Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: +KLW4sN7u/12C+Yc0r1GuHqLPyz6aHKqt5iyvLKogH0=
Subject key identifier: 2D:F7:70:0F:84:E7:26:6C:2A:58:C0:C2:A9:DD:24:A2:C1:80:B0:61
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 01A1822BD44C7E872CB7B0E83F23866C2032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 11:01:12 +0000
Manifest this update: Wed 28 Oct 2026 11:01:12 +0000
Manifest next update: Thu 29 Oct 2026 11:01:12 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: t8ZMlDq83ajq4LJLbQfHfHfLuVl5W3BXxt8i+ppGUA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:d4:4c:7e:87:2c:b7:b0:e8:3f:23:86:6c:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Oct 28 11:01:12 2026 GMT
Not After : Oct 29 11:01:12 2026 GMT
Subject: CN=2df7700f84e7266c2a58c0c2a9dd24a2c180b061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:10:3a:ad:08:a6:8f:50:f1:c6:9f:fd:e9:
55:89:a9:c4:0d:19:73:79:32:83:61:ff:5f:10:8a:
00:4b:c5:54:ca:94:32:ef:7a:1c:34:a6:ff:64:bc:
45:d9:4a:4d:d7:75:7f:84:d4:0b:ce:f8:11:85:7c:
1e:c0:55:07:6e:22:a3:70:44:08:3e:84:2e:0d:79:
bd:54:01:59:b7:33:e7:4a:17:15:a4:16:c8:01:cf:
15:06:d5:e9:02:eb:52:d4:f2:73:a2:38:3c:4e:5b:
91:2a:65:74:99:c5:3d:39:77:1f:01:01:d4:fd:30:
28:a0:6b:98:7f:34:97:d4:7e:e0:41:79:e4:e2:9f:
99:72:84:0c:ed:a1:45:5d:4b:e1:1e:da:d7:35:50:
ac:ee:36:dc:fa:cf:83:db:2c:03:f3:7a:2a:e2:ea:
a9:e2:98:3d:50:0b:1d:26:86:ca:df:fa:b1:19:35:
f7:3d:38:29:ae:66:74:8d:99:e3:2f:2d:09:1c:9c:
cf:c2:81:6d:90:32:28:51:c9:e0:65:8a:c3:f3:d6:
11:fe:89:a6:af:8e:13:f6:43:52:12:26:8f:4a:d5:
85:79:5b:ab:9b:7d:aa:39:b9:e4:45:17:a9:b3:09:
da:cb:7d:48:c7:f4:eb:87:50:6c:c9:bd:6c:c5:1d:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:70:0F:84:E7:26:6C:2A:58:C0:C2:A9:DD:24:A2:C1:80:B0:61
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:26:6f:9f:37:65:c5:0f:0a:7e:c7:2a:c3:b1:f0:4b:77:31:
9d:19:2d:4a:cc:80:24:ed:7b:aa:37:25:fe:36:f7:7c:f2:7b:
7c:21:c2:f2:96:a2:10:00:aa:73:77:26:90:57:d3:cd:d7:98:
94:25:a9:17:15:91:21:2c:2e:12:f9:57:50:76:06:cd:7e:ab:
7f:53:85:a3:bc:c1:11:17:06:53:44:3b:62:0e:21:d9:c5:1f:
8e:43:c8:f6:fb:32:95:f3:19:da:fd:ef:f0:03:ef:81:e3:27:
6f:90:6f:c6:bb:e5:69:24:75:91:9c:fe:9b:0b:bc:c2:4b:54:
83:cc:67:f7:5f:30:90:cd:25:d9:19:1b:d8:af:ea:f6:f2:2f:
08:58:03:58:1e:45:f9:07:5c:47:c2:8d:fc:f9:63:0f:3f:4c:
9f:4c:c3:8c:8f:a3:ab:ea:e7:96:2f:57:be:f4:a9:b9:d9:99:
6e:3b:77:27:60:56:c4:5e:3f:6e:92:5d:58:bc:c2:fc:19:05:
a7:d0:68:fd:06:04:6b:36:db:9e:86:02:2d:5c:2e:55:aa:92:
a3:a6:86:aa:d3:df:53:e0:c1:fd:db:0d:8f:97:24:31:5b:a8:
67:9f:3e:7c:9e:2b:b6:16:f8:52:10:14:04:cd:f8:3c:da:6c:
6a:3b:80:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCK9RMfocst7DoPyOGbCAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4
ZDg3MWUwHhcNMjYxMDI4MTEwMTEyWhcNMjYxMDI5MTEwMTEyWjAzMTEwLwYDVQQD
EygyZGY3NzAwZjg0ZTcyNjZjMmE1OGMwYzJhOWRkMjRhMmMxODBiMDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi10QOq0Ipo9Q8caf/elVianEDRlz
eTKDYf9fEIoAS8VUypQy73ocNKb/ZLxF2UpN13V/hNQLzvgRhXwewFUHbiKjcEQI
PoQuDXm9VAFZtzPnShcVpBbIAc8VBtXpAutS1PJzojg8TluRKmV0mcU9OXcfAQHU
/TAooGuYfzSX1H7gQXnk4p+ZcoQM7aFFXUvhHtrXNVCs7jbc+s+D2ywD83oq4uqp
4pg9UAsdJobK3/qxGTX3PTgprmZ0jZnjLy0JHJzPwoFtkDIoUcngZYrD89YR/omm
r44T9kNSEiaPStWFeVurm32qObnkRRepswnay31Ix/Trh1Bsyb1sxR2hSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC33cA+E5yZsKljAwqndJKLBgLBhMB8GA1UdIwQY
MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt
NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4
LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCZvnzdl
xQ8Kfscqw7HwS3cxnRktSsyAJO17qjcl/jb3fPJ7fCHC8paiEACqc3cmkFfTzdeY
lCWpFxWRISwuEvlXUHYGzX6rf1OFo7zBERcGU0Q7Yg4h2cUfjkPI9vsylfMZ2v3v
8APvgeMnb5BvxrvlaSR1kZz+mwu8wktUg8xn918wkM0l2Rkb2K/q9vIvCFgDWB5F
+QdcR8KN/PljDz9Mn0zDjI+jq+rnli9XvvSpudmZbjt3J2BWxF4/bpJdWLzC/BkF
p9Bo/QYEazbbnoYCLVwuVaqSo6aGqtPfU+DB/dsNj5ckMVuoZ58+fJ4rthb4UhAU
BM34PNpsajuAlQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:36:59 2026 by rpki-client