Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: 7e+GochbliooIUCDJ9/9+hn0wKsPsbmkooN9IkMaFKY=
Subject key identifier: E3:B4:78:BC:0E:31:F9:D2:B9:7C:34:7B:06:19:D1:95:E2:E7:DB:34
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 01A0EC2F461A55FBCB55A147219A2F9AAB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 08:01:56 +0000
Manifest this update: Tue 29 Sep 2026 08:01:56 +0000
Manifest next update: Wed 30 Sep 2026 08:01:56 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: pCIaZGHmomMorvvQnNivBuVJPDVKM+Zyz+qJDGC4LCA=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:46:1a:55:fb:cb:55:a1:47:21:9a:2f:9a:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Sep 29 08:01:56 2026 GMT
Not After : Sep 30 08:01:56 2026 GMT
Subject: CN=e3b478bc0e31f9d2b97c347b0619d195e2e7db34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:13:7d:cc:fb:18:48:a1:be:f6:34:54:2f:
88:9f:6d:84:95:d5:24:3b:29:93:fc:45:f6:20:bb:
79:c2:66:45:94:20:39:64:5e:c4:d2:20:bb:3d:ca:
12:7a:07:4b:c0:15:e8:d0:26:e7:07:2b:96:32:37:
7f:60:d8:ce:d4:43:8a:ec:e4:a5:fe:47:d6:cf:18:
a6:5e:49:a0:e2:2d:1d:c8:12:0c:e0:ab:22:91:1e:
9d:f0:6b:9c:99:4b:69:ad:ba:35:45:a0:23:40:16:
f7:72:4b:51:6d:67:04:25:d8:3f:e2:1a:c8:87:97:
75:f7:d8:53:48:2e:5f:ed:e5:26:3c:ec:c9:5e:3a:
0d:d9:23:67:12:86:43:c8:b3:c7:09:2c:28:c4:b9:
36:39:de:12:3c:e2:97:89:12:81:02:a6:de:34:47:
33:4a:c4:5b:f5:92:31:be:c9:5b:01:2f:1e:a8:f8:
00:e8:46:d1:84:e2:19:b3:55:d4:71:ea:53:ce:4c:
bd:9f:2f:b3:60:f9:a9:aa:b6:e6:8b:63:18:cd:cb:
87:97:ed:2c:09:e9:4f:66:cd:cb:0e:6d:bc:31:08:
e7:ca:94:55:7f:01:6e:30:a4:9d:e1:ae:9b:07:aa:
4f:ab:16:08:13:6a:c8:33:9b:41:73:f5:98:46:99:
c9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B4:78:BC:0E:31:F9:D2:B9:7C:34:7B:06:19:D1:95:E2:E7:DB:34
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:11:8e:52:92:50:d9:02:11:3c:70:c0:2f:a6:82:47:29:c9:
73:57:43:3c:7c:96:94:52:08:bb:c8:aa:b7:25:94:49:d3:d2:
dc:d3:5f:48:21:a7:c9:25:93:6e:29:6e:64:7c:43:77:40:6b:
4e:5e:48:6d:27:e5:02:61:5b:db:a1:83:c9:fa:74:90:c6:ad:
96:b6:ff:fe:dc:86:cc:59:86:49:a7:a6:5c:ee:c0:7e:e7:fd:
50:48:74:a7:48:d8:de:5d:1e:7b:ef:87:ee:1b:b2:9e:a9:c8:
ef:d4:c0:f9:ad:4c:ba:03:ec:93:6f:3f:f3:b0:13:44:a4:ec:
6d:4f:42:f9:13:39:bb:2c:63:ae:c9:df:66:08:e2:a9:18:c6:
2a:3d:1f:84:a0:cc:ad:1d:b0:37:05:cd:52:ec:06:1b:c8:99:
4b:db:f7:38:d0:31:31:02:e2:2b:07:48:2c:1e:90:81:bd:48:
d1:96:7b:54:db:4f:35:6c:f7:36:ef:90:35:1d:d0:dd:10:3a:
9e:39:c6:57:9f:0a:4d:19:d4:f0:86:f6:31:40:9e:14:8b:d3:
75:ad:06:48:74:48:cf:f2:5e:f1:4f:70:c7:3e:c5:31:03:70:
68:98:94:a7:cf:81:c3:0e:b5:e3:30:14:ba:8d:b7:b9:07:4f:
3a:9a:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:28:00 2026 by rpki-client