Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: XHlQjRCIFETps1mmtogGKubsqXw80npYonT/HDr0QxQ=
Subject key identifier: EE:CD:8C:C9:A3:36:FB:E2:7B:B5:D5:0C:05:CD:61:78:2D:7F:DC:A7
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01A1280C0BBC4EFF83413ACC7026ABBE6F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0F43
Signing time: Sat 10 Oct 2026 23:00:40 +0000
Manifest this update: Sat 10 Oct 2026 23:00:40 +0000
Manifest next update: Sun 11 Oct 2026 23:00:40 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: ugjwbm4WkSjKp/6pAQmnIKzaneUKaW+70qsk7zD3XQE=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:0b:bc:4e:ff:83:41:3a:cc:70:26:ab:be:6f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 10 23:00:40 2026 GMT
Not After : Oct 11 23:00:40 2026 GMT
Subject: CN=eecd8cc9a336fbe27bb5d50c05cd61782d7fdca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:41:31:78:81:55:20:a1:ae:83:e9:91:92:62:
13:19:90:1d:19:b0:a7:02:f8:15:e5:17:14:be:fd:
d6:40:97:12:52:58:c3:39:ea:aa:ba:12:0f:6a:b1:
02:ee:8f:54:30:c0:34:7a:53:59:49:e6:b5:8c:ae:
c4:d8:13:58:7f:83:31:54:35:0b:95:8d:53:99:d6:
3e:e6:a1:a1:34:67:00:3f:a9:ff:2d:97:96:1e:74:
4d:40:79:27:9d:a3:ef:d6:f9:6e:f7:6c:62:8e:7d:
60:dc:60:f6:9f:26:53:23:6b:cb:ad:68:0b:80:70:
d3:85:fb:93:ec:07:54:59:27:89:f3:4e:4b:12:70:
9f:ae:c3:6d:43:83:77:7f:fe:27:86:56:c2:72:34:
0d:8b:95:11:29:b0:ff:aa:fb:39:64:df:40:3e:01:
ed:24:43:cf:37:8f:aa:c0:00:ff:6b:60:ff:02:74:
d6:4d:ad:10:a9:7e:64:bd:1d:a7:c9:78:0f:6b:3a:
f1:0d:31:c3:1e:d0:ea:34:2c:fb:55:73:2d:50:44:
00:88:6c:e3:6e:17:68:db:84:ad:51:fd:f2:9b:11:
9e:e9:19:22:9d:ed:7d:14:b1:2e:5e:fd:52:df:8e:
22:dc:21:f5:1f:61:c1:e1:65:7a:8f:98:43:7a:25:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CD:8C:C9:A3:36:FB:E2:7B:B5:D5:0C:05:CD:61:78:2D:7F:DC:A7
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:53:1d:5e:0c:b4:77:ec:ca:1e:6c:72:bf:be:f6:5c:bf:79:
6c:6d:14:95:1f:6d:f4:ca:5e:5e:51:e7:7c:58:bc:1e:ff:34:
6c:2d:98:46:cf:fa:87:ac:2d:87:f3:28:fc:01:35:f5:18:4c:
ac:6c:14:3d:e7:cd:20:f4:8a:7a:88:5c:95:e9:9b:3d:b1:19:
5d:18:c1:83:56:90:b9:ff:e5:76:aa:b8:92:3a:b4:74:18:e6:
77:30:87:1e:a2:51:dc:f9:9e:87:47:e6:71:77:03:f7:08:6e:
8f:49:e5:aa:7f:85:0d:af:75:b5:22:cd:2c:aa:b8:28:9b:c2:
49:bf:46:0d:7c:87:7b:63:ad:3c:76:64:3e:39:64:e5:f8:cf:
88:e1:4b:41:5f:9f:d6:47:b7:55:20:37:48:51:d4:9d:c1:5d:
9a:8f:ec:de:ad:a3:e6:52:5d:74:03:bb:72:ac:3f:dc:9f:36:
09:8d:5e:e6:db:f4:a5:5f:f9:f8:27:3f:b7:06:8c:2c:10:40:
bc:b0:4b:39:47:d2:42:03:1c:9d:33:f4:00:56:5f:1a:cf:2a:
47:15:a7:b9:e8:ae:37:b2:a4:5f:ac:9b:0d:d9:2e:5b:52:fa:
7d:10:e6:5c:0f:f8:e6:33:4b:f7:29:d5:ff:6a:d3:27:73:2b:
d9:83:90:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:38:54 2026 by rpki-client