Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: lXUwohROvbW2jdsfVVqm6AQTKWBUwVUDvn0hjZ/+fAc=
Subject key identifier: 4F:78:AC:BF:11:A5:19:AD:4A:5B:0D:C6:0C:FD:E3:22:73:43:B7:3F
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 01A0E02A904F939295F1592D38AD6E07DFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 119C
Signing time: Sun 27 Sep 2026 00:01:20 +0000
Manifest this update: Sun 27 Sep 2026 00:01:20 +0000
Manifest next update: Mon 28 Sep 2026 00:01:20 +0000
Files and hashes: 1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: a3WHMzH8lunAhqFoXUV8uPeajwqeiNTqOW5ZC9ncTgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:90:4f:93:92:95:f1:59:2d:38:ad:6e:07:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Sep 27 00:01:20 2026 GMT
Not After : Sep 28 00:01:20 2026 GMT
Subject: CN=4f78acbf11a519ad4a5b0dc60cfde3227343b73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:e3:43:07:2f:cd:c4:75:bd:8d:d0:ab:8c:
86:c0:e9:ef:83:56:53:dc:b8:a1:2e:54:97:20:5e:
ee:06:a5:e2:fc:0b:6b:ef:da:a6:33:49:8e:2d:47:
37:3f:e6:93:9f:66:35:f2:26:35:8c:09:35:6d:32:
78:2a:67:c9:60:24:e3:25:9e:99:d4:61:0e:7d:96:
b0:d9:28:f9:3c:04:06:11:42:26:ba:35:57:2a:11:
8d:31:59:3c:32:81:92:59:d9:ab:fe:f6:67:ef:c8:
19:07:52:a8:0f:7d:62:dc:42:e1:a5:4f:1f:4c:69:
35:a1:20:79:ba:3e:b5:4b:5e:b9:2c:82:60:dc:4c:
91:f9:8f:a4:4e:24:e4:21:3a:82:a0:29:d2:0e:ca:
43:93:80:71:5c:4d:b5:bc:08:f1:99:e9:76:f7:e3:
4a:88:cb:41:c4:49:a7:64:33:a5:b1:d0:15:1c:5a:
64:96:b7:ff:1a:2e:da:5d:61:ca:f9:97:2b:ca:8a:
c0:b3:d6:db:c6:84:fd:0c:dd:35:30:f8:9a:c6:99:
ff:fd:04:80:d2:71:c7:f9:73:ab:48:49:f3:34:eb:
e7:9f:47:f4:40:0e:76:00:b1:c9:00:12:d2:94:7f:
15:d1:bc:64:06:f0:9d:eb:cb:0b:a2:5a:50:44:51:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:AC:BF:11:A5:19:AD:4A:5B:0D:C6:0C:FD:E3:22:73:43:B7:3F
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:18:5a:81:d5:a0:52:a4:e6:c6:34:56:7c:14:1a:ea:9f:8c:
9a:e8:d1:6f:bf:0b:8e:b2:74:34:36:86:fb:c5:25:43:59:52:
2a:7d:42:72:16:01:e2:17:56:d5:0a:7f:49:60:3f:47:17:0b:
a5:3d:17:b2:96:bd:39:1c:a1:80:88:4c:59:bd:4f:f7:6c:2e:
5d:e9:f7:33:93:8e:c8:ab:17:e9:73:56:9b:6b:ee:45:0b:4f:
f0:a9:1c:4f:fb:7e:11:28:5e:f5:9b:a6:42:3b:53:4c:71:8a:
4d:7d:a8:6a:ac:65:ca:8e:12:d9:f5:25:ea:82:38:11:8c:b0:
6c:81:c1:bb:39:03:42:9d:d2:d5:70:f7:8a:53:34:e5:d7:67:
8d:84:7d:f9:45:2e:54:34:68:9d:39:d8:76:dc:07:07:70:8f:
aa:c0:4e:cb:d7:43:92:ee:46:f3:aa:2c:c0:e0:b9:e0:89:19:
20:0d:9a:20:55:46:48:76:6b:4c:8f:d1:bc:77:08:54:30:df:
ec:8e:d8:0f:fa:81:9c:3f:df:3e:0b:3e:a0:73:f5:50:6b:5e:
4f:38:22:56:42:3c:86:c2:6c:ef:4f:b1:97:b7:10:a9:ae:33:
58:c1:33:f5:cb:ff:ef:10:ab:64:1c:2f:8e:2c:3d:cc:fe:fc:
e6:7c:c6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKpBPk5KV8VktOK1uB9++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODg2MWUxN2ViZWQ1Nzk1MGZmMzJjN2IzNzdmYzQzMDQx
M2RiZTQwHhcNMjYwOTI3MDAwMTIwWhcNMjYwOTI4MDAwMTIwWjAzMTEwLwYDVQQD
Eyg0Zjc4YWNiZjExYTUxOWFkNGE1YjBkYzYwY2ZkZTMyMjczNDNiNzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFnjQwcvzcR1vY3Qq4yGwOnvg1ZT
3LihLlSXIF7uBqXi/Atr79qmM0mOLUc3P+aTn2Y18iY1jAk1bTJ4KmfJYCTjJZ6Z
1GEOfZaw2Sj5PAQGEUImujVXKhGNMVk8MoGSWdmr/vZn78gZB1KoD31i3ELhpU8f
TGk1oSB5uj61S165LIJg3EyR+Y+kTiTkITqCoCnSDspDk4BxXE21vAjxmel29+NK
iMtBxEmnZDOlsdAVHFpklrf/Gi7aXWHK+ZcryorAs9bbxoT9DN01MPiaxpn//QSA
0nHH+XOrSEnzNOvnn0f0QA52ALHJABLSlH8V0bxkBvCd68sLolpQRFHMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE94rL8RpRmtSlsNxgz94yJzQ7c/MB8GA1UdIwQY
MBaAFLqIYeF+vtV5UP8yx7N3/EMEE9vkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2Yt
MTBmZGNhMzg1ZWE0LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xMGQxNTMtYzNjMy00MDExLTk3Y2YtMTBmZGNhMzg1ZWE0
LzEvdW9oaDRYNi0xWGxRX3pMSHMzZjhRd1FUMi1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHxhagdWg
UqTmxjRWfBQa6p+MmujRb78LjrJ0NDaG+8UlQ1lSKn1CchYB4hdW1Qp/SWA/RxcL
pT0Xspa9ORyhgIhMWb1P92wuXen3M5OOyKsX6XNWm2vuRQtP8KkcT/t+EShe9Zum
QjtTTHGKTX2oaqxlyo4S2fUl6oI4EYywbIHBuzkDQp3S1XD3ilM05ddnjYR9+UUu
VDRonTnYdtwHB3CPqsBOy9dDku5G86oswOC54IkZIA2aIFVGSHZrTI/RvHcIVDDf
7I7YD/qBnD/fPgs+oHP1UGteTzgiVkI8hsJs70+xl7cQqa4zWMEz9cv/7xCrZBwv
jiw9zP785nzGlQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:20 2026 by rpki-client