Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
File: rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft (raw, json)
Hash identifier: 5mVrYhH6qh3XH6MGFX9Jp2mVxYcM1E4D6aW3RIKGQf4=
Subject key identifier: 3E:EC:FB:CE:87:3B:45:12:EC:C5:30:49:C4:12:CC:25:FF:73:E0:3A
Authority key identifier: AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
Certificate issuer: /CN=ad4a1495484ce2bf9ec28199a82998ad02638316
Certificate serial: 01A0E7AF3C593313F593AB9CC1FF719BBBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
Manifest number: 0194
Signing time: Mon 28 Sep 2026 11:03:36 +0000
Manifest this update: Mon 28 Sep 2026 11:03:36 +0000
Manifest next update: Tue 29 Sep 2026 11:03:36 +0000
Files and hashes: 1: 6jvFzq_4UsYldaOwxfJ_8ZSGbwo.roa (hash: t00VjLWnYJWof/FCeEdXeWSPPPWivNxDIX6Z/k5etw4=)
2: QxtGFQLDBMtwcXQIYvKECB6M8PQ.roa (hash: 8rNe9XZWHz25/AzS0lELU8ToNgCQJWZ458eNl8uH1hg=)
3: rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl (hash: cdRD8HGuMx4Q3TY2NZS8hLiveGn2YRfwgRXX582D3VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:af:3c:59:33:13:f5:93:ab:9c:c1:ff:71:9b:bb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4a1495484ce2bf9ec28199a82998ad02638316
Validity
Not Before: Sep 28 11:03:36 2026 GMT
Not After : Sep 29 11:03:36 2026 GMT
Subject: CN=3eecfbce873b4512ecc53049c412cc25ff73e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:f6:21:fc:3c:e0:1b:ef:8c:14:32:d2:43:
f9:be:9f:40:11:c3:f9:71:ca:2c:65:87:50:1b:26:
ef:7d:22:02:08:26:3f:e2:ab:f0:c4:87:98:2f:5e:
f9:39:3b:37:87:93:0f:8c:cf:96:84:fc:f6:d4:fc:
61:0f:17:7f:f8:55:3b:a5:f0:58:bf:a7:0b:66:15:
32:ce:0d:fe:55:5d:23:17:f6:32:75:34:d0:35:1d:
42:a9:f1:66:6e:d4:df:73:12:60:80:e5:01:59:e3:
a9:f9:5c:db:ab:b4:c4:65:59:ba:d1:15:1b:02:8f:
cf:85:69:bb:2f:46:37:27:20:99:39:b4:18:99:81:
ab:17:c6:d2:b9:75:0d:27:0e:f0:ab:23:59:2c:b0:
83:02:b5:30:92:97:2a:70:19:44:ab:71:77:08:35:
b1:8f:19:30:64:51:9d:81:6e:7e:3d:46:78:df:c4:
a4:11:99:cd:75:72:e6:70:e8:f1:7a:99:4f:d1:6d:
c5:55:46:12:78:d6:73:e4:42:91:84:f5:3e:60:11:
d4:03:59:3d:27:57:0c:98:c2:dc:1c:88:e7:02:5d:
69:53:00:7a:58:92:3e:3d:13:54:bf:f1:c5:80:d0:
51:ea:b4:70:a7:4d:14:7f:a1:ae:c6:42:31:12:57:
b5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EC:FB:CE:87:3B:45:12:EC:C5:30:49:C4:12:CC:25:FF:73:E0:3A
X509v3 Authority Key Identifier:
keyid:AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:84:13:76:e4:df:0e:2a:bd:e4:d7:17:46:9c:6f:09:d8:09:
ad:0d:10:40:fe:d1:7d:c1:b6:d3:58:6c:7f:c3:6a:3a:3c:67:
eb:28:0f:fd:95:59:fd:25:c4:69:46:d7:2a:fb:78:b8:15:e7:
82:7c:47:2b:81:8f:95:37:4c:42:4d:77:b2:0c:70:28:d7:62:
e5:c8:18:68:bf:83:1e:80:73:29:fe:aa:ba:c1:02:58:83:8b:
e8:1c:86:37:bd:8b:92:ba:6f:57:8a:47:5d:95:66:97:37:70:
c2:2a:6b:93:62:c9:1b:b7:0f:4e:cb:5d:d5:ce:e1:44:0b:da:
04:c5:39:a0:b3:75:24:b9:76:cf:05:6f:5e:90:82:bd:4f:eb:
7b:63:c8:75:a4:12:ec:7e:ec:98:96:ae:3b:3f:11:bd:9e:80:
6c:11:ff:69:f9:74:03:db:2a:0f:3b:4d:83:a7:72:d9:11:88:
0b:77:48:7b:4e:5c:c3:3e:5c:62:ab:d5:98:8f:39:e3:ca:e3:
37:ea:f8:30:b9:ed:3a:d6:c7:91:7e:ef:0a:9e:8b:06:1e:04:
11:e1:47:67:3a:23:29:38:24:4b:7e:14:9e:3c:ab:67:fa:01:
2c:23:20:f2:dc:82:40:0c:ec:4d:13:13:e5:1d:1b:cb:89:6e:
a1:8b:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:28:42 2026 by rpki-client