
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
File: UeFASVvQbC6O-st-0KMVFtsfQF8.mft (raw, json)
Hash identifier: sV/dQz8h18mC9GJFZ1oRbhgN6/XygR8GuHElzA3ZfbE=
Subject key identifier: BB:B9:44:80:8A:0C:22:8C:47:EB:97:CA:0D:DA:2E:1E:2F:39:03:88
Authority key identifier: 51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
Certificate issuer: /CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Certificate serial: 01A1DEA7A64768D318457915A9C47372C1C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
Manifest number: 1252
Signing time: Sun 15 Nov 2026 10:01:31 +0000
Manifest this update: Sun 15 Nov 2026 10:01:31 +0000
Manifest next update: Mon 16 Nov 2026 10:01:31 +0000
Files and hashes: 1: UcC2Y8zHvL_FDSURiolVRBuB8_g.roa (hash: p3IzoT2nzG2oBklzpQ6gR/NCnzvpo3xyP/73GYhUd3g=)
2: UeFASVvQbC6O-st-0KMVFtsfQF8.crl (hash: 3VjgW1DBhWBoBcRiVn9wXFnEhUfeGfUiAJQ/dc6VURE=)
3: vz5RaUGZ5UQMv5HfTK7-xdJaMis.roa (hash: YyzHvgYYzEsZBa9TKZu8r++ne7pY4Yz24jL7ObVc/TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a6:47:68:d3:18:45:79:15:a9:c4:73:72:c1:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e140495bd06c2e8efacb7ed0a31516db1f405f
Validity
Not Before: Nov 15 10:01:31 2026 GMT
Not After : Nov 16 10:01:31 2026 GMT
Subject: CN=bbb944808a0c228c47eb97ca0dda2e1e2f390388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3b:88:79:5d:19:3e:ca:95:28:4f:e1:dc:a6:
91:6b:2a:31:eb:41:76:89:2f:39:e2:72:da:c9:ba:
48:35:46:39:f9:34:b9:34:a3:34:94:44:76:7b:2b:
1f:ef:35:8e:39:1b:e9:1c:24:a8:64:41:27:2b:da:
21:a4:ba:09:9e:23:40:7a:96:68:92:c6:fc:53:59:
99:2c:a2:00:9c:2f:19:40:00:42:04:94:f2:17:66:
58:9f:26:ae:14:d8:1d:b6:76:cc:00:72:ff:74:5a:
6f:e1:ba:d7:a4:04:6c:5e:78:27:cb:a7:de:ea:cf:
48:ed:88:67:0c:cf:3d:37:eb:b9:bf:27:78:cf:38:
dd:87:1e:24:8f:c4:1f:4b:da:fb:03:d6:09:35:25:
6e:b0:7c:d7:f9:72:52:08:3e:35:b9:5b:5b:1e:ee:
13:9f:fc:b1:a0:7e:c2:86:30:9e:51:e6:99:9b:fd:
fe:57:36:27:46:74:3b:25:a9:e8:cf:85:85:8b:ef:
5e:a5:1e:69:7b:aa:5f:d8:96:5c:22:ed:fc:ab:99:
77:fb:d6:0d:3d:53:20:7b:aa:21:c6:64:28:c2:2b:
ac:f7:6f:be:e4:a2:95:01:7f:67:c7:1d:f2:28:25:
63:df:ba:5a:75:08:e0:2e:80:c0:c9:86:f1:db:73:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B9:44:80:8A:0C:22:8C:47:EB:97:CA:0D:DA:2E:1E:2F:39:03:88
X509v3 Authority Key Identifier:
