Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: aWhYSf2gUuzoM8fsswiYVP6kaDNH2tM8w2GCVKpvGbU=
Subject key identifier: 02:87:6B:49:A2:5C:8C:A1:7E:71:E2:70:B5:D7:E6:63:E5:EB:23:B9
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01A0C28D0B2CABFF9BA3F0E39BA0D48A2125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1A6C
Signing time: Mon 21 Sep 2026 06:00:18 +0000
Manifest this update: Mon 21 Sep 2026 06:00:18 +0000
Manifest next update: Tue 22 Sep 2026 06:00:18 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: 5svfUJrzojdVEIszTTY41YE4lDN790DSgemKHmDNzOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:0b:2c:ab:ff:9b:a3:f0:e3:9b:a0:d4:8a:21:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Sep 21 06:00:18 2026 GMT
Not After : Sep 22 06:00:18 2026 GMT
Subject: CN=02876b49a25c8ca17e71e270b5d7e663e5eb23b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:ed:4b:d5:68:01:60:54:b0:4d:79:fb:b2:
2b:51:f9:2e:d7:e7:23:81:af:a9:49:86:92:05:86:
a9:b0:c1:1b:c3:f5:cc:ff:32:dc:b1:22:e2:00:7c:
79:c7:68:c9:21:8a:9a:c4:df:8e:72:22:1e:2a:9a:
b6:69:6c:d2:a7:76:f0:ca:ee:3f:55:c4:4e:d4:cc:
1a:3f:0e:ac:fc:8d:53:23:e2:9a:5a:3b:cc:6a:73:
17:7f:f4:9b:35:33:45:ad:d5:e4:d7:0e:a4:55:ad:
da:65:7a:dc:d3:a4:96:d1:82:c5:c1:e6:00:d1:f5:
b3:74:36:1f:33:37:1a:20:38:96:33:84:6f:6b:b2:
f0:cb:41:1e:37:39:4d:8d:2c:19:8c:0a:43:37:9a:
f8:76:6a:23:3a:50:34:ac:c3:c6:28:f8:86:11:19:
e0:6d:9f:79:4b:6d:32:b6:60:0c:b5:b0:67:ee:74:
11:4a:79:e9:7b:97:5d:56:33:2e:6b:07:12:f4:20:
58:9f:92:ef:eb:87:0e:8e:6c:6b:68:70:f5:31:4b:
d7:24:dd:46:31:32:7a:2d:05:ae:2b:26:2b:c2:40:
a4:a9:bb:49:41:56:3b:64:6b:1c:f1:fc:d3:f4:71:
70:4f:02:8b:b3:12:28:6b:45:63:6b:06:3c:bd:e1:
be:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:87:6B:49:A2:5C:8C:A1:7E:71:E2:70:B5:D7:E6:63:E5:EB:23:B9
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:84:1f:1f:77:5e:a3:9f:9e:a3:52:0a:00:02:ad:8d:20:bd:
b2:e1:11:dd:b4:56:53:16:34:78:21:e8:7a:7c:1a:13:e7:b4:
1b:f6:1e:ce:29:86:00:e3:cb:04:31:bb:36:b7:c8:70:19:88:
5b:aa:8c:89:ca:bf:95:ba:a4:22:a2:42:23:35:a2:69:ba:b9:
85:00:73:ec:45:cf:93:07:e6:c7:e8:0f:27:78:00:48:d7:cd:
2c:e0:03:9b:00:ae:25:db:1f:18:a0:7d:0e:dc:cf:3b:5f:34:
ac:a4:a2:91:47:3c:49:a2:b7:f7:68:45:49:66:65:ee:ff:08:
a7:5c:a2:84:9e:8b:3e:f3:83:b3:8c:f3:00:73:dc:70:c1:7a:
38:44:0f:87:84:12:95:51:92:fe:22:d0:5d:02:45:72:0d:28:
7f:bc:e8:d9:6b:c6:34:6a:49:ff:b5:41:05:51:7c:33:c1:23:
18:18:81:ea:72:0e:a8:f2:4c:47:4a:15:27:d3:9b:45:a4:7e:
95:59:b7:c7:02:16:22:37:31:19:a9:f0:d1:83:74:ab:eb:8d:
75:a0:c4:43:56:c3:e4:8a:4a:54:21:76:e9:c4:c3:30:ad:54:
a8:26:49:e5:8d:f8:d4:7e:0a:5b:8b:6f:36:30:dd:c0:8f:95:
56:28:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:26:57 2026 by rpki-client