Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: S3WNmX8B1TlSdv3D724y8Mi1uYo0lKCEJIP8DY7SM14=
Subject key identifier: 20:86:44:65:A9:F8:02:6B:4C:7D:5B:94:87:23:DE:9F:6B:EE:CE:45
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 01A0DFF3C38F1A224AA421599B58B2DA109E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 0EA0
Signing time: Sat 26 Sep 2026 23:01:29 +0000
Manifest this update: Sat 26 Sep 2026 23:01:29 +0000
Manifest next update: Sun 27 Sep 2026 23:01:29 +0000
Files and hashes: 1: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: ZZ275uhEVMO+PnJi8YrqXAcybuzC4PjSLW29jpDGJ5M=)
2: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (hash: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:f3:c3:8f:1a:22:4a:a4:21:59:9b:58:b2:da:10:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Sep 26 23:01:29 2026 GMT
Not After : Sep 27 23:01:29 2026 GMT
Subject: CN=20864465a9f8026b4c7d5b948723de9f6beece45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:41:3e:38:ee:6a:bf:88:78:d9:f5:08:b0:
4e:91:15:10:57:65:e9:fe:36:a2:9c:7c:a5:dc:13:
3c:e3:20:18:62:be:79:ca:51:47:7f:c1:4e:b1:24:
9f:ff:e0:49:4e:ed:c3:72:4e:40:4d:21:07:3e:56:
2d:40:e6:ea:9c:1d:95:3b:3d:03:a9:11:87:a5:f6:
24:a5:41:d3:18:7c:cf:73:9b:ab:95:a5:51:45:ee:
20:a8:80:a8:18:96:7a:8a:87:54:15:d1:df:00:0f:
91:53:bd:40:51:68:bd:5f:00:b9:47:f1:89:1b:9d:
be:8d:4d:e5:af:6f:48:70:e0:19:b9:aa:37:d7:93:
c5:0b:39:7e:7e:d9:b9:64:cc:07:fd:3c:24:20:01:
09:59:19:7e:c4:3f:4f:ff:8b:4b:da:95:1e:e9:76:
1d:7a:93:c2:b5:3e:6b:fe:3c:d5:c9:01:5e:a2:27:
c1:ba:14:64:ec:1f:f4:5d:92:11:74:0f:01:11:09:
b9:e8:e0:d5:a4:30:3b:82:5d:f2:db:d0:93:f8:4c:
fc:fb:40:c6:a5:b0:f4:34:87:c9:a4:85:83:aa:73:
73:8e:50:46:cd:50:45:79:92:d6:a2:33:8b:39:2d:
83:00:61:08:2c:6a:42:b9:ee:05:e3:ef:3e:a1:84:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:86:44:65:A9:F8:02:6B:4C:7D:5B:94:87:23:DE:9F:6B:EE:CE:45
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:46:4e:30:1f:18:1f:88:52:81:04:6d:fe:dc:fc:a3:de:5d:
42:1b:56:0c:d9:fd:c2:f0:84:ec:ef:af:48:ce:fe:61:11:7c:
ec:78:87:b7:df:f4:82:dd:56:3e:84:26:28:db:7c:77:9f:e0:
5d:f2:2c:2a:29:c0:66:ba:47:25:2c:34:67:3b:70:3d:28:ea:
f1:82:8a:2c:18:e1:03:50:30:14:c5:d1:35:07:2a:61:d6:72:
99:0a:e0:70:e9:44:91:11:f9:f9:70:97:8d:1d:61:ca:e3:be:
dd:10:21:f4:66:05:17:a3:41:26:b6:41:89:79:ed:58:83:50:
93:ce:96:a4:37:cb:01:2d:25:26:3c:31:bd:ba:1c:10:d4:10:
1a:a2:47:6e:4e:e6:cc:0f:55:b5:33:39:76:1a:fe:1d:6e:8c:
ae:91:9b:f4:21:f4:13:45:ed:f7:24:e5:88:70:e5:ff:ca:49:
21:08:b3:b8:52:a8:71:a6:1a:5a:c4:8d:2e:ed:53:61:27:68:
65:0a:9b:55:91:0f:e9:4f:d1:7a:ce:d6:b4:8b:50:d0:3d:56:
e9:92:e8:e1:e9:44:a3:ab:6e:1e:32:53:e5:9f:b4:98:05:e8:
45:3f:fb:3f:2b:30:50:f5:87:36:f1:26:a0:6e:e2:55:f0:91:
29:cc:c8:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDf88OPGiJKpCFZm1iy2hCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyOGQzNWVjYWU4YTUyOGNlZWM2NGRlM2JkNjNiNzNmYTQy
ZDVmNGEwHhcNMjYwOTI2MjMwMTI5WhcNMjYwOTI3MjMwMTI5WjAzMTEwLwYDVQQD
EygyMDg2NDQ2NWE5ZjgwMjZiNGM3ZDViOTQ4NzIzZGU5ZjZiZWVjZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/lBPjjuar+IeNn1CLBOkRUQV2Xp
/jainHyl3BM84yAYYr55ylFHf8FOsSSf/+BJTu3Dck5ATSEHPlYtQObqnB2VOz0D
qRGHpfYkpUHTGHzPc5urlaVRRe4gqICoGJZ6iodUFdHfAA+RU71AUWi9XwC5R/GJ
G52+jU3lr29IcOAZuao315PFCzl+ftm5ZMwH/TwkIAEJWRl+xD9P/4tL2pUe6XYd
epPCtT5r/jzVyQFeoifBuhRk7B/0XZIRdA8BEQm56ODVpDA7gl3y29CT+Ez8+0DG
pbD0NIfJpIWDqnNzjlBGzVBFeZLWojOLOS2DAGEILGpCue4F4+8+oYQHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCGRGWp+AJrTH1blIcj3p9r7s5FMB8GA1UdIwQY
MBaAFFKNNeyuilKM7sZN471jtz+kLV9KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWIt
N2EzNzIwZDNjZmZjLzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8zMDNhNDMtYTE4NS00OTczLTg2YWItN2EzNzIwZDNjZmZj
LzEvVW8wMTdLNktVb3p1eGszanZXTzNQNlF0WDBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEZOMB8Y
H4hSgQRt/tz8o95dQhtWDNn9wvCE7O+vSM7+YRF87HiHt9/0gt1WPoQmKNt8d5/g
XfIsKinAZrpHJSw0ZztwPSjq8YKKLBjhA1AwFMXRNQcqYdZymQrgcOlEkRH5+XCX
jR1hyuO+3RAh9GYFF6NBJrZBiXntWINQk86WpDfLAS0lJjwxvbocENQQGqJHbk7m
zA9VtTM5dhr+HW6MrpGb9CH0E0Xt9yTliHDl/8pJIQizuFKocaYaWsSNLu1TYSdo
ZQqbVZEP6U/Res7WtItQ0D1W6ZLo4elEo6tuHjJT5Z+0mAXoRT/7PyswUPWHNvEm
oG7iVfCRKczIsw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 05:59:15 2026 by rpki-client