Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: o6chgzKqMMX9elZc24GQhGi8Tw6dHgRNEI98gx2Q2D0=
Subject key identifier: 6A:2F:DB:DD:94:C2:27:08:36:AA:BA:2E:18:37:EC:11:78:13:02:71
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01A1DC825432F1A1E0BD764CD0D9C45FA342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1A8B
Signing time: Sun 15 Nov 2026 00:01:31 +0000
Manifest this update: Sun 15 Nov 2026 00:01:31 +0000
Manifest next update: Mon 16 Nov 2026 00:01:31 +0000
Files and hashes: 1: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (hash: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: ibeEgdt+XxdATrAPdSwF8bfjbWH4oNjhZpurIf4fXR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 00:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:82:54:32:f1:a1:e0:bd:76:4c:d0:d9:c4:5f:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Nov 15 00:01:31 2026 GMT
Not After : Nov 16 00:01:31 2026 GMT
Subject: CN=6a2fdbdd94c2270836aaba2e1837ec1178130271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:cf:5f:9a:31:bb:9a:a6:f4:41:74:a7:73:
db:d0:f9:f1:b9:f3:b8:3c:84:30:aa:54:32:3e:df:
6c:92:e7:6f:51:07:68:15:92:a7:df:ab:3c:8b:97:
b0:83:74:33:e0:36:f9:3b:3f:00:a5:1a:4e:41:02:
98:4c:0c:b6:c8:f5:2f:a6:24:11:4a:33:58:70:36:
eb:be:fc:06:48:5f:e4:92:71:dd:ea:ad:1a:ce:bb:
9b:a7:e4:72:fd:4f:ea:56:ba:7a:ff:a0:0f:c6:05:
2a:f8:46:08:33:6a:34:26:1e:1c:f5:ee:ce:71:1b:
9b:a6:7c:d5:77:6b:72:83:8f:5e:de:fb:ce:eb:cf:
ec:15:2b:e9:d0:ea:35:55:96:39:9b:98:41:58:23:
8b:b5:4f:68:31:75:d4:39:a4:5b:d1:26:d3:96:8d:
05:5b:d8:c3:9b:74:6a:92:af:c9:39:48:95:bf:31:
26:e4:f9:fb:2c:ba:d7:02:87:2b:9b:ec:89:f6:b8:
33:7f:a5:92:74:91:5e:33:13:01:f7:f0:bf:ac:3a:
1c:6d:c2:26:64:72:3b:1d:d2:00:9a:cb:61:8d:0c:
aa:ed:5c:ba:fc:b3:f7:85:f8:31:e4:bd:74:20:d7:
1e:d1:4d:eb:a5:b2:7b:c2:84:6c:b6:32:e3:2d:e3:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2F:DB:DD:94:C2:27:08:36:AA:BA:2E:18:37:EC:11:78:13:02:71
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c4:1b:09:4d:d7:42:89:9b:d8:cd:77:96:8f:28:b9:68:8c:
62:64:5f:38:7b:ff:b4:45:75:ba:35:a5:ab:2f:a4:79:88:a1:
ca:b9:c1:a9:04:e1:64:de:1a:47:d2:ea:9b:90:6f:93:a4:33:
e2:3b:38:43:93:24:bd:f6:3a:49:d9:ec:42:30:24:05:24:f8:
0e:5f:24:48:ba:6a:a9:8b:d8:e5:ab:84:96:97:e4:2a:1c:1f:
40:fe:52:c9:b1:f0:d4:e5:82:02:48:44:3d:de:ba:b0:b4:e0:
bc:f8:b4:ee:e8:5c:94:a0:a8:a4:56:79:56:c6:f8:c3:0b:6c:
73:9a:23:b3:f1:c0:6d:c2:53:9a:cb:a4:cb:d4:44:ae:2b:7d:
53:34:8f:58:d8:73:bb:58:3e:71:ff:1c:33:52:10:cd:8a:16:
90:16:4e:be:0f:58:73:3b:40:cb:b8:d3:75:5e:a3:2f:22:6a:
34:dc:51:a9:65:a1:86:4f:61:d7:8f:27:ff:84:af:63:0e:66:
a7:d8:eb:56:e4:13:a2:69:4c:b3:ed:43:a9:e4:4f:14:31:7c:
ad:85:9f:2c:44:79:8d:73:4f:43:2b:8c:91:4c:45:d2:f5:c1:
54:95:63:0d:de:61:cd:cc:6a:f0:b3:85:df:b2:66:96:c2:2a:
03:1f:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:29 2026 by rpki-client