Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
File: UzahBs7N66kuC4Dl6aXHibp0xis.mft (raw, json)
Hash identifier: nBVcZcKQXiztsU0UUYbrufDFjyztsTkDv9m6vmV5oXQ=
Subject key identifier: DE:26:B4:ED:99:3B:95:55:57:CF:9C:E9:C5:5F:4C:36:25:21:EF:09
Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Certificate serial: 01A12FC5A417EB58A9726AF0FF40766F1ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
Manifest number: 0F47
Signing time: Mon 12 Oct 2026 11:00:44 +0000
Manifest this update: Mon 12 Oct 2026 11:00:44 +0000
Manifest next update: Tue 13 Oct 2026 11:00:44 +0000
Files and hashes: 1: 1-rvXWbfutRyQsFLB2O2HcSydvn8.roa (hash: G/bEqZr33OdbdPx/abXyN5kc0kY5EzztDY6k+nCMKOc=)
2: 3-EeXmcZRUpj5DL_Om7bylZsefk.roa (hash: kfreAir/SgzDeq1U4ZKMC+PhHkagl1wiR7E5yuELkYE=)
3: FW4uCaBEevcQCVC9KduuJAdmVkk.roa (hash: hi3CRENNqBM7ERn9MrenvqFZvgbgfilYx3/QP3Xqq4k=)
4: KQmQrJ1jEiHHjz1S_0Yk4OXG9xA.roa (hash: tpY9R1aFnUdMqsnHp8rSZAPwxdzHPsIGg6V1ZMmMnOQ=)
5: LLtX3Bw8gzc5rIoJ6gGIoEGZhvk.roa (hash: 8ZMUJCkeXZDA3JqlPtb/Z7fXVQiFb14roMzYlX1mZ98=)
6: UzahBs7N66kuC4Dl6aXHibp0xis.crl (hash: 1HEJYjzxqFJam+mEUsGI2DCtBG0D7VAEJwl740Ktmq0=)
7: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (hash: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg=)
8: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (hash: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c5:a4:17:eb:58:a9:72:6a:f0:ff:40:76:6f:1e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b
Validity
Not Before: Oct 12 11:00:44 2026 GMT
Not After : Oct 13 11:00:44 2026 GMT
Subject: CN=de26b4ed993b955557cf9ce9c55f4c362521ef09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:8a:d0:4e:cb:75:42:45:60:3c:10:b2:6e:
69:0c:53:2d:de:e1:9b:a0:66:29:e2:06:6f:5f:11:
df:e5:f0:82:0d:96:c2:ec:b2:ac:f4:da:bd:47:76:
7c:12:87:02:0f:36:c1:d2:1b:32:3c:13:d2:e1:61:
e8:32:b6:05:be:5c:cb:40:43:14:c5:7f:77:86:1e:
c7:6b:2e:99:85:06:ce:b9:6f:d2:01:8b:e9:9c:32:
e9:6d:67:a6:39:cd:82:15:cf:71:1d:83:cf:63:71:
78:34:91:91:44:13:17:b3:20:e7:cd:47:28:87:40:
3b:ec:b4:5e:5a:a0:24:d3:d8:49:5d:fa:f3:27:c4:
2c:b1:38:aa:e4:95:3b:cb:fb:f9:f6:da:25:34:2d:
d4:18:dd:8b:25:99:90:a0:6a:93:33:7c:93:91:92:
74:93:57:42:d8:57:dc:da:78:d7:93:f8:c9:9c:34:
9d:ea:64:d3:79:c5:7a:30:4d:81:b5:ff:13:4a:2b:
69:c7:e2:f8:4c:20:32:77:40:10:fa:f6:63:c5:cd:
78:5e:2e:ca:a8:8e:db:91:2e:7d:34:9f:a7:ef:ed:
ae:6c:92:f8:c1:0a:88:23:89:c1:c7:7d:8f:70:84:
