Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: 3IonznrONOo7RT6oBbVYCp5AM5u57kgDmOsAM2P122g=
Subject key identifier: 23:AF:06:62:4B:72:C8:01:72:56:17:58:EA:93:2B:B4:A0:FD:89:E7
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 01A0F11E50C0BFB9DCB32F7CB52EBF5E81A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 1273
Signing time: Wed 30 Sep 2026 07:01:30 +0000
Manifest this update: Wed 30 Sep 2026 07:01:30 +0000
Manifest next update: Thu 01 Oct 2026 07:01:30 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: uMDox+BWmi+LFjRlfoKg+trM9QVK/u6whpX5kRaUCXw=)
2: Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa (hash: 7+Wwaoq9oqFjf/pv4r/VE2mNMQO06GEpJG3+nVsxTaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:50:c0:bf:b9:dc:b3:2f:7c:b5:2e:bf:5e:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Sep 30 07:01:30 2026 GMT
Not After : Oct 1 07:01:30 2026 GMT
Subject: CN=23af06624b72c80172561758ea932bb4a0fd89e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:2c:2b:16:e4:6f:e3:0c:63:6e:04:be:b3:
9f:cc:45:55:a8:50:f7:f9:b5:27:65:ec:a8:cd:2a:
6f:ee:34:92:99:1a:f0:13:ae:50:92:dd:4f:4d:e3:
3f:fd:eb:66:c0:ba:86:c3:55:4f:42:4f:41:bc:42:
01:a7:6f:f5:ed:e6:13:cb:84:d0:9c:d3:f5:a0:f7:
44:0c:66:69:ea:3e:96:c2:d4:41:11:9f:de:2d:49:
6a:1e:c9:34:f6:8e:e9:8d:6e:4e:fc:30:03:fa:d1:
02:f0:67:7f:ce:72:35:3c:3d:e7:d5:57:2c:af:6b:
8f:da:ce:ee:36:86:54:1b:25:64:4b:cd:36:4a:aa:
66:58:ea:83:46:1e:7c:1e:25:3c:83:75:cb:c6:cf:
30:82:9f:c2:0b:e3:21:e2:37:7c:8b:b7:53:2b:ac:
90:62:e7:81:de:db:97:bc:e3:d1:46:da:2d:bf:03:
62:71:49:91:f7:46:43:50:16:a5:fd:31:af:24:49:
a5:93:5f:b1:e8:92:9c:1e:32:fe:ee:2a:79:25:f1:
4d:ea:2e:71:71:6b:c7:f9:81:ce:46:f5:83:be:4a:
2c:ae:3d:36:b5:63:f7:5c:68:f3:f7:f9:e5:de:a3:
93:ab:03:00:88:06:80:a1:e3:38:8b:65:80:97:a5:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AF:06:62:4B:72:C8:01:72:56:17:58:EA:93:2B:B4:A0:FD:89:E7
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e3:1e:73:c6:2f:de:17:86:76:75:2e:98:5e:67:6b:4f:2e:
01:06:1e:be:64:66:1c:e0:6c:71:17:45:9e:61:75:21:c8:48:
f2:16:34:1c:d2:b2:e0:a8:e6:25:5c:00:25:21:3e:ec:8b:34:
6e:e0:8e:3b:1c:0f:be:09:92:95:1c:d3:1e:78:65:3b:71:6f:
19:b6:97:6e:ed:3b:0f:6f:7a:7f:7c:36:3a:ae:9d:e9:d6:db:
74:d8:18:95:e2:6c:dd:52:e6:f1:29:61:27:5f:88:8a:a4:76:
e3:b6:83:b1:60:95:d3:a8:4b:42:68:12:af:e5:c0:91:85:e4:
50:3e:76:a2:3b:10:94:ee:55:ff:e8:64:e0:9a:c9:2d:34:dd:
60:5e:3b:a3:5f:c9:f2:f9:47:82:3e:11:ff:e5:91:74:6e:c3:
03:c4:56:1d:60:4e:5c:c4:8f:02:88:d3:64:74:d5:ea:76:3b:
3b:85:01:14:5e:c0:a8:70:b0:ba:db:75:84:da:a7:d1:d4:6f:
81:90:c2:55:3c:c8:f1:f3:23:78:5d:18:44:2d:8a:36:fe:01:
64:08:fc:c3:2b:1f:2b:c2:46:ef:41:ca:a9:c2:86:33:57:d2:
4f:17:55:38:0c:bb:e6:7b:79:e6:70:f7:80:e7:61:7e:ce:dd:
17:e1:63:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDxHlDAv7ncsy98tS6/XoGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNDExZTUyZGFiN2QwYmUyNjc0MzEzYjZiNWQyZTc0YmQx
MTM2MGUwHhcNMjYwOTMwMDcwMTMwWhcNMjYxMDAxMDcwMTMwWjAzMTEwLwYDVQQD
EygyM2FmMDY2MjRiNzJjODAxNzI1NjE3NThlYTkzMmJiNGEwZmQ4OWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wIsKxbkb+MMY24EvrOfzEVVqFD3
+bUnZeyozSpv7jSSmRrwE65Qkt1PTeM//etmwLqGw1VPQk9BvEIBp2/17eYTy4TQ
nNP1oPdEDGZp6j6WwtRBEZ/eLUlqHsk09o7pjW5O/DAD+tEC8Gd/znI1PD3n1Vcs
r2uP2s7uNoZUGyVkS802SqpmWOqDRh58HiU8g3XLxs8wgp/CC+Mh4jd8i7dTK6yQ
YueB3tuXvOPRRtotvwNicUmR90ZDUBal/TGvJEmlk1+x6JKcHjL+7ip5JfFN6i5x
cWvH+YHORvWDvkosrj02tWP3XGjz9/nl3qOTqwMAiAaAoeM4i2WAl6V5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOvBmJLcsgBclYXWOqTK7Sg/YnnMB8GA1UdIwQY
MBaAFFJBHlLat9C+JnQxO2tdLnS9ETYOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzIt
ZDBjZmU0MzAxNmRlLzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85YjFkODUtNzE5OC00YWY2LWE2MzItZDBjZmU0MzAxNmRl
LzEvVWtFZVV0cTMwTDRtZERFN2ExMHVkTDBSTmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOMec8Yv
3heGdnUumF5na08uAQYevmRmHOBscRdFnmF1IchI8hY0HNKy4KjmJVwAJSE+7Is0
buCOOxwPvgmSlRzTHnhlO3FvGbaXbu07D296f3w2Oq6d6dbbdNgYleJs3VLm8Slh
J1+IiqR247aDsWCV06hLQmgSr+XAkYXkUD52ojsQlO5V/+hk4JrJLTTdYF47o1/J
8vlHgj4R/+WRdG7DA8RWHWBOXMSPAojTZHTV6nY7O4UBFF7AqHCwutt1hNqn0dRv
gZDCVTzI8fMjeF0YRC2KNv4BZAj8wysfK8JG70HKqcKGM1fSTxdVOAy75nt55nD3
gOdhfs7dF+FjxQ==
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:54:28 2026 by rpki-client