Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: ko4xV5Bl50iqYzBqlZ6KHislhaYwxBTHCXdx8N3b8wo=
Subject key identifier: 8D:C9:32:D1:E9:45:D2:5E:27:9E:E4:91:0B:B4:BA:52:39:49:38:D6
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01A0D8A818CA216CD615C692966D526C1523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0E76
Signing time: Fri 25 Sep 2026 13:01:30 +0000
Manifest this update: Fri 25 Sep 2026 13:01:30 +0000
Manifest next update: Sat 26 Sep 2026 13:01:30 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 1FIWPV57opMwBP5718DZzN10wwhEcjJ7auJUjFAZM9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:18:ca:21:6c:d6:15:c6:92:96:6d:52:6c:15:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Sep 25 13:01:30 2026 GMT
Not After : Sep 26 13:01:30 2026 GMT
Subject: CN=8dc932d1e945d25e279ee4910bb4ba52394938d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:c3:9b:d4:13:70:c9:0c:da:aa:47:3c:48:
80:8c:35:4f:f4:41:d0:5d:90:52:6b:e4:fa:f3:24:
86:b7:1f:88:69:1f:56:92:b9:78:f4:5d:97:62:9f:
dd:72:64:d8:f1:a0:f8:96:61:89:52:50:e4:c2:ca:
9a:06:11:d9:31:1d:4a:88:ff:33:4b:6a:00:30:e7:
5b:68:3f:5c:5c:87:65:31:82:11:05:27:36:2f:48:
8e:b6:64:3e:cc:ef:f2:a5:60:97:1b:c5:0a:0d:a6:
8d:07:c8:5d:1e:ec:6f:cd:77:10:06:45:e9:82:23:
c3:91:56:6e:8d:29:5f:55:0c:66:bd:09:74:70:6e:
2e:80:0f:d2:ca:3b:44:c8:d5:b6:85:0d:c3:84:03:
ea:ad:07:69:03:88:3e:73:21:19:5a:5a:77:83:4a:
08:69:86:c7:4d:8d:bb:26:cf:49:27:7a:8e:76:12:
15:24:fd:38:5a:d3:0f:cb:b0:05:98:48:a0:a8:37:
23:4f:dd:16:77:0b:50:f7:a9:08:c0:8f:0b:35:34:
19:6f:91:4a:81:d4:a4:18:aa:ca:ca:99:7e:87:9e:
63:61:3b:5e:12:b6:89:bb:4f:bf:1d:e1:7c:2f:cd:
b7:ab:0e:fa:a8:d6:04:02:4d:91:d7:04:33:6f:71:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:32:D1:E9:45:D2:5E:27:9E:E4:91:0B:B4:BA:52:39:49:38:D6
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0b:96:d2:e9:11:6c:85:5e:76:09:7e:ef:5b:7f:e5:eb:60:
99:1d:7b:c8:ba:58:96:55:2d:ec:f2:92:75:c1:29:e8:ae:5b:
78:a9:04:54:f3:b1:a0:8e:52:cd:ee:97:86:de:16:df:40:4d:
19:da:c0:92:32:68:9a:21:ad:ab:a8:46:5a:39:2c:4e:f2:09:
bd:c1:cb:8c:a5:a6:73:12:e8:d1:5e:2f:45:95:3b:08:a9:7f:
c3:60:57:b2:0c:86:60:1b:96:bf:19:29:e8:64:48:8d:5c:3d:
d1:d2:75:67:fa:6a:b2:88:dc:a3:fd:de:5e:1f:f1:1a:7b:61:
2c:a0:10:1c:07:1a:9d:00:d8:5e:33:a5:96:91:d0:81:2c:ec:
cb:c8:3b:4b:d8:c3:0a:be:0c:c3:41:96:49:e8:75:78:d9:dd:
d7:64:bf:2c:31:a2:7f:32:fc:a8:95:b0:3d:eb:b9:92:98:ca:
a7:4f:c6:a6:97:bd:0a:ba:1d:ec:ed:58:c3:b8:84:fb:8d:ed:
42:dc:94:5b:71:ee:77:c4:00:ce:ee:05:92:47:67:2a:9f:46:
db:8e:0a:bc:df:6e:04:4e:96:85:9c:7e:a9:bd:b0:f4:79:cf:
3b:47:d7:dc:54:34:ac:9d:5f:cf:1a:58:72:90:ce:0c:94:39:
0a:0c:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:32:17 2026 by rpki-client