Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: JZ6T4OhrUKWn5bbUkf9VhTKZVaaq0ieMxqMb8kUPHcw=
Subject key identifier: 65:86:06:96:8A:CC:C4:CE:BA:B3:D4:11:26:60:96:8A:FF:E0:36:00
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01A1DE7064CFE8A5B87F9842AC9B28B343F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 09:01:09 +0000
Manifest this update: Sun 15 Nov 2026 09:01:09 +0000
Manifest next update: Mon 16 Nov 2026 09:01:09 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: n4g6utx2pFK0ImoUf2lX6W1mUHXNvJdXcfK5f+qMOgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:64:cf:e8:a5:b8:7f:98:42:ac:9b:28:b3:43:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Nov 15 09:01:09 2026 GMT
Not After : Nov 16 09:01:09 2026 GMT
Subject: CN=658606968accc4cebab3d4112660968affe03600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:21:f3:eb:ff:ca:37:75:1a:96:c4:56:c8:
8e:17:55:c9:08:12:e7:cc:40:34:ac:36:52:43:4e:
5e:d0:7e:60:90:82:63:5f:29:be:09:87:d0:ec:eb:
a9:ce:5d:bf:f9:a1:57:75:41:49:fb:46:45:4c:be:
23:bf:b5:32:ec:b8:87:74:c1:6c:d5:6a:ba:67:e7:
ac:6e:62:52:43:71:3f:7b:1f:67:7d:01:ac:10:7d:
09:23:a3:58:9c:de:f6:2d:4e:0d:b6:39:60:31:2e:
f7:53:23:27:34:c1:1a:20:e8:f4:84:a8:ac:60:a3:
37:7a:91:54:10:dd:99:48:b0:af:33:6f:ce:5f:2b:
87:e4:9d:12:33:00:f8:ce:be:43:ac:16:0d:07:d4:
1f:d5:68:60:93:16:31:50:d7:e9:95:d7:61:53:be:
e4:9c:62:8e:e8:34:49:a4:0e:5a:bc:52:e6:33:c5:
50:ff:6b:4e:b3:d1:da:92:f3:92:6d:ac:93:93:21:
97:23:7e:9b:25:0d:c8:80:2e:30:c3:86:b1:e8:06:
00:10:10:95:24:f7:cb:78:c6:2c:e4:48:82:be:9b:
f2:d8:7f:7e:23:8c:e9:df:31:af:9c:15:de:7e:96:
24:f6:dd:9c:a7:b2:39:c8:7c:ab:af:53:6b:76:50:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:86:06:96:8A:CC:C4:CE:BA:B3:D4:11:26:60:96:8A:FF:E0:36:00
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:61:2e:cd:97:24:3f:ce:fb:0f:1b:c7:66:2a:56:0b:49:13:
f3:ff:09:47:97:89:f0:51:2b:29:e4:b2:7e:ab:b4:44:03:40:
90:2c:f1:66:d8:82:1a:51:ce:3d:a9:0d:eb:96:f0:ec:2e:83:
47:5e:b7:b4:8a:b5:ac:a5:a1:8b:bd:c3:6a:d8:37:90:13:91:
37:92:78:ab:6b:30:0f:6d:3e:a5:14:40:d0:07:53:06:0e:98:
ba:0b:6c:e3:8c:64:b2:53:de:b3:a0:52:6e:e0:63:dd:8c:86:
2e:80:b9:49:16:4a:43:60:1a:60:cd:28:c5:91:1f:99:cb:53:
5b:52:17:64:b7:58:b2:6f:90:48:6d:fe:71:3e:11:86:8e:b7:
84:87:0d:81:17:95:c4:f2:15:e5:f8:d3:57:ce:e0:d8:dc:05:
94:04:87:04:f6:62:bd:a6:7d:94:92:19:40:23:51:38:e3:a0:
7d:09:bc:fb:51:54:5b:ae:ee:2b:f8:05:8b:c2:d9:de:14:3c:
be:92:4e:1c:58:3f:e2:c1:e0:12:b3:de:21:e2:6c:93:6f:72:
e1:e0:a2:3a:c5:24:7d:8c:71:a5:c1:83:0c:e9:59:eb:e6:56:
ac:3f:95:35:7e:11:1c:95:cc:2b:6c:16:05:c4:e9:92:93:4b:
59:c1:f8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:17:12 2026 by rpki-client