Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: H6HjBRmiJy2fXcXSgV8oV6/O0WCOuWPQ7WXvoNcA5nI=
Subject key identifier: F5:E7:F7:FE:8C:67:01:DE:E1:13:FC:07:37:97:4A:1A:C0:4E:17:CA
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 01A1DE393A29DD9736CDD449B47FA7489D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 1819
Signing time: Sun 15 Nov 2026 08:00:54 +0000
Manifest this update: Sun 15 Nov 2026 08:00:54 +0000
Manifest next update: Mon 16 Nov 2026 08:00:54 +0000
Files and hashes: 1: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (hash: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: e4IpJgnRFdAX1Lsr36d5c+F4ts7cZ/SNTjLaY0uVmaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:3a:29:dd:97:36:cd:d4:49:b4:7f:a7:48:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Nov 15 08:00:54 2026 GMT
Not After : Nov 16 08:00:54 2026 GMT
Subject: CN=f5e7f7fe8c6701dee113fc0737974a1ac04e17ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fb:01:24:4a:2d:aa:ab:9b:34:e9:33:67:a4:
e6:8b:cd:b0:3b:66:07:c9:ce:b9:b3:a8:77:53:29:
f1:3f:15:08:67:1f:b0:6f:89:fd:c4:64:76:61:42:
bd:76:55:7d:e9:b4:36:cd:83:b8:57:24:2b:c7:f3:
bd:9d:28:8d:ec:94:56:d8:4c:88:0e:a0:65:7a:d5:
67:5f:c4:97:64:78:ce:ed:4f:73:72:46:e9:b6:2d:
74:11:3c:99:e3:98:aa:13:49:97:c1:fa:85:92:7f:
97:3d:69:30:3d:5e:09:60:19:5a:b9:ea:29:9c:7c:
9d:71:fe:1e:ed:75:35:d1:b1:9c:28:9e:6b:40:cd:
38:b3:17:24:c5:e1:38:3e:34:74:89:f1:df:2e:b9:
de:65:0e:6b:1d:3f:97:29:f3:42:14:dc:73:71:04:
49:58:57:e4:dc:fb:7e:71:27:2c:e5:1c:e9:87:83:
ca:fe:4b:31:0c:37:4a:0f:c5:72:4c:dc:ea:f1:e4:
3c:61:1e:c9:38:c3:95:6d:a3:3d:fd:7c:ac:66:b6:
0a:3a:bc:08:f9:71:cf:77:53:5f:d2:a9:e5:de:1e:
4b:17:31:ff:ff:91:0d:ac:3a:0c:27:09:dd:31:0d:
47:5d:aa:52:16:c5:cc:8c:d9:d1:a7:e5:a2:d2:cc:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:F7:FE:8C:67:01:DE:E1:13:FC:07:37:97:4A:1A:C0:4E:17:CA
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:63:2b:dd:21:8c:46:bc:3d:54:8e:3a:d2:4f:b1:52:57:94:
b5:20:24:56:53:f9:11:36:21:1e:a2:cf:71:1f:db:6a:bd:21:
92:9a:a4:e5:0b:8c:9b:dc:76:9c:61:dc:46:1a:d3:2b:29:db:
a8:3d:c9:32:e4:e6:00:41:35:bc:be:0f:b4:88:79:47:61:eb:
3f:bb:d8:25:72:ed:e9:a9:b1:ae:d4:0e:c3:fa:74:65:cd:d0:
d3:7e:ad:1d:f3:af:ae:8c:6d:db:ff:d7:cf:84:be:0e:d7:9d:
31:2d:e6:8c:cb:f1:da:af:be:2b:0b:f4:38:87:cd:3a:0c:92:
ee:08:67:26:eb:dd:2e:e2:17:90:8b:4c:e1:4c:f0:d6:1a:e1:
3c:9b:d0:13:c1:58:b4:23:5b:61:29:64:4b:a6:8b:22:d6:6f:
08:a8:e8:7e:d0:10:b3:f0:34:ec:7a:e3:2e:83:1f:aa:2e:28:
22:ce:bc:a9:de:26:fa:51:3e:bf:ba:27:17:66:cd:19:86:9c:
1d:e3:94:ba:43:b4:c9:28:7d:ad:00:a1:c7:98:e9:ec:7c:1d:
de:80:11:81:07:62:32:59:4a:8b:f8:e2:89:19:0b:b2:34:eb:
43:04:04:05:eb:5a:0b:a0:cb:be:1f:94:5a:20:f9:06:0a:0e:
b7:94:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:43:51 2026 by rpki-client