cc:e1:f3:4a:2d:00:87:d0:a0:9c:96:a2:3e:00:ff:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:B4:ED:99:3B:95:55:57:CF:9C:E9:C5:5F:4C:36:25:21:EF:09
X509v3 Authority Key Identifier:
keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a3:09:7e:f6:cf:93:77:22:74:5f:aa:9d:0f:d3:b9:40:e3:
bf:1b:cd:8e:7b:e7:d2:ae:b2:92:f9:73:63:e3:03:4e:77:d7:
30:b8:dc:b5:67:a3:ea:0d:ac:93:5d:0e:94:e6:f3:fc:9b:ad:
e0:6a:e3:b5:47:72:e7:ff:16:1a:77:ca:ba:89:a9:43:94:8a:
74:7a:38:da:e2:fd:db:9b:e8:11:72:a1:43:8f:6a:33:f4:c1:
55:7b:68:78:06:9b:ce:78:e8:ac:6a:b3:f4:5b:48:30:ef:27:
2b:95:d0:42:9d:a2:07:67:4b:99:5a:81:ed:63:4e:fe:b3:53:
72:06:04:f9:a4:2b:03:80:4f:97:0b:e7:f4:ce:bc:a5:f4:d7:
ce:37:0d:69:8c:68:78:54:17:07:1d:bf:f4:7e:5c:81:99:a0:
1d:c0:0c:1d:8b:d5:fa:dc:da:25:c5:b6:2c:4f:7d:13:44:f3:
6a:23:f1:a0:8e:b4:f0:fc:73:a5:b1:b9:f9:52:80:98:2c:d9:
1a:ae:d8:59:bb:82:5e:a7:a2:59:75:2a:fa:46:88:ab:20:7f:
08:e6:e2:92:43:0b:22:18:a4:f2:8c:00:2a:0e:f9:a8:84:88:
82:2f:97:ac:2f:fa:75:a7:c8:57:30:c8:d5:0b:f4:8b:36:66:
dc:a1:4d:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvxaQX61ipcmrw/0B2bx7RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3
NGM2MmIwHhcNMjYxMDEyMTEwMDQ0WhcNMjYxMDEzMTEwMDQ0WjAzMTEwLwYDVQQD
EyhkZTI2YjRlZDk5M2I5NTU1NTdjZjljZTljNTVmNGMzNjI1MjFlZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjneK0E7LdUJFYDwQsm5pDFMt3uGb
oGYp4gZvXxHf5fCCDZbC7LKs9Nq9R3Z8EocCDzbB0hsyPBPS4WHoMrYFvlzLQEMU
xX93hh7Hay6ZhQbOuW/SAYvpnDLpbWemOc2CFc9xHYPPY3F4NJGRRBMXsyDnzUco
h0A77LReWqAk09hJXfrzJ8QssTiq5JU7y/v59tolNC3UGN2LJZmQoGqTM3yTkZJ0
k1dC2Ffc2njXk/jJnDSd6mTTecV6ME2Btf8TSitpx+L4TCAyd0AQ+vZjxc14Xi7K
qI7bkS59NJ+n7+2ubJL4wQqII4nBx32PcITM4fNKLQCH0KCclqI+AP9SLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4mtO2ZO5VVV8+c6cVfTDYlIe8JMB8GA1UdIwQY
MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt
ZGQ4MDNjNWI4NWRiLzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi
LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ6MJfvbP
k3cidF+qnQ/TuUDjvxvNjnvn0q6ykvlzY+MDTnfXMLjctWej6g2sk10OlObz/Jut
4GrjtUdy5/8WGnfKuompQ5SKdHo42uL925voEXKhQ49qM/TBVXtoeAabznjorGqz
9FtIMO8nK5XQQp2iB2dLmVqB7WNO/rNTcgYE+aQrA4BPlwvn9M68pfTXzjcNaYxo
eFQXBx2/9H5cgZmgHcAMHYvV+tzaJcW2LE99E0TzaiPxoI608PxzpbG5+VKAmCzZ
Gq7YWbuCXqeiWXUq+kaIqyB/CObikkMLIhik8owAKg75qISIgi+XrC/6dafIVzDI
1Qv0izZm3KFNxg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 19:55:00 2026 by rpki-client