Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: Q6jEGIoeqXHdR6sPKvXqHtKUe+m1tg5famiEm0wi5Rk=
Subject key identifier: 54:12:F0:78:67:66:99:0C:1C:15:A8:B3:EB:77:84:9D:21:C4:64:9F
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 01A0D8A80B5C5789BD186738D29E6FE0698F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 168E
Signing time: Fri 25 Sep 2026 13:01:26 +0000
Manifest this update: Fri 25 Sep 2026 13:01:26 +0000
Manifest next update: Sat 26 Sep 2026 13:01:26 +0000
Files and hashes: 1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: KL5xezHVLXUMakrJYwB37h/aGBHKbrA/vaUnLv3HKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:0b:5c:57:89:bd:18:67:38:d2:9e:6f:e0:69:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: Sep 25 13:01:26 2026 GMT
Not After : Sep 26 13:01:26 2026 GMT
Subject: CN=5412f0786766990c1c15a8b3eb77849d21c4649f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:2c:80:0a:e4:20:84:08:1e:23:36:6f:b6:
c8:27:11:7c:de:67:86:b6:0d:9e:7e:2e:b0:8e:ed:
50:64:7b:9b:1c:c4:fa:56:96:29:51:0c:db:59:c8:
14:2e:ae:e8:b4:eb:ea:91:aa:64:de:6d:78:b4:c0:
c0:df:97:10:8f:ea:74:5e:16:94:a1:df:3a:37:8e:
c8:f3:83:7d:85:c1:c5:8f:d5:e9:22:07:50:62:9b:
c1:90:b6:67:3b:4c:d1:7b:90:e5:e7:47:76:75:5c:
da:07:97:61:ab:96:9d:2c:e9:f3:2b:2a:98:bd:d5:
a8:5b:0c:bf:bb:4d:9e:c8:4b:68:da:48:e1:fa:6e:
ff:14:d8:d5:c1:61:bb:4c:75:42:aa:2d:8f:b0:de:
d6:16:16:08:7e:db:86:d2:83:c6:e5:8b:c8:2d:2d:
19:fe:f8:42:31:78:6e:29:05:06:27:dd:ef:b4:10:
01:40:f9:0e:27:9f:f7:24:6f:fd:2f:57:61:b9:96:
4b:d6:23:86:b3:0b:3b:7c:c1:d4:c5:f5:0b:92:60:
15:f2:11:65:fd:6a:0f:49:31:4e:ca:0f:c5:b1:cd:
e9:67:1d:ee:a7:7a:5f:c0:f9:18:5d:3e:1c:93:09:
4a:7e:73:aa:28:54:75:26:f3:00:f4:f3:d8:e9:f7:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:F0:78:67:66:99:0C:1C:15:A8:B3:EB:77:84:9D:21:C4:64:9F
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ac:60:54:8b:73:c2:32:50:53:3f:97:05:3c:f8:26:f4:1d:
7b:56:0c:a0:78:63:53:95:bc:c0:12:a2:34:79:f3:85:56:f4:
e4:d7:e4:19:43:e7:e4:6a:84:76:b7:e0:14:e3:ee:d3:8d:41:
cb:fa:b0:71:fc:9d:1a:f8:bd:4a:f3:cc:96:6d:c5:86:cb:2c:
01:07:9c:9c:2e:b5:4a:79:24:55:fc:ce:ef:5d:e8:4d:34:56:
89:87:2c:bc:c3:b8:53:a7:f1:d7:20:45:bb:a6:ff:94:a3:48:
cb:3e:57:1a:73:eb:d5:e9:06:92:c4:8e:34:1e:4d:e0:ec:d8:
4d:63:78:0b:f2:1e:34:46:40:98:67:a8:39:7d:ee:f6:99:1d:
78:a5:ce:af:6f:25:01:aa:20:8a:23:9d:1c:bb:f9:2a:ed:dc:
fc:3b:c9:21:e3:6c:c4:6e:24:7a:a1:36:a0:4b:e0:4d:55:05:
3f:7c:b3:8b:75:60:a1:2c:03:15:17:f3:89:e1:e4:15:3d:03:
8d:0d:88:84:27:14:db:a6:a7:65:a8:50:c8:ba:ad:b2:e1:a5:
d8:e0:86:43:41:e4:50:18:1f:16:0b:dd:80:56:8f:8f:d5:c0:
a5:26:9b:69:ac:5a:3d:cc:f3:70:fd:b3:93:23:38:9e:ad:23:
19:10:97:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqAtcV4m9GGc40p5v4GmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzczMDFlMTRkNjViM2EzZDY4NmRhYWMxNmRmYzQ5YWM0
OGM3Y2QwHhcNMjYwOTI1MTMwMTI2WhcNMjYwOTI2MTMwMTI2WjAzMTEwLwYDVQQD
Eyg1NDEyZjA3ODY3NjY5OTBjMWMxNWE4YjNlYjc3ODQ5ZDIxYzQ2NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqosgArkIIQIHiM2b7bIJxF83meG
tg2efi6wju1QZHubHMT6VpYpUQzbWcgULq7otOvqkapk3m14tMDA35cQj+p0XhaU
od86N47I84N9hcHFj9XpIgdQYpvBkLZnO0zRe5Dl50d2dVzaB5dhq5adLOnzKyqY
vdWoWwy/u02eyEto2kjh+m7/FNjVwWG7THVCqi2PsN7WFhYIftuG0oPG5YvILS0Z
/vhCMXhuKQUGJ93vtBABQPkOJ5/3JG/9L1dhuZZL1iOGsws7fMHUxfULkmAV8hFl
/WoPSTFOyg/Fsc3pZx3up3pfwPkYXT4ckwlKfnOqKFR1JvMA9PPY6fddVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQS8HhnZpkMHBWos+t3hJ0hxGSfMB8GA1UdIwQY
MBaAFLp3MB4U1ls6PWhtqsFt/EmsSMfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEt
NWM2OGY2YjBiMmM3LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9iNzM5M2ItNjgxOC00OGQzLWIwODEtNWM2OGY2YjBiMmM3
LzEvdW5jd0hoVFdXem85YUcycXdXMzhTYXhJeDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqxgVItz
wjJQUz+XBTz4JvQde1YMoHhjU5W8wBKiNHnzhVb05NfkGUPn5GqEdrfgFOPu041B
y/qwcfydGvi9SvPMlm3FhsssAQecnC61SnkkVfzO713oTTRWiYcsvMO4U6fx1yBF
u6b/lKNIyz5XGnPr1ekGksSONB5N4OzYTWN4C/IeNEZAmGeoOX3u9pkdeKXOr28l
AaogiiOdHLv5Ku3c/DvJIeNsxG4keqE2oEvgTVUFP3yzi3VgoSwDFRfzieHkFT0D
jQ2IhCcU26anZahQyLqtsuGl2OCGQ0HkUBgfFgvdgFaPj9XApSabaaxaPczzcP2z
kyM4nq0jGRCXvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:43 2026 by rpki-client