Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: n2vi67CTUV9RsTLFm95s98mH/jdmgDPucjVqrErUE7A=
Subject key identifier: E1:9B:B3:A9:98:E0:5F:3F:3D:F9:B8:67:60:79:49:20:A8:B3:FB:D1
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 01A10EF111C8587CF4B15C5ED242AC4E4D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 1A97
Signing time: Tue 06 Oct 2026 02:00:42 +0000
Manifest this update: Tue 06 Oct 2026 02:00:42 +0000
Manifest next update: Wed 07 Oct 2026 02:00:42 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: okfhzTmMVy5w8ptPfIbeiyPalDzWJV8LkMAyIYO8YO8=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:f1:11:c8:58:7c:f4:b1:5c:5e:d2:42:ac:4e:4d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Oct 6 02:00:42 2026 GMT
Not After : Oct 7 02:00:42 2026 GMT
Subject: CN=e19bb3a998e05f3f3df9b86760794920a8b3fbd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:54:e0:a0:b4:55:b6:b2:88:de:46:9e:01:ad:
c0:78:4c:8e:bd:9d:1f:d3:90:b1:8d:02:25:56:b6:
83:99:95:2d:64:7c:b0:48:6e:70:6a:20:5f:f9:00:
1b:c6:22:82:91:23:48:06:d6:d6:cc:cb:a8:bb:48:
d6:c5:c2:cc:20:23:ca:c0:38:4a:19:27:d6:31:d1:
25:42:89:b4:ea:ae:97:99:98:f0:de:fa:66:e8:55:
75:3b:8a:4a:63:f0:82:25:2c:d7:71:45:af:bb:a7:
d5:68:a2:46:a4:ca:b4:54:97:c7:5b:3b:9f:f1:a4:
7c:c3:7b:d8:43:7f:df:86:ef:32:07:b7:84:0a:e4:
16:3f:54:c4:24:49:fd:26:a6:b7:b5:a3:f7:f0:d7:
2b:59:b7:b3:5e:1b:69:b3:cd:a9:2d:a0:4b:8e:46:
c1:70:d5:87:45:39:8c:c1:e3:63:50:51:b8:da:6d:
fe:cc:6c:49:1e:b7:f4:2c:a2:bc:9e:5f:87:a4:9a:
0f:fa:db:dd:b8:9e:67:fc:e1:7a:27:fb:1a:31:64:
ad:51:b2:17:1e:90:1c:32:6b:de:f9:7c:c8:72:c4:
47:f5:bc:a5:af:38:e2:f0:86:51:c3:09:51:c7:46:
5a:aa:f2:2e:b8:ac:6d:ff:74:eb:95:03:d0:d0:76:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9B:B3:A9:98:E0:5F:3F:3D:F9:B8:67:60:79:49:20:A8:B3:FB:D1
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b7:44:da:af:ff:1e:0d:20:5d:80:18:8a:2f:61:b2:48:23:
74:85:df:c0:35:99:16:79:70:dc:77:42:91:b1:82:b4:65:c3:
d6:67:ad:eb:c7:8f:09:5a:e5:f6:e1:ad:93:21:76:c4:d3:22:
2f:22:5a:8a:11:97:9b:7a:9f:6b:2e:fd:69:a5:87:fd:1b:a0:
1a:b1:e0:dc:94:ff:3b:e7:d2:98:e8:d9:c4:5b:87:b9:2c:9e:
3b:0c:74:00:7f:39:02:5f:bd:64:00:c3:d9:c9:9a:06:27:be:
4c:36:41:04:b8:4b:b0:50:58:7c:df:4d:c7:bc:59:c4:f8:a3:
5e:8c:83:3b:e3:2d:b9:44:ae:e6:74:bd:16:6d:34:3c:69:9a:
06:b4:4f:b3:77:53:0b:fd:d0:57:93:33:18:94:8b:f6:56:7b:
10:ff:90:2f:ff:ea:c3:e4:ec:bd:2f:f2:96:fb:87:29:b3:9a:
33:23:4c:c9:02:8b:01:77:3b:64:ae:ff:b6:f7:55:fb:f6:c1:
00:89:80:39:ad:15:3c:5d:2b:c5:82:1c:1d:02:cc:a3:01:68:
da:e1:64:76:81:80:34:a2:19:76:a6:b7:2b:65:38:b0:26:fd:
02:3d:79:1d:86:8d:58:c5:1f:7e:23:1a:2f:7f:a8:fe:39:09:
28:8e:30:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 07:18:45 2026 by rpki-client