Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: mKamjqyJ8NsvQv5o3T9wfpFgIYPaN7CFYF89IvJzraw=
Subject key identifier: 6A:4E:B9:48:6B:38:AA:51:47:E6:C4:15:8E:CE:1B:7E:78:B2:16:86
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01A0D5A6C233A2679842BA5E1D0C3DDCFBE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1790
Signing time: Thu 24 Sep 2026 23:01:10 +0000
Manifest this update: Thu 24 Sep 2026 23:01:10 +0000
Manifest next update: Fri 25 Sep 2026 23:01:10 +0000
Files and hashes: 1: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (hash: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: tJgdCppMIxyxYEgkDICuDppeC3HIiBsu1tUSjb/40Fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:c2:33:a2:67:98:42:ba:5e:1d:0c:3d:dc:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Sep 24 23:01:10 2026 GMT
Not After : Sep 25 23:01:10 2026 GMT
Subject: CN=6a4eb9486b38aa5147e6c4158ece1b7e78b21686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:a0:b0:b6:4e:d6:10:ef:b7:02:d6:34:77:
ee:62:cf:e1:00:1f:1c:7d:28:2e:74:5c:41:3b:6d:
59:36:f6:1b:b0:ff:19:29:cd:3c:3b:87:ad:5a:9c:
40:03:c3:5d:18:c8:af:6c:6c:27:f3:48:3d:e8:96:
ea:31:74:b3:1c:cb:5a:2b:e4:a5:ab:19:96:aa:e3:
4e:f1:8b:e3:c7:09:07:e2:25:73:64:14:0c:f3:65:
45:66:27:f1:b3:ec:76:27:25:7b:74:82:74:86:00:
c6:78:53:f0:cb:c6:a0:66:fa:c1:48:74:b1:00:8b:
5a:ee:d4:4c:b3:89:77:7d:36:4b:e0:70:1f:d5:b3:
34:10:de:9d:a1:de:a1:55:e9:d6:f5:a5:51:44:8f:
fd:57:5c:17:7f:96:5f:59:b5:54:c4:37:07:1c:a9:
3c:7a:f6:c4:e8:6f:ba:60:c0:65:2a:8a:03:d2:ff:
ec:e9:13:a8:97:c9:22:b0:4d:22:48:4e:a8:c2:2b:
17:c0:18:3a:01:ec:70:7e:fc:c2:60:f8:95:5f:20:
13:8d:39:4a:40:13:7b:8d:2d:b6:82:63:0a:6f:77:
3a:44:b7:92:f1:ff:a7:90:d5:78:48:b2:8d:9b:09:
00:72:a7:e7:4d:26:12:05:ad:42:4d:d6:8a:72:39:
d4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4E:B9:48:6B:38:AA:51:47:E6:C4:15:8E:CE:1B:7E:78:B2:16:86
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:d2:94:e5:f5:b0:cd:76:db:27:88:33:d5:6f:83:74:03:91:
06:8b:de:12:54:31:78:4f:24:73:fa:0c:a5:0a:d9:1a:2b:81:
c9:41:33:53:98:d3:83:e6:66:13:da:4b:24:47:13:a0:16:2a:
f7:e7:33:9f:dc:ea:5b:04:7f:d0:e4:dd:90:66:f1:88:9a:76:
10:4a:21:bb:ff:b0:1f:61:78:0b:94:6d:25:6f:9e:eb:11:fc:
17:dd:ee:69:ab:a6:19:a5:0c:c4:ae:59:2b:f0:6c:9c:e1:28:
00:a2:64:a4:c7:7f:ed:8e:65:a8:b4:33:17:85:61:9e:cd:97:
4e:88:8b:c3:f5:ec:e3:43:65:dc:12:90:78:1c:4a:9a:16:3d:
5d:d1:8d:79:c9:b8:fc:7f:4e:d3:6b:a2:1b:60:2e:66:0a:e2:
58:7e:71:29:14:6d:cf:fe:68:ef:29:c8:d6:8a:6e:3a:a8:8e:
48:fa:59:c4:c4:bd:f4:ca:7a:1d:5a:4f:6d:8b:24:3a:e2:39:
e0:b9:40:b3:94:62:3a:83:61:c6:f7:00:d5:6f:2d:d2:f7:bc:
2d:f6:4e:f5:a8:e1:d5:21:7c:f7:fe:33:71:c8:36:e3:42:d1:
f2:87:6b:59:e0:ac:04:42:00:22:6e:b4:d4:c3:6b:72:3c:26:
52:34:8b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpsIzomeYQrpeHQw93PviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNzBkYzUyMDRkZWNmN2FiZWE1MDcwZDc1ZmEwNThjOGFj
MDEzZDUwHhcNMjYwOTI0MjMwMTEwWhcNMjYwOTI1MjMwMTEwWjAzMTEwLwYDVQQD
Eyg2YTRlYjk0ODZiMzhhYTUxNDdlNmM0MTU4ZWNlMWI3ZTc4YjIxNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCCgsLZO1hDvtwLWNHfuYs/hAB8c
fSgudFxBO21ZNvYbsP8ZKc08O4etWpxAA8NdGMivbGwn80g96JbqMXSzHMtaK+Sl
qxmWquNO8YvjxwkH4iVzZBQM82VFZifxs+x2JyV7dIJ0hgDGeFPwy8agZvrBSHSx
AIta7tRMs4l3fTZL4HAf1bM0EN6dod6hVenW9aVRRI/9V1wXf5ZfWbVUxDcHHKk8
evbE6G+6YMBlKooD0v/s6ROol8kisE0iSE6owisXwBg6AexwfvzCYPiVXyATjTlK
QBN7jS22gmMKb3c6RLeS8f+nkNV4SLKNmwkAcqfnTSYSBa1CTdaKcjnUmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpOuUhrOKpRR+bEFY7OG354shaGMB8GA1UdIwQY
MBaAFFBw3FIE3s96vqUHDXX6BYyKwBPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQt
OGFjMTdlOWM0MGRiLzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMjhiNWMtODhkNy00YWQ0LTllMWQtOGFjMTdlOWM0MGRi
LzEvVUhEY1VnVGV6M3EtcFFjTmRmb0ZqSXJBRTlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzdKU5fWw
zXbbJ4gz1W+DdAORBoveElQxeE8kc/oMpQrZGiuByUEzU5jTg+ZmE9pLJEcToBYq
9+czn9zqWwR/0OTdkGbxiJp2EEohu/+wH2F4C5RtJW+e6xH8F93uaaumGaUMxK5Z
K/BsnOEoAKJkpMd/7Y5lqLQzF4Vhns2XToiLw/Xs40Nl3BKQeBxKmhY9XdGNecm4
/H9O02uiG2AuZgriWH5xKRRtz/5o7ynI1opuOqiOSPpZxMS99Mp6HVpPbYskOuI5
4LlAs5RiOoNhxvcA1W8t0ve8LfZO9ajh1SF89/4zccg240LR8odrWeCsBEIAIm60
1MNrcjwmUjSL5g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:02:48 2026 by rpki-client