Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: 4Q/walb9CGBchM3cPFitPbmFcZM7lAef/KKFMI92+h4=
Subject key identifier: BC:60:D5:CB:A0:8D:68:F0:00:90:F8:CF:31:FB:7D:6A:CD:6A:A4:86
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 01A1DEDE9DD1BBB1428F75A0F925DE1112D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 11:01:33 +0000
Manifest this update: Sun 15 Nov 2026 11:01:33 +0000
Manifest next update: Mon 16 Nov 2026 11:01:33 +0000
Files and hashes: 1: 1_5h2ktiO2Us-d9_9EOFV58PYPA.roa (hash: sd6598E1QU/JTbPf14WQIor/gpE3yNeo7WtwXbLKg9Y=)
2: czO6xgkAci50_TFJzcGjRe13r4g.roa (hash: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: uiUuS0vGVN+s/iEcLjD4TlsfCIP/9otTUa1bmFhASbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:9d:d1:bb:b1:42:8f:75:a0:f9:25:de:11:12:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Nov 15 11:01:33 2026 GMT
Not After : Nov 16 11:01:33 2026 GMT
Subject: CN=bc60d5cba08d68f00090f8cf31fb7d6acd6aa486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:60:36:b7:9d:26:53:28:6a:44:55:74:75:
3c:9e:4e:3a:42:45:af:67:7f:2f:8b:d0:7b:f5:02:
02:05:0d:a7:81:9b:9f:10:04:9c:f1:1c:5b:5d:de:
cd:df:7c:ae:be:0a:3f:4d:80:0c:1a:62:7a:be:84:
d9:96:73:e5:39:94:ab:3a:7a:db:be:34:45:27:01:
29:1f:1b:69:b3:60:98:88:89:e7:c3:2d:31:05:00:
4e:34:df:e2:07:0b:a9:aa:55:80:e3:db:6b:9e:32:
cb:6f:50:57:63:85:15:e7:d2:83:5b:d3:57:8b:1b:
38:3b:be:09:5b:dd:b6:14:fc:4f:01:be:3d:4d:81:
0b:03:ec:1d:48:1b:37:58:27:53:f0:68:fb:73:5c:
de:06:0f:e9:58:46:de:45:b1:8c:36:9a:ce:f3:64:
c0:f0:3f:00:ae:94:71:db:a7:b5:0c:f5:c8:4e:db:
09:fe:e4:a3:b9:6f:03:a9:be:df:7a:dc:84:8e:c4:
4c:d7:15:b3:74:d1:d5:19:6d:a2:c0:56:a1:b0:31:
73:ad:14:78:71:77:4b:55:ca:4e:bb:c1:8c:d9:7c:
3e:1c:fc:f2:73:87:94:75:a2:31:6a:51:b3:e8:c2:
cb:6e:d8:69:92:fc:08:90:1d:6a:77:5e:27:16:59:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:60:D5:CB:A0:8D:68:F0:00:90:F8:CF:31:FB:7D:6A:CD:6A:A4:86
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:ee:95:e9:15:58:5e:30:e5:ea:9e:88:7a:5f:f3:e4:2e:
71:e8:db:21:36:dd:19:0a:38:89:02:49:5c:5a:51:a7:d2:59:
75:23:6a:74:a6:2b:83:9f:49:59:ab:57:aa:93:d7:d9:c1:79:
d0:e1:e9:59:b6:1c:ed:2c:8a:83:d8:3d:8f:dd:8b:12:66:9d:
f9:d3:0a:fb:2e:fe:0d:df:aa:f8:6d:32:1b:84:69:89:da:84:
3c:1f:cb:d6:3d:ef:db:10:11:c6:24:0c:b2:cc:86:14:aa:37:
9b:0a:c2:3f:d4:1f:ff:33:8e:6e:e6:d8:fd:67:ca:5f:cc:05:
be:e1:70:8b:7f:e2:a0:a1:1c:d0:9b:29:b4:25:dc:24:47:0d:
a7:85:6a:bd:6f:4c:05:cd:01:20:8e:48:6a:9d:45:83:10:d1:
05:91:95:82:3b:ab:11:5d:72:df:bc:ee:9e:2e:9f:ef:57:89:
a4:ec:2e:af:21:d7:69:bc:66:8a:52:80:5f:11:b0:f4:26:f2:
56:f8:7d:83:bb:0d:a7:f9:44:1f:ba:4e:04:02:5a:e6:4a:87:
36:1c:b5:8d:cb:a0:c0:92:60:04:78:68:ea:ec:1b:7c:e2:45:
41:58:22:f9:d6:86:89:eb:5a:ac:5f:69:e0:3a:d1:45:fb:b5:
c1:83:a0:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHe3p3Ru7FCj3Wg+SXeERLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MjMyZDE5ZGQ4MWQ0NWMyNTkyM2FlYjRkOWE5Njg1ODc5
YWVmYTYwHhcNMjYxMTE1MTEwMTMzWhcNMjYxMTE2MTEwMTMzWjAzMTEwLwYDVQQD
EyhiYzYwZDVjYmEwOGQ2OGYwMDA5MGY4Y2YzMWZiN2Q2YWNkNmFhNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAdgNredJlMoakRVdHU8nk46QkWv
Z38vi9B79QICBQ2ngZufEASc8RxbXd7N33yuvgo/TYAMGmJ6voTZlnPlOZSrOnrb
vjRFJwEpHxtps2CYiInnwy0xBQBONN/iBwupqlWA49trnjLLb1BXY4UV59KDW9NX
ixs4O74JW922FPxPAb49TYELA+wdSBs3WCdT8Gj7c1zeBg/pWEbeRbGMNprO82TA
8D8ArpRx26e1DPXITtsJ/uSjuW8Dqb7fetyEjsRM1xWzdNHVGW2iwFahsDFzrRR4
cXdLVcpOu8GM2Xw+HPzyc4eUdaIxalGz6MLLbthpkvwIkB1qd14nFlkANQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxg1cugjWjwAJD4zzH7fWrNaqSGMB8GA1UdIwQY
MBaAFLgjLRndgdRcJZI6602aloWHmu+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYt
MWRmMDllNzAxNDM0LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zZmE3MTgtOTBjNS00MjZjLWI4NWYtMWRmMDllNzAxNDM0
LzEvdUNNdEdkMkIxRndsa2pyclRacVdoWWVhNzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJDulekV
WF4w5eqeiHpf8+QucejbITbdGQo4iQJJXFpRp9JZdSNqdKYrg59JWatXqpPX2cF5
0OHpWbYc7SyKg9g9j92LEmad+dMK+y7+Dd+q+G0yG4RpidqEPB/L1j3v2xARxiQM
ssyGFKo3mwrCP9Qf/zOObubY/WfKX8wFvuFwi3/ioKEc0JsptCXcJEcNp4VqvW9M
Bc0BII5Iap1FgxDRBZGVgjurEV1y37zuni6f71eJpOwuryHXabxmilKAXxGw9Cby
Vvh9g7sNp/lEH7pOBAJa5kqHNhy1jcugwJJgBHho6uwbfOJFQVgi+daGietarF9p
4DrRRfu1wYOg+Q==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:35:11 2026 by rpki-client