Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
File: UoMHMHbmc6Mrfda83A-8wW83tqE.mft (raw, json)
Hash identifier: d98IyWUX9uKLxgkIxHVZ68KlZRIMZ1+rNAh1fFZsfvE=
Subject key identifier: DB:D1:6F:4B:AE:CD:9A:6D:A8:DE:E1:93:57:72:78:34:A7:B7:23:91
Authority key identifier: 52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
Certificate issuer: /CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Certificate serial: 01A1DFBA363218D055D95FD4E0A3F508AE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 15:01:25 +0000
Manifest this update: Sun 15 Nov 2026 15:01:25 +0000
Manifest next update: Mon 16 Nov 2026 15:01:25 +0000
Files and hashes: 1: Jl1SU-xkBOcLP1W_NElxZ0fZTis.roa (hash: wF2WX53G3BqzGaZSb7k+E/KvA+vOFQAtSMl5iV+YPMg=)
2: UoMHMHbmc6Mrfda83A-8wW83tqE.crl (hash: xjqqpza9rpj4OOlVsm+v0o8hntd3gREQI9EsPjdyrQ8=)
3: e37qSS4lM51pp_7NmwBBNPNYUQs.roa (hash: ASWof8eb9bNGVZSD2vAjoFRDN+8AOfifbyspUkbdPAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:36:32:18:d0:55:d9:5f:d4:e0:a3:f5:08:ae:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5283073076e673a32b7dd6bcdc0fbcc16f37b6a1
Validity
Not Before: Nov 15 15:01:25 2026 GMT
Not After : Nov 16 15:01:25 2026 GMT
Subject: CN=dbd16f4baecd9a6da8dee19357727834a7b72391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:5d:4b:d4:93:e7:93:0b:34:c5:67:cb:d9:
1e:97:11:4d:f1:d4:ba:74:a3:b6:98:66:8a:90:2b:
d4:00:38:c2:70:19:60:6a:d3:9d:83:f7:ab:89:d6:
31:3f:c1:91:3f:5e:e8:b9:e1:bf:b4:fe:ee:f4:74:
fb:56:25:38:3d:87:40:30:5f:eb:2f:6a:2a:ab:86:
aa:bf:4a:46:c6:52:31:3b:2a:1e:20:71:ed:cf:2b:
6c:e7:72:be:c7:75:2e:e1:5d:7f:5e:50:69:bc:72:
bb:6e:f3:d5:b9:37:8c:e0:33:ce:ea:24:28:91:eb:
48:a7:e8:41:2a:f2:de:7e:2b:92:79:9f:b1:66:ff:
14:38:bf:b7:9b:00:aa:65:54:dc:6b:c9:04:27:ba:
93:18:1e:b5:49:09:02:f1:c7:1a:7c:2b:5c:52:e3:
6c:d2:52:e2:4c:a1:72:09:3f:92:71:23:5c:9d:db:
a4:44:ad:85:15:17:ef:28:81:89:c7:86:20:0d:df:
a9:15:19:4e:7a:9e:ac:ab:d7:3f:2f:f8:ed:ed:58:
5f:24:bf:c9:06:78:f2:b6:bd:b5:8f:51:61:db:c8:
e8:b5:9c:0a:01:1e:89:3e:3c:ab:cb:ca:51:78:d6:
74:10:8f:29:91:63:5e:71:94:d8:fd:7e:27:fa:ac:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D1:6F:4B:AE:CD:9A:6D:A8:DE:E1:93:57:72:78:34:A7:B7:23:91
X509v3 Authority Key Identifier:
keyid:52:83:07:30:76:E6:73:A3:2B:7D:D6:BC:DC:0F:BC:C1:6F:37:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoMHMHbmc6Mrfda83A-8wW83tqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27e527-e02e-4c30-a86b-3c354d618b3a/1/UoMHMHbmc6Mrfda83A-8wW83tqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:de:6a:6d:f2:a1:e0:fd:5f:fb:51:f3:f3:a3:6b:d4:37:2f:
b0:b9:22:71:81:27:c0:e8:30:01:0b:5f:e8:4b:22:7b:61:cf:
7a:f7:20:3a:bc:11:d4:76:87:7c:3b:8b:b8:ef:1e:25:dc:f7:
ea:2c:45:9d:2d:35:03:ba:6a:e5:98:24:53:8f:96:36:24:40:
de:91:b2:c4:42:22:14:2f:ba:59:60:bd:d2:08:3f:81:a4:7a:
c4:b3:ab:fd:17:10:9e:56:8c:48:ed:16:bd:45:d0:36:a1:da:
bc:b9:24:e1:90:08:c6:87:03:11:e9:3a:09:5c:4e:b4:13:77:
24:5a:22:33:4c:c2:db:c4:b1:26:c6:25:4f:37:ef:ac:9a:eb:
41:61:3f:6f:3e:03:08:bc:96:21:c6:55:03:4a:fa:fc:7c:a7:
ad:91:d1:51:1f:0c:84:ab:5c:8b:58:fc:8c:62:4d:64:89:de:
11:02:6c:68:1c:15:e4:6b:58:a1:15:d0:6f:0e:d4:35:3b:e5:
8d:f9:d5:0a:2e:ce:19:44:8a:aa:46:33:05:7c:80:30:09:24:
c1:c2:33:c9:0b:82:63:33:43:5c:76:15:fe:c2:5a:02:04:4a:
ba:ad:9f:18:87:35:35:6a:91:88:4c:6a:36:4e:fe:7f:1e:6a:
6d:7a:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 23:42:57 2026 by rpki-client