Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: RdOlfOrNc2rKBUBP9gv9mKmIDDqxBkGGqWXl6All3+o=
Subject key identifier: 5C:95:2A:07:CE:31:3B:BC:AB:69:95:79:BA:25:A6:73:85:33:A2:16
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 01A0E0CFBBE6C1A5C3F17B855330612E750B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 10A5
Signing time: Sun 27 Sep 2026 03:01:45 +0000
Manifest this update: Sun 27 Sep 2026 03:01:45 +0000
Manifest next update: Mon 28 Sep 2026 03:01:45 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: E2IZMaEAMI0GGmB9dkz7BQ9yx/HZej+nxlXN/5+he5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:bb:e6:c1:a5:c3:f1:7b:85:53:30:61:2e:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Sep 27 03:01:45 2026 GMT
Not After : Sep 28 03:01:45 2026 GMT
Subject: CN=5c952a07ce313bbcab699579ba25a6738533a216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0f:94:b9:bb:97:d7:8d:33:1b:4a:d5:51:e0:
31:b0:30:85:34:2b:75:69:f6:dd:6b:00:d8:ba:d2:
cd:1d:02:56:32:ef:f2:fb:9e:aa:0a:2d:34:a3:47:
69:60:08:3a:d2:fe:aa:4d:bd:32:20:44:20:71:c2:
48:1e:6b:7e:b3:ef:fb:21:0e:2a:1e:a6:83:3d:f2:
55:f7:22:b7:57:19:b4:1d:19:26:04:88:b4:8d:f7:
8a:fa:54:b2:88:c6:50:12:2e:25:56:88:ea:e5:30:
62:b1:6c:2e:ce:7e:a8:1c:4a:e0:e9:ab:c2:52:ed:
4d:b4:b6:29:7e:9a:92:dc:b6:9f:6e:81:08:7c:b3:
ef:17:c3:24:36:e9:58:a7:3e:c0:4f:eb:49:05:83:
6b:97:73:5c:fb:f7:72:5a:32:77:8d:ba:b5:da:9e:
01:cb:d6:b0:57:50:8f:e5:8c:75:58:36:5b:f7:fc:
bf:f5:91:3b:df:b6:fa:c4:ce:a1:07:f2:bf:1c:b6:
39:24:84:a6:d1:4c:67:13:6a:c8:8e:87:f8:29:cd:
a3:52:f8:b1:d6:f4:35:8c:31:ce:74:06:de:e7:01:
cb:77:99:b8:19:ae:c0:19:e0:4d:b4:30:ec:72:07:
90:c1:cf:dc:cb:3e:07:32:e0:cc:c5:62:c8:86:ed:
b7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:95:2A:07:CE:31:3B:BC:AB:69:95:79:BA:25:A6:73:85:33:A2:16
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:7c:bd:71:e3:33:84:a8:71:06:ce:75:96:47:f5:e5:b2:23:
c7:84:1d:97:83:b9:06:2e:ba:be:2e:70:66:3a:40:d4:e6:c4:
7d:16:b2:c2:af:6e:65:b2:7e:eb:90:f4:65:8b:d8:f9:ca:1a:
f4:75:b5:60:c3:49:c6:1e:05:07:20:2f:00:72:77:1e:6c:93:
f7:87:93:19:0c:5e:bb:00:fa:9b:da:c3:0b:7e:81:a8:f1:e8:
1d:99:1b:f2:62:d4:c2:d3:ef:09:ed:ca:33:b3:ed:88:39:e8:
90:c1:eb:96:90:cb:39:df:23:07:6a:e3:67:15:18:17:18:7f:
92:41:b0:12:7b:7f:9f:97:2d:31:ff:66:fc:29:08:f5:ee:40:
49:04:09:a1:69:97:70:55:48:79:27:43:97:6b:99:0b:4c:bf:
bd:20:e1:3f:91:93:ba:0f:e3:f3:9d:cb:a2:fa:29:4d:b8:8e:
c1:5c:12:1d:28:1f:5b:77:98:17:7a:24:2d:0f:d3:95:ad:f9:
c7:1a:ea:52:02:4c:d8:2a:93:50:99:ef:4a:eb:85:fc:6a:11:
06:5b:c1:a2:84:93:bb:ed:55:aa:db:39:5f:c8:70:dd:84:d5:
6f:a5:d2:8b:d9:95:24:09:c1:2b:b2:73:21:72:fb:34:50:b1:
c9:e6:32:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:14 2026 by rpki-client