Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 74iQ7oKEkcKsbu6KZsTPipvbqu5YYzptxqhbg+M6Rqg=
Subject key identifier: 1B:2E:07:F7:6F:FE:9D:0A:9D:2B:39:34:41:BA:FB:77:7F:A1:1E:ED
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01A1DE394B14F2C9003F2DB186C86BB0E78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 123C
Signing time: Sun 15 Nov 2026 08:00:58 +0000
Manifest this update: Sun 15 Nov 2026 08:00:58 +0000
Manifest next update: Mon 16 Nov 2026 08:00:58 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: vt4p6eM1LrAfo21JsPiHRhk+x9TgGZhs6k17XJ9tn8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:4b:14:f2:c9:00:3f:2d:b1:86:c8:6b:b0:e7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Nov 15 08:00:58 2026 GMT
Not After : Nov 16 08:00:58 2026 GMT
Subject: CN=1b2e07f76ffe9d0a9d2b393441bafb777fa11eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:14:48:c7:dc:32:62:d7:fd:3d:2b:ef:44:
7a:23:09:ae:92:21:1e:b3:22:e0:e2:e2:dc:26:6c:
65:65:77:b1:df:c7:02:19:67:fc:45:68:1d:8a:8f:
fb:49:b0:7c:92:9c:2e:35:90:05:c4:02:91:4c:7d:
49:d0:e8:80:cf:9e:54:da:72:78:66:94:af:38:01:
9e:4f:00:50:9f:38:b4:51:73:ba:1d:80:4c:7a:1e:
7b:10:b7:48:e7:ba:c4:a5:f6:6e:01:51:ca:9f:e1:
09:cc:8d:be:da:b0:9f:ad:98:89:68:8a:10:87:a4:
05:fa:38:0b:9a:27:6a:a1:a5:c3:db:44:e2:80:ae:
e7:77:ef:45:48:d2:b9:24:fb:af:13:53:29:c1:92:
ab:b1:f4:ec:8d:a3:40:c2:61:36:c1:87:ea:08:b9:
77:bc:cd:2a:9c:72:ff:d3:9f:7f:bb:b2:55:33:5f:
77:9d:59:68:29:10:39:e2:5b:d0:06:6e:b5:69:85:
c6:96:ce:c5:3f:3b:04:c9:14:19:00:78:49:9e:0d:
84:32:23:16:ee:64:76:df:51:91:18:c0:05:22:c6:
52:2d:0d:39:d9:dd:61:c6:17:71:6b:85:dc:eb:32:
57:06:19:32:5b:ef:fb:59:ba:0f:60:bb:ee:c2:43:
cc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2E:07:F7:6F:FE:9D:0A:9D:2B:39:34:41:BA:FB:77:7F:A1:1E:ED
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:2f:3b:b6:26:2f:53:dc:66:aa:9e:7d:2e:ad:7b:7b:dd:66:
a2:1e:6b:99:b4:08:e0:28:63:99:fd:21:da:5d:8a:5d:0b:16:
ec:29:ac:9b:4e:48:f5:ca:4e:01:a0:7f:d1:14:74:2c:53:c4:
ba:59:f1:fa:e7:a8:c3:69:aa:c7:dc:16:4d:ff:a8:54:30:54:
2e:0f:f1:fc:b0:5e:86:66:de:13:94:31:64:a9:59:fc:c5:f9:
03:6c:e3:02:70:85:dc:a0:02:68:1e:63:02:6f:01:b4:4d:aa:
cf:4d:c0:6f:97:e4:20:77:b0:52:46:94:58:b4:ef:8c:48:3b:
16:4e:c5:b2:6e:a9:49:0d:df:66:4c:c4:f4:41:3e:9e:7a:7e:
7d:7f:84:2e:e3:be:0f:59:11:16:f3:d3:b2:91:d3:74:8b:ce:
72:aa:8e:54:f3:7f:7c:bc:7d:cb:6d:90:64:fe:0f:64:4c:ea:
ae:f4:d1:ec:57:fa:a5:68:35:5e:57:d9:1c:87:ac:14:5a:3b:
d3:5e:5c:fc:d1:40:00:83:e6:30:28:58:a9:36:e7:8a:3a:d2:
fa:c1:da:1a:cb:43:56:bd:8e:ea:8e:16:fe:f8:50:02:73:1f:
bd:4e:f9:86:2a:95:9d:56:c2:32:83:7a:db:9f:59:f6:d0:0d:
6b:72:86:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:56:11 2026 by rpki-client