keyid:51:E1:40:49:5B:D0:6C:2E:8E:FA:CB:7E:D0:A3:15:16:DB:1F:40:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFASVvQbC6O-st-0KMVFtsfQF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/fd5f04-1d26-4451-a6ae-9867642c2f10/1/UeFASVvQbC6O-st-0KMVFtsfQF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:73:81:43:81:c5:e0:b6:23:75:1b:1a:71:75:d1:40:50:
60:f8:e2:7b:eb:d8:b7:a2:10:08:03:03:19:03:08:21:81:b4:
b0:cf:b3:8e:20:a8:d0:f7:24:68:6c:4d:e2:a7:70:6a:c5:bd:
bf:88:d6:c9:82:5b:8b:88:39:a6:88:58:b1:46:0f:a2:c4:6f:
54:5e:62:07:fc:32:8b:80:8c:b9:cd:33:01:a9:ea:c0:61:26:
99:96:d5:ed:57:1f:c0:28:1f:fe:b0:e3:e0:2e:de:6d:24:2f:
11:be:b3:a3:3d:b4:6a:15:37:ad:a8:ed:ee:af:52:d5:39:fe:
46:6f:6a:32:8a:0f:cf:ac:af:67:1e:06:1e:e4:fe:6d:80:3d:
d6:90:14:06:89:d7:46:d8:ca:c9:c3:cd:60:0c:07:43:ac:99:
27:9b:45:29:b1:2d:04:cf:0f:41:6d:65:e6:a3:a4:a9:c5:63:
6f:cb:c0:9c:43:4a:a6:b9:00:f7:52:8b:c3:10:de:ff:1c:e8:
3e:c5:00:f5:9e:f6:b9:c6:3f:f8:f1:63:7b:18:f5:82:f6:c1:
d2:5f:8b:7c:ac:4c:58:67:ed:a4:d4:61:84:33:0a:e1:16:3e:
02:4f:ed:72:28:ad:79:08:0f:a2:b4:0c:d9:a4:77:f9:e1:25:
8b:aa:00:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHep6ZHaNMYRXkVqcRzcsHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE0MDQ5NWJkMDZjMmU4ZWZhY2I3ZWQwYTMxNTE2ZGIx
ZjQwNWYwHhcNMjYxMTE1MTAwMTMxWhcNMjYxMTE2MTAwMTMxWjAzMTEwLwYDVQQD
EyhiYmI5NDQ4MDhhMGMyMjhjNDdlYjk3Y2EwZGRhMmUxZTJmMzkwMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zuIeV0ZPsqVKE/h3KaRayox60F2
iS854nLaybpINUY5+TS5NKM0lER2eysf7zWOORvpHCSoZEEnK9ohpLoJniNAepZo
ksb8U1mZLKIAnC8ZQABCBJTyF2ZYnyauFNgdtnbMAHL/dFpv4brXpARsXngny6fe
6s9I7YhnDM89N+u5vyd4zzjdhx4kj8QfS9r7A9YJNSVusHzX+XJSCD41uVtbHu4T
n/yxoH7ChjCeUeaZm/3+VzYnRnQ7Janoz4WFi+9epR5pe6pf2JZcIu38q5l3+9YN
PVMge6ohxmQowius92++5KKVAX9nxx3yKCVj37padQjgLoDAyYbx23OljQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu5RICKDCKMR+uXyg3aLh4vOQOIMB8GA1UdIwQY
MBaAFFHhQElb0GwujvrLftCjFRbbH0BfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUt
OTg2NzY0MmMyZjEwLzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mZDVmMDQtMWQyNi00NDUxLWE2YWUtOTg2NzY0MmMyZjEw
LzEvVWVGQVNWdlFiQzZPLXN0LTBLTVZGdHNmUUY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuZzgUOB
xeC2I3UbGnF10UBQYPjie+vYt6IQCAMDGQMIIYG0sM+zjiCo0PckaGxN4qdwasW9
v4jWyYJbi4g5pohYsUYPosRvVF5iB/wyi4CMuc0zAanqwGEmmZbV7VcfwCgf/rDj
4C7ebSQvEb6zoz20ahU3rajt7q9S1Tn+Rm9qMooPz6yvZx4GHuT+bYA91pAUBonX
RtjKycPNYAwHQ6yZJ5tFKbEtBM8PQW1l5qOkqcVjb8vAnENKprkA91KLwxDe/xzo
PsUA9Z72ucY/+PFjexj1gvbB0l+LfKxMWGftpNRhhDMK4RY+Ak/tciiteQgPorQM
2aR3+eEli6oAbw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:52:26 2026 by rpki-client