
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
File: _uFCR8uC-eVrfl_3tBaq8evFByg.mft (raw, json)
Hash identifier: Jlm8rpy1W1E8MRrXoK9HOJodhdH1wqhy6BIrKHQE9Rk=
Subject key identifier: 96:60:12:11:80:0D:AB:98:C7:C8:1B:7E:C2:CC:8B:3E:3B:6C:78:1C
Authority key identifier: FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
Certificate issuer: /CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Certificate serial: 01A113AAD3A698E76D20CD442E0BA6C71E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:02:04 +0000
Manifest this update: Wed 07 Oct 2026 00:02:04 +0000
Manifest next update: Thu 08 Oct 2026 00:02:04 +0000
Files and hashes: 1: DmwwyIeryxnXouje06GcnKLjOck.roa (hash: 77qcCPWlKYbSecG3Tkcuy3v3wioir535GQOABIXvPKc=)
2: _uFCR8uC-eVrfl_3tBaq8evFByg.crl (hash: koMWX0bMRLGRXf4FOJGY5TOW89EgpixhJZYufpqjDCY=)
3: nmYhqDzscOD4WXJul6VqdubZXuE.roa (hash: NXKrupN7UtGQb1J9RMrCPRHescON/MpPuAeIS3YOdGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:d3:a6:98:e7:6d:20:cd:44:2e:0b:a6:c7:1e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee14247cb82f9e56b7e5ff7b416aaf1ebc50728
Validity
Not Before: Oct 7 00:02:04 2026 GMT
Not After : Oct 8 00:02:04 2026 GMT
Subject: CN=96601211800dab98c7c81b7ec2cc8b3e3b6c781c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9d:b5:30:9a:43:73:e7:aa:a9:3b:ae:7a:d2:
84:13:d5:c4:eb:b6:24:6e:0d:3a:33:fb:4a:69:d0:
6f:cd:c1:6a:8f:6f:4d:00:a2:a4:9f:a0:dc:3d:09:
14:c1:ef:9a:80:97:3b:d5:04:e4:de:3b:ad:cc:3e:
9a:a2:bc:62:74:b7:c0:91:68:e2:f4:33:13:b7:76:
d9:9b:f9:aa:7c:02:d9:a6:c5:93:f1:cc:e8:07:7d:
90:ea:dc:7e:f6:94:b1:66:d7:2b:10:16:4c:3e:c4:
f2:c1:2e:fb:0f:67:7f:87:5e:87:d3:aa:55:1b:9b:
88:2e:75:5d:0d:f7:75:72:c1:f8:60:48:f2:fa:59:
f0:84:14:89:16:5f:e1:2f:48:62:96:e9:d7:e3:61:
2b:c5:7a:c8:64:26:b7:f2:a1:24:03:ef:63:f6:60:
92:dd:45:95:17:66:17:7a:83:0b:2c:aa:f2:56:0f:
1b:a5:87:d1:56:65:eb:ea:93:08:75:50:dc:ba:68:
d3:6f:a5:2a:e2:b1:8b:7f:4d:ef:4f:14:83:3d:39:
7b:9e:0b:bb:53:f9:18:a0:99:ff:68:5c:9f:aa:2a:
09:05:c8:ae:57:d5:eb:46:a9:62:ff:ed:6c:cb:ca:
6c:45:41:b6:ba:66:a8:75:8e:f6:86:2e:fd:c5:a1:
82:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:12:11:80:0D:AB:98:C7:C8:1B:7E:C2:CC:8B:3E:3B:6C:78:1C
X509v3 Authority Key Identifier:
keyid:FE:E1:42:47:CB:82:F9:E5:6B:7E:5F:F7:B4:16:AA:F1:EB:C5:07:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uFCR8uC-eVrfl_3tBaq8evFByg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/_uFCR8uC-eVrfl_3tBaq8evFByg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:7a:aa:09:27:f4:22:9f:ce:53:a6:04:dc:77:a6:2e:76:
d0:20:58:ce:cf:7a:41:0a:11:7c:a9:f1:7a:4c:92:37:8e:b8:
c0:f3:e7:87:af:5e:e9:5e:2e:92:35:ba:e7:05:f2:2a:f4:8f:
0b:59:72:c7:d5:f9:96:43:90:44:e8:6b:06:02:cf:fb:b0:6c:
61:fe:d1:8d:0a:fd:f2:95:87:90:67:ac:77:7d:28:d6:02:ee:
2c:cf:9a:c6:60:47:26:a4:a9:fb:a0:8b:50:eb:c7:74:a2:3e:
2a:e0:cb:62:ba:20:6f:8e:85:2d:50:c8:0b:26:f3:4f:3c:3f:
45:bc:a3:93:6f:1f:3a:fc:3e:8d:1e:18:23:b0:80:20:4d:8a:
a6:0b:53:b8:24:62:ce:73:f1:ba:39:52:08:ce:86:8e:76:f4:
9f:93:e2:e5:d6:8f:c9:95:46:0c:0c:eb:95:6d:8b:0a:02:75:
da:e8:c8:bb:e0:e9:ca:4d:b8:0f:52:23:b9:b6:7d:f5:a6:fa:
95:86:0c:e3:3b:ff:db:b9:5a:3b:48:5d:f6:f7:13:2e:26:3d:
a4:ee:ee:4e:ea:92:2a:b8:f8:28:6f:5a:29:98:93:62:7e:9c:
ea:4a:e5:9a:5d:ce:64:0e:be:f1:63:20:0f:37:30:bf:a6:e6:
ea:98:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:26:27 2026 by rpki-client