Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: cZx0u7l+tDVUoIlQXHMvr1Xek68b7UCNG72cbW8CoHE=
Subject key identifier: 72:75:BF:C1:EE:C6:D8:1F:B4:45:46:63:C4:7C:E7:20:3E:9D:75:B3
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 01A12F58220691EA1BE3B2B70373CE9EFFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 0645
Signing time: Mon 12 Oct 2026 09:01:07 +0000
Manifest this update: Mon 12 Oct 2026 09:01:07 +0000
Manifest next update: Tue 13 Oct 2026 09:01:07 +0000
Files and hashes: 1: jjZi6uzHmPDA5sRPcyRihz0sVdA.roa (hash: LBEeu+9aJvCSWGFd1osnMlApP4nQxT6laZRWkBYIfjo=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: hQ8Qz9uIrrArt+zB8O8VV0s4KbwInt3Hk2KPjvSFShg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:58:22:06:91:ea:1b:e3:b2:b7:03:73:ce:9e:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Oct 12 09:01:07 2026 GMT
Not After : Oct 13 09:01:07 2026 GMT
Subject: CN=7275bfc1eec6d81fb4454663c47ce7203e9d75b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:d0:16:cb:66:b3:0f:cd:7a:74:ab:ec:54:
4e:ce:fc:9a:f2:99:fb:e7:8b:fc:de:f6:5f:b9:cc:
83:58:aa:0a:f2:8b:0a:4a:af:0a:72:ed:30:e6:01:
aa:61:02:a2:57:5c:0c:02:52:eb:95:01:dc:23:91:
5f:64:a6:0b:72:cf:c4:90:24:eb:5b:65:f8:30:58:
b6:c2:88:b9:34:64:6a:b7:4c:91:2f:b2:77:52:e4:
7b:e9:82:ed:77:72:97:a1:6f:8f:17:82:e8:2a:45:
ed:5b:2d:c6:6b:e6:a1:2b:a2:8d:53:0a:ef:43:c2:
f2:88:8e:db:ba:ae:4a:31:2a:fc:0b:cf:fc:25:ff:
76:7e:f1:27:b2:2e:ba:11:c9:98:e0:4c:db:59:24:
61:ed:74:0f:db:0a:ab:bc:9f:89:81:64:b9:17:be:
f4:9a:52:88:4d:c5:fc:69:87:e1:b7:f1:47:be:a8:
bb:f2:a4:43:ae:04:7f:b9:84:96:8d:2d:61:33:55:
a6:fc:ec:2b:64:c3:fc:9c:0c:05:0a:23:3c:ab:e4:
89:32:5f:f9:7e:de:2c:6a:23:ff:66:cd:a1:75:a6:
90:fb:5a:e0:03:62:2a:1f:75:25:f7:7e:0b:24:58:
24:77:1d:da:77:43:20:0a:ce:c7:8c:f9:64:d7:d3:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:BF:C1:EE:C6:D8:1F:B4:45:46:63:C4:7C:E7:20:3E:9D:75:B3
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b0:3f:5f:cd:cf:9a:aa:b8:b9:27:95:1b:22:04:e8:3c:80:
c3:47:cc:dc:8c:7f:4d:92:1a:b4:2b:77:b6:ce:b3:6b:84:ef:
70:8c:e1:76:e5:7c:df:6b:8e:fb:2d:fa:8a:5a:fc:04:f6:b5:
36:be:9e:af:92:c2:62:48:15:eb:5a:6b:05:c7:70:12:02:9c:
7f:c1:a5:69:42:21:3a:6b:37:f8:dc:68:71:35:28:48:37:0e:
b8:49:b6:84:4e:5c:53:f6:8f:36:f6:4c:90:75:c6:c0:8f:66:
ad:a7:5a:32:19:fc:7f:f5:9b:c7:cb:9a:1f:33:23:48:2c:d9:
b3:77:36:c5:d5:6a:1f:48:81:a3:07:91:99:26:65:a3:76:57:
59:42:88:b1:1d:9e:d0:6b:e2:f6:04:36:39:a2:8b:4c:e7:d6:
11:b8:ca:c3:d9:0e:64:6e:48:11:07:ea:c0:19:7c:f9:bc:de:
77:cb:0f:8b:6e:9e:9e:da:ae:1b:a9:86:c4:0e:22:be:cd:be:
ba:06:69:a5:4b:fb:c4:7e:29:d8:d8:7e:85:c7:4d:db:6b:5e:
e4:14:9e:66:74:f0:0b:fe:70:1b:f2:04:cb:d0:b1:65:71:34:
8c:12:71:0e:f4:7b:d7:c4:cd:1e:3f:46:80:6c:74:f5:59:78:
e7:df:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:58:36 2026 by rpki-client