Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: WU5QUNj9AhC/Sw9GDbtAk022fKejE7sJS1/Yi2aLxSI=
Subject key identifier: F9:36:D0:4D:1F:79:D1:76:38:0E:99:29:25:97:F6:D5:31:49:9B:6E
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01A0C669D406FC41D772708318DE03732564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1A6E
Signing time: Tue 22 Sep 2026 00:00:19 +0000
Manifest this update: Tue 22 Sep 2026 00:00:19 +0000
Manifest next update: Wed 23 Sep 2026 00:00:19 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: jc3+1gSFgMaRFXLl7f5h9Ox8OXPpejOhaF4d3nLOYQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:d4:06:fc:41:d7:72:70:83:18:de:03:73:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Sep 22 00:00:19 2026 GMT
Not After : Sep 23 00:00:19 2026 GMT
Subject: CN=f936d04d1f79d176380e99292597f6d531499b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:ac:bf:c2:a9:03:1c:27:48:bc:d8:a9:12:
8b:a6:47:61:99:36:75:6b:00:f2:54:18:24:ec:6c:
0d:f2:a9:9f:3c:47:5e:8e:0b:79:c9:5f:10:62:42:
6a:11:e4:ca:8a:e3:17:ec:a5:c2:b5:5c:fc:b0:ae:
89:4c:c3:ed:ef:37:f9:f9:36:7c:bd:b3:33:da:d1:
31:0a:b3:8e:12:ff:df:92:a4:20:11:e4:ef:ad:20:
3a:23:36:a6:de:82:d8:4c:6f:fd:d3:46:82:a3:5e:
e2:f0:01:89:67:75:ff:05:50:7b:b3:79:28:04:72:
0d:f5:ca:71:ce:ed:a1:03:aa:9d:c5:84:87:21:11:
13:fe:0a:80:2a:04:f9:c0:3f:23:43:56:05:45:53:
e1:51:ca:15:2e:ae:8a:36:d8:f4:99:50:0c:19:29:
1c:73:96:26:11:96:50:fb:0c:f0:ca:3a:0b:5b:d6:
76:2d:0c:6f:2d:cf:01:7d:f8:53:3e:64:f8:d7:09:
84:54:61:93:72:ea:89:48:d1:c2:85:a0:bf:66:5a:
69:ab:8e:8d:08:f3:8b:4d:de:03:20:9a:e0:0c:3e:
67:d3:4b:6c:46:59:c1:2b:84:78:33:df:0a:e8:ae:
00:02:ef:d5:7a:d9:dc:a1:14:1e:93:9c:2c:60:60:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:D0:4D:1F:79:D1:76:38:0E:99:29:25:97:F6:D5:31:49:9B:6E
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:08:44:f3:00:63:e1:17:85:79:d3:ac:74:2c:fa:b1:de:
3a:64:02:80:4d:cc:ee:bb:f7:ba:51:8f:bd:d6:7c:82:72:2c:
63:0c:62:02:41:ae:90:41:b2:d6:c4:4e:2d:b8:62:2d:ff:f7:
fe:34:95:a5:2f:32:e2:9c:a8:5f:e0:30:f5:68:4b:f9:42:64:
3e:7c:fe:77:2b:aa:24:4c:7b:03:b0:7c:b6:ea:ff:e1:0b:83:
1c:e3:93:80:a2:4c:e5:c3:d7:9e:90:8a:a1:65:96:8f:c1:7a:
2b:fb:a6:0e:aa:f6:ae:c8:ff:99:7a:e1:7e:9f:54:10:9c:bb:
ec:8e:15:e0:de:6f:e3:25:aa:d8:33:31:e4:c0:47:a2:60:ec:
b2:78:a7:67:5e:a3:44:3a:4d:a5:30:9a:db:e4:e8:4a:45:5d:
a4:8b:b4:01:05:f3:f9:58:ae:bc:ed:fb:c6:5a:a7:7b:12:c9:
80:62:db:2b:05:be:13:a2:c1:c5:87:b5:b8:9d:83:d0:b0:40:
27:cb:8a:f5:e9:7c:7b:32:a7:d1:a2:95:de:d8:98:6a:c1:cd:
15:f0:3e:82:da:5c:c5:6a:cd:44:21:d8:99:2d:fd:a9:41:17:
af:6a:15:68:34:c4:10:99:58:3b:a4:37:b2:7f:e5:73:ef:d4:
dd:0d:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:55:12 2026 by rpki-client