Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: 8PD2++Yrg0Bpn2QGPrXckOsWcllBcJMR8N5sBFPEN6w=
Subject key identifier: 66:07:29:BB:52:B5:23:83:F8:79:9D:CF:2C:51:F1:19:A5:67:C6:6D
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 01A08ED6D2394D179121E13DC4DA8314198C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 05:00:38 +0000
Manifest this update: Fri 11 Sep 2026 05:00:38 +0000
Manifest next update: Sat 12 Sep 2026 05:00:38 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: 8zjOZFH3A7H2IIll6lI7HMJUGoYVncPBBCl2caPRIDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d6:d2:39:4d:17:91:21:e1:3d:c4:da:83:14:19:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Sep 11 05:00:38 2026 GMT
Not After : Sep 12 05:00:38 2026 GMT
Subject: CN=660729bb52b52383f8799dcf2c51f119a567c66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:08:37:4c:b8:96:9a:04:50:da:85:7e:5c:
42:bc:ec:68:19:60:43:d1:a7:08:90:15:2f:04:b4:
c4:6d:87:4f:7d:70:1d:4d:05:a5:0f:96:9d:00:b5:
f9:15:44:31:45:5c:64:a3:61:46:e6:a8:2f:6c:72:
d3:b7:cb:08:17:66:55:be:ec:7d:90:58:95:b8:c2:
15:63:49:c3:3b:f0:a5:e1:aa:ec:3b:f6:d0:d4:79:
dc:af:17:0e:9b:93:f4:64:e5:dd:10:e1:84:f0:45:
6d:23:2b:81:72:7a:90:a8:05:c6:44:35:f0:ff:94:
0e:02:28:ab:0d:06:f9:0b:69:a4:a7:41:89:35:e0:
97:e6:0b:38:65:14:33:84:d9:30:0f:18:70:32:a5:
02:a7:b6:f0:56:cc:0a:f4:a8:35:52:e2:2a:6b:88:
cc:6f:5d:f5:c5:f6:71:bb:13:76:d8:23:bd:ac:ce:
8d:45:59:48:be:c2:51:f5:23:ff:9d:c4:8e:d0:de:
17:2d:98:18:10:4f:39:36:3e:8d:de:47:2c:29:0a:
c3:02:72:91:55:23:08:11:8a:e3:1d:34:19:b7:a2:
5c:7e:24:7e:ef:e3:e3:31:4b:01:50:e7:14:66:2d:
a1:5b:28:34:17:fa:33:a6:a9:86:44:4c:88:d1:fe:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:07:29:BB:52:B5:23:83:F8:79:9D:CF:2C:51:F1:19:A5:67:C6:6D
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:10:13:4d:7b:19:c5:08:5d:d1:2f:ab:17:85:89:77:be:db:
a4:45:04:cc:03:bb:1b:71:4e:98:10:b6:29:e3:35:60:bf:92:
4e:3e:1b:1f:7e:2a:8f:6e:9e:7b:ce:0c:07:ae:71:f3:d1:42:
2f:81:dd:a8:e7:1f:03:ca:52:e3:99:93:36:9f:21:ff:17:6f:
a1:93:c6:db:af:01:bd:aa:ec:5a:4a:71:de:38:39:00:52:b3:
a1:26:4b:7c:5f:c3:fe:91:ea:ec:8b:e2:4f:f5:b1:0f:c5:cf:
9a:62:e2:28:d3:4c:2d:6a:37:c3:c1:11:52:ab:1d:06:3d:da:
17:36:7b:e6:ea:56:66:3d:c5:5a:97:55:19:22:52:49:5e:f8:
cb:e3:4d:8f:43:a3:e0:f2:ec:f0:ca:16:9b:89:89:2f:6c:22:
3e:91:98:fa:f2:35:83:7c:93:e2:f2:c2:41:fe:ae:08:f8:4b:
cf:e2:e2:96:df:cf:f6:a5:29:16:3b:68:d2:48:c2:37:91:3b:
54:fe:b0:7b:c9:c0:58:1b:7e:e9:8d:49:50:01:6a:16:77:fd:
a1:74:f3:6e:af:4f:11:85:ec:99:88:79:95:c9:f3:95:67:50:
5a:1a:9d:c7:09:ba:c3:28:a6:3b:08:d1:af:20:56:fb:87:70:
13:d4:f4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 11:28:40 2026 by rpki-client