Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: o+y0r5Ss3AgJxMRjh73NZ6+RZeDaO72Y8z1ULiUdEm4=
Subject key identifier: 42:2C:94:CC:D1:59:7B:2D:9E:79:B0:C3:61:E0:19:65:25:3B:1B:8F
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 01A13C38725552E5D13AA4BD7AF01254F628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 185D
Signing time: Wed 14 Oct 2026 21:01:34 +0000
Manifest this update: Wed 14 Oct 2026 21:01:34 +0000
Manifest next update: Thu 15 Oct 2026 21:01:34 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: U5HZFAFuHV8sNAUNSxRwnqEohCoShSPPS8KrijHpYkw=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:72:55:52:e5:d1:3a:a4:bd:7a:f0:12:54:f6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Oct 14 21:01:34 2026 GMT
Not After : Oct 15 21:01:34 2026 GMT
Subject: CN=422c94ccd1597b2d9e79b0c361e01965253b1b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:09:66:e2:5c:3d:ab:c5:9b:b1:19:77:a1:
70:04:a5:ea:0f:b2:8d:58:30:1d:db:c7:51:70:ef:
37:48:14:c5:ec:5d:57:2c:8e:c6:78:00:e4:19:51:
01:d0:9a:be:84:aa:8c:c6:e5:87:25:4c:c6:03:3d:
46:3b:59:96:09:e7:fe:9c:16:03:c3:de:f6:9e:11:
18:22:53:f1:dd:00:66:d2:3c:5c:47:44:f5:b1:53:
34:ee:6d:66:d4:d2:89:a2:0d:73:18:bd:14:38:58:
f0:9d:c3:06:0e:f6:7f:b2:16:95:1f:1d:30:50:ce:
89:3b:91:ab:30:d6:94:b0:40:52:fa:26:ed:06:47:
75:74:b9:b7:54:ec:95:a7:15:32:84:2e:39:13:a8:
2b:c2:e0:0f:09:e5:04:8a:9f:6b:75:58:30:dc:a9:
b9:c2:6c:34:98:eb:80:7c:d1:05:95:e3:73:2d:2e:
4a:e5:3b:37:b6:23:b3:ed:4c:51:76:79:38:b6:8a:
f1:af:a2:6b:58:9a:ab:1e:6f:d0:0a:c0:38:20:3f:
46:db:9c:9b:c7:91:8b:76:ee:37:a7:c6:1c:33:ed:
40:a4:33:65:d8:e5:65:c6:de:72:5d:ef:85:e6:3f:
14:30:18:d3:bf:80:bc:e3:98:a1:70:2b:5b:9e:86:
3d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:94:CC:D1:59:7B:2D:9E:79:B0:C3:61:E0:19:65:25:3B:1B:8F
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:cd:b8:44:b5:4f:f3:98:35:9e:2f:d5:05:5d:6d:91:c6:
28:7d:0b:a2:c7:33:87:8a:74:56:98:8e:18:52:aa:61:25:0b:
73:fa:ac:ee:2e:e1:4d:4c:03:ab:9c:ad:22:ff:04:83:7f:e8:
20:04:ce:8e:96:5b:3a:10:ef:ca:cc:c2:4a:84:7b:09:1d:59:
a2:59:11:f2:9f:61:7f:03:e7:f2:29:c7:8b:2a:c2:83:4c:20:
94:8a:a8:a5:e8:11:13:09:ef:53:25:89:7f:4c:dc:2a:74:86:
93:14:a5:02:24:a7:78:d6:ef:07:5c:5d:6c:b7:57:4c:60:62:
90:d5:21:9f:18:96:75:a7:25:db:ce:14:53:bd:11:5a:4c:ce:
7a:45:8f:01:63:7d:44:f4:f1:17:7d:b8:d2:0b:7f:cf:3e:e0:
9f:07:eb:74:6a:f0:ab:04:19:3d:d6:25:e2:58:48:71:9c:ae:
0b:54:a8:97:e6:c7:99:25:9c:a7:b0:9a:36:49:59:0b:26:84:
1c:05:73:c8:b3:75:3d:e4:2b:26:d6:97:8c:97:52:bd:ad:fe:
9a:8d:b2:6e:7d:81:25:39:6c:74:44:cf:bf:73:22:a2:e6:1e:
de:70:d8:d8:fb:9c:6e:9a:c4:2f:55:a4:99:0e:e7:f1:35:42:
17:c0:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:25:15 2026 by rpki-client