:31:15:83:dc:57:7c:5d:50:1f:b4:56:e7:
b2:a0:86:56:62:f0:5c:70:41:ba:bc:5a:94:39:10:
dd:8d:a3:6c:89:5b:6f:df:19:44:9f:68:36:b1:ad:
8c:c0:a0:bc:2d:e6:de:66:1b:95:b4:8d:9f:c8:5f:
e5:a5:1b:22:54:8e:c0:14:3f:f3:63:58:a2:99:e5:
9e:e9:b3:d6:c2:6c:ac:a8:2f:3f:cd:bf:94:b4:ae:
c4:2c:4e:d1:8e:c2:8e:78:10:a5:ea:38:ed:fc:ab:
a9:51:6f:79:43:f3:df:e5:6b:44:87:67:bc:d3:ea:
a3:68:ba:22:3d:1a:16:56:5c:a2:fc:16:78:e6:b0:
29:97:3f:39:7b:2a:31:c8:b8:f1:0f:03:bc:aa:26:
b1:5d:87:26:6d:3c:cb:10:94:5f:c1:5f:53:be:1d:
69:ce:f9:cc:b9:a8:44:72:f9:14:b6:da:1f:34:c1:
97:cd:77:0c:04:2d:99:50:9f:08:c4:1d:4c:95:b5:
f8:a5:78:28:bc:0f:30:9a:70:e0:d8:e8:89:53:85:
9e:a0:5a:da:f2:e4:7d:b5:72:a7:95:f8:0b:1b:72:
fb:6e:be:77:c2:f9:75:ab:32:b5:51:8f:ac:7d:67:
b4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7E:CA:F2:D2:EC:0B:93:1E:88:BE:1E:5A:CC:2B:56:47:79:27:0A
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6e:1c:4c:5f:b7:9d:c8:13:3c:6a:4a:3b:bb:4e:b4:e1:38:
4a:e6:ec:aa:b6:99:f4:6b:98:92:c4:58:1e:d9:03:57:50:20:
23:4a:78:28:5f:e6:5f:3a:6f:54:34:d6:4a:6f:16:78:ad:34:
a4:86:c8:3e:cb:64:14:95:51:d5:00:d2:f4:a7:28:71:18:a9:
70:0f:14:d6:84:d2:21:27:02:8d:32:b5:90:b0:05:fb:80:1e:
5a:57:e4:9b:f1:03:ca:38:33:25:a0:3b:47:66:d6:8f:05:13:
4e:73:c4:11:2c:cd:cd:c6:37:9c:18:cc:43:af:35:19:58:5a:
6d:b7:78:62:f6:ef:48:5f:89:fb:83:18:0b:e7:a8:6a:5a:b7:
09:7e:b2:eb:ff:33:fb:ad:f2:1e:9b:d3:0e:25:97:4c:57:9f:
0a:06:2b:3f:a7:f6:6c:79:89:69:c6:c9:6d:a4:eb:54:0e:4a:
07:32:a9:0b:4d:6b:d4:ff:8c:2f:d7:d8:12:80:eb:6a:74:92:
aa:e4:a9:9b:d9:b3:5e:27:dc:fe:e4:78:62:9e:0e:11:3d:3a:
b4:0f:ae:12:e5:1d:2a:1c:aa:a0:0e:37:ce:e9:83:aa:3b:c4:
f4:16:cf:de:78:63:d3:82:75:f7:66:83:22:36:ae:2a:74:56:
c2:df:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:46 2026 by rpki-client