Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: wHTk4Cw6Ag5HEm2JhQaE9ZM54DxxoiBK9DA1z2k1kg0=
Subject key identifier: EA:62:42:50:C7:4E:8E:E6:A2:D0:38:28:93:9B:31:3D:B6:8E:05:99
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 01A13C6E9F4A67406D1BE101185AB5ACD126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 09EF
Signing time: Wed 14 Oct 2026 22:00:45 +0000
Manifest this update: Wed 14 Oct 2026 22:00:45 +0000
Manifest next update: Thu 15 Oct 2026 22:00:45 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: KC6Ga6HW65sNQgSH+lQfkMgTxkbYrPbi5EKwT8pwy94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:9f:4a:67:40:6d:1b:e1:01:18:5a:b5:ac:d1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Oct 14 22:00:45 2026 GMT
Not After : Oct 15 22:00:45 2026 GMT
Subject: CN=ea624250c74e8ee6a2d03828939b313db68e0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:45:82:e8:e8:24:a7:5a:7c:ce:83:fd:03:
93:d8:57:87:d6:e5:0c:5c:29:fa:63:73:7c:a7:5e:
0c:4d:2f:1e:fc:94:db:c2:44:a4:25:05:1f:80:9e:
fa:01:9f:5b:5b:7d:f1:40:86:e6:5b:ce:b1:d9:bb:
9c:64:13:f8:70:35:5a:ea:af:2c:7d:04:79:84:b2:
8a:d3:3c:90:4c:8e:50:91:83:59:25:69:b6:24:cc:
eb:23:5d:38:77:15:54:19:02:59:f1:58:d1:c2:45:
6d:5b:93:6b:d1:89:d6:b4:48:af:69:fc:30:ee:c6:
d7:51:6a:30:6a:2c:c7:da:8f:29:45:a8:3f:1a:f0:
de:c0:ca:a8:0a:dd:b2:a4:4a:c0:ee:fd:4b:cf:f8:
76:6d:0e:67:72:67:93:6c:12:0e:49:6f:20:f6:ac:
e6:3e:25:85:ac:7c:0a:55:7f:8d:3a:2a:6c:e4:ad:
f8:ed:c9:e6:6d:e7:99:93:58:72:66:0a:93:f1:5a:
a0:44:81:dc:25:d0:69:84:01:12:94:49:a6:2e:ee:
3d:a5:24:4d:9a:42:ce:42:16:96:78:4f:29:34:8c:
76:4e:c9:9a:26:9a:57:4e:4a:fa:47:97:e3:e2:7b:
8c:96:1e:f2:b6:44:b5:6f:8a:09:39:0e:39:6f:39:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:42:50:C7:4E:8E:E6:A2:D0:38:28:93:9B:31:3D:B6:8E:05:99
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ba:c1:f9:77:80:67:47:68:fc:ef:a6:ea:d6:9d:7a:68:1d:
1f:cd:32:51:cf:41:b2:0a:0c:23:60:61:9d:0c:14:a3:b2:07:
eb:70:27:12:ec:4f:08:0f:79:2a:23:4c:e3:d7:c4:46:f3:df:
24:15:39:14:32:26:7e:13:bb:df:95:08:8e:ad:03:2a:3b:c2:
bf:55:e4:67:20:d3:52:f7:00:61:e0:98:80:b8:9d:85:7d:f6:
7b:36:52:b9:72:90:10:86:1b:