Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
File: UxUwA3N9ePci25oo4iBD412Nhx4.mft (raw, json)
Hash identifier: 0ZAD3CELUjzGL6oc7jEXcvsoOKom7t9aXbEHdMiSL2M=
Subject key identifier: F5:5B:7D:DA:D9:52:AE:65:36:B5:9B:A3:A5:2C:CB:45:F0:1F:DA:58
Authority key identifier: 53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
Certificate issuer: /CN=53153003737d78f722db9a28e22043e35d8d871e
Certificate serial: 01A12578F8182E18DF4D7D10A051600D5A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 11:00:46 +0000
Manifest this update: Sat 10 Oct 2026 11:00:46 +0000
Manifest next update: Sun 11 Oct 2026 11:00:46 +0000
Files and hashes: 1: 5I0HBHU6DFGjisjl0_HXu6MzkBc.roa (hash: J1zWeGNMh7+0ujc6n39n2VNnjxJR10bleZ2BiJvLPD8=)
2: UxUwA3N9ePci25oo4iBD412Nhx4.crl (hash: huYGJk1SaQTnbGGrwZzne8lYkg1xEVVjNsiIvG2/U9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:78:f8:18:2e:18:df:4d:7d:10:a0:51:60:0d:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53153003737d78f722db9a28e22043e35d8d871e
Validity
Not Before: Oct 10 11:00:46 2026 GMT
Not After : Oct 11 11:00:46 2026 GMT
Subject: CN=f55b7ddad952ae6536b59ba3a52ccb45f01fda58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:8d:f5:42:d0:83:5c:bd:55:f6:9f:c2:3e:
69:1e:4d:70:cd:22:8c:4c:e2:48:b9:fb:dc:89:26:
34:21:ea:48:39:8d:70:82:d3:b4:96:5d:97:7a:94:
d4:13:01:63:04:01:5f:96:dc:3a:a1:40:2a:32:32:
5e:6e:7b:b5:d6:47:1b:cf:73:87:d6:ed:bd:05:57:
0d:ee:12:72:5e:c2:10:dd:fc:45:6f:f6:bd:3f:be:
b9:51:95:8f:70:72:0b:a4:f0:1c:4c:ed:9b:e1:c5:
87:43:c3:96:cb:35:d1:b6:9a:c2:38:6c:8d:d1:28:
c8:86:cf:d6:46:a5:82:e2:5c:20:41:f2:d8:84:73:
45:5d:8b:e4:34:d0:a7:e0:98:c5:cb:75:5d:f4:d6:
61:d1:b0:1b:ab:5b:92:c8:1f:e3:7d:6f:66:dc:ba:
58:58:9f:35:21:55:31:d9:93:f0:1f:dc:19:04:3f:
d5:b6:b9:b6:9d:56:a8:7c:8a:cf:25:a3:99:9d:9c:
19:0d:21:f3:a5:f2:5d:3a:c8:a6:0e:fb:a9:80:07:
e9:2a:b9:81:ff:80:36:61:5e:8f:9c:c1:15:0b:13:
e4:a5:13:89:a6:77:b9:07:22:e9:0d:45:a7:3f:8e:
31:d3:cf:94:5a:93:c3:b7:9c:90:39:7b:c7:d5:4e:
7f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:7D:DA:D9:52:AE:65:36:B5:9B:A3:A5:2C:CB:45:F0:1F:DA:58
X509v3 Authority Key Identifier:
keyid:53:15:30:03:73:7D:78:F7:22:DB:9A:28:E2:20:43:E3:5D:8D:87:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxUwA3N9ePci25oo4iBD412Nhx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8f7148-236d-4088-89e6-665995c62838/1/UxUwA3N9ePci25oo4iBD412Nhx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:68:e8:c3:ba:96:7c:7e:59:f7:34:73:e9:7e:18:bd:8e:dc:
20:09:78:60:4f:17:cc:ed:20:93:2c:11:98:9d:4e:42:8f:74:
ad:a5:70:85:30:bb:93:3e:97:e3:eb:8e:3d:67:73:91:66:0e:
30:14:b4:32:bc:c0:91:df:09:9e:7f:d0:c1:6b:37:10:28:0d:
d2:d2:50:35:25:cc:87:48:ca:97:3b:e0:9d:c3:45:75:0a:a8:
67:f0:2c:0a:e8:85:36:cc:31:df:99:0e:5a:95:79:90:5b:82:
d7:d1:5e:55:73:8e:fd:ce:65:4a:9d:2d:c4:63:9a:62:d4:62:
95:ff:2c:1f:10:ef:70:57:30:f4:6d:35:e5:69:12:27:ad:5b:
40:44:93:79:01:55:31:3c:bd:31:32:bb:a4:4b:ca:30:62:13:
ce:83:06:b6:0b:20:cd:f8:e1:15:2d:19:73:db:84:4e:d1:ae:
0f:a1:b8:37:17:07:eb:13:22:01:48:56:fa:c2:5d:df:9c:b5:
e4:78:3f:cb:92:e8:c7:dc:63:20:17:ab:5c:5b:ff:5b:27:ea:
77:d9:1b:0a:7c:1b:f3:67:65:2b:da:34:e0:e4:6b:c5:a7:00:
f0:52:68:b9:9b:91:0b:98:39:03:5c:f1:18:d6:5d:a8:c4:78:
8a:4f:12:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaElePgYLhjfTX0QoFFgDVpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTUzMDAzNzM3ZDc4ZjcyMmRiOWEyOGUyMjA0M2UzNWQ4
ZDg3MWUwHhcNMjYxMDEwMTEwMDQ2WhcNMjYxMDExMTEwMDQ2WjAzMTEwLwYDVQQD
EyhmNTViN2RkYWQ5NTJhZTY1MzZiNTliYTNhNTJjY2I0NWYwMWZkYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspGN9ULQg1y9Vfafwj5pHk1wzSKM
TOJIufvciSY0IepIOY1wgtO0ll2XepTUEwFjBAFfltw6oUAqMjJebnu11kcbz3OH
1u29BVcN7hJyXsIQ3fxFb/a9P765UZWPcHILpPAcTO2b4cWHQ8OWyzXRtprCOGyN
0SjIhs/WRqWC4lwgQfLYhHNFXYvkNNCn4JjFy3Vd9NZh0bAbq1uSyB/jfW9m3LpY
WJ81IVUx2ZPwH9wZBD/Vtrm2nVaofIrPJaOZnZwZDSHzpfJdOsimDvupgAfpKrmB
/4A2YV6PnMEVCxPkpROJpne5ByLpDUWnP44x08+UWpPDt5yQOXvH1U5/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVbfdrZUq5lNrWbo6Usy0XwH9pYMB8GA1UdIwQY
MBaAFFMVMANzfXj3ItuaKOIgQ+NdjYceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYt
NjY1OTk1YzYyODM4LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84ZjcxNDgtMjM2ZC00MDg4LTg5ZTYtNjY1OTk1YzYyODM4
LzEvVXhVd0EzTjllUGNpMjVvbzRpQkQ0MTJOaHg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmjow7qW
fH5Z9zRz6X4YvY7cIAl4YE8XzO0gkywRmJ1OQo90raVwhTC7kz6X4+uOPWdzkWYO
MBS0MrzAkd8Jnn/QwWs3ECgN0tJQNSXMh0jKlzvgncNFdQqoZ/AsCuiFNswx35kO
WpV5kFuC19FeVXOO/c5lSp0txGOaYtRilf8sHxDvcFcw9G015WkSJ61bQESTeQFV
MTy9MTK7pEvKMGITzoMGtgsgzfjhFS0Zc9uETtGuD6G4NxcH6xMiAUhW+sJd35y1
5Hg/y5Lox9xjIBerXFv/Wyfqd9kbCnwb82dlK9o04ORrxacA8FJouZuRC5g5A1zx
GNZdqMR4ik8SLA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:54:37 2026 by rpki-client