Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
File: uWCxR0bFh1JErjtpQWLsbYxjJV4.mft (raw, json)
Hash identifier: joAvJ7be2XhH96toObYfVoFkknt+F+zRQsxB6N+9g54=
Subject key identifier: EC:65:33:56:7E:F3:13:6C:74:49:D7:B7:AC:2D:13:6C:3A:87:C8:5C
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 01A0D6F0334904D0216F0A0ACA9CDC360A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 05:01:00 +0000
Manifest this update: Fri 25 Sep 2026 05:01:00 +0000
Manifest next update: Sat 26 Sep 2026 05:01:00 +0000
Files and hashes: 1: c8CsVa9fXYgke6S-ngSoGNntydo.roa (hash: Fwv89IU2a8LpbILl9PnyWFIyy2FdK+fO/FwW2CCp7u4=)
2: uWCxR0bFh1JErjtpQWLsbYxjJV4.crl (hash: SN4Pcl9U34PP5u0e8EysqoHh3rd4IWNm9QRz9YIOqxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:33:49:04:d0:21:6f:0a:0a:ca:9c:dc:36:0a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Sep 25 05:01:00 2026 GMT
Not After : Sep 26 05:01:00 2026 GMT
Subject: CN=ec6533567ef3136c7449d7b7ac2d136c3a87c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:62:8a:39:10:5e:e7:97:5b:c3:80:26:15:18:
86:a7:4f:70:22:e0:08:d3:1b:15:06:0f:90:20:24:
f0:9c:20:c4:da:1f:e4:d9:81:36:29:13:63:43:79:
2e:14:4f:f6:8f:22:1b:b6:4d:e3:db:17:ce:d1:55:
e1:b3:60:96:c4:51:69:3b:69:4d:de:2e:2a:f7:33:
d3:a7:25:26:3d:00:d1:fa:68:8d:d5:40:7e:58:23:
11:e3:b0:65:68:e4:1d:04:d1:a4:4c:1e:18:58:eb:
29:29:2b:e2:c2:e7:05:c6:fe:d5:fa:6c:7a:af:de:
81:ca:5a:8c:89:ad:e6:ca:48:28:c5:77:47:7e:3d:
31:11:e8:62:32:3b:22:bf:66:3d:e0:31:1c:67:c0:
a4:81:f9:77:f9:cb:14:d5:3d:b1:7d:e4:8a:68:eb:
7c:a3:c9:33:01:bc:51:46:23:1c:5f:12:cb:78:8c:
c2:71:69:54:b4:8c:c6:31:73:e5:ea:de:0b:55:47:
82:3a:ce:e3:3d:fd:d9:d6:38:5b:a4:12:9a:85:98:
d5:d9:b0:8a:6e:7c:de:9a:2a:25:f9:be:a3:bc:fb:
18:a4:fb:21:fe:e0:bc:2c:cb:7c:b9:a7:8a:4e:04:
96:48:9a:e2:f3:12:f3:b4:cb:b8:4e:d8:0a:b2:83:
92:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:33:56:7E:F3:13:6C:74:49:D7:B7:AC:2D:13:6C:3A:87:C8:5C
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:5f:82:de:ba:77:49:f4:5a:b5:cd:ed:ea:ed:f6:6c:40:05:
d4:69:ae:65:db:80:40:50:14:0e:27:66:97:97:4b:55:4a:bb:
34:f4:6e:c8:1f:00:77:91:4a:92:86:77:36:5b:19:6b:9f:d9:
4a:88:de:79:2c:36:e0:e3:c9:61:a9:96:ba:39:37:b4:c2:a5:
f8:9d:23:5a:65:32:ba:9a:4c:c9:8b:96:e7:bf:66:5a:db:de:
f4:05:f5:03:8a:38:36:aa:08:69:40:03:cf:c9:9b:1d:ca:43:
d2:2b:50:c9:ac:6c:79:58:5f:8b:c2:2f:2a:8a:c5:3c:70:47:
bf:4f:f8:53:f8:b4:92:1c:c7:b9:cf:b4:07:91:f4:aa:ec:3b:
c5:52:71:15:00:49:47:3d:b1:d4:22:d3:90:23:12:92:05:bd:
90:49:53:ef:45:cb:c2:7b:74:c0:a6:5f:61:72:6b:d5:43:18:
fa:0f:dc:8e:3d:6f:44:d8:a6:59:32:2d:95:76:fd:9d:8a:38:
66:0f:14:6d:aa:0f:c3:3c:14:d5:d9:5d:e6:ae:78:3e:58:72:
64:e2:50:3b:84:e2:0d:7a:8d:a9:ce:e0:13:c1:bb:12:3e:af:
a6:3d:8e:35:e0:ce:d6:b7:5f:ab:df:3e:66:e8:fb:e1:b7:58:
79:7a:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:55:45 2026 by rpki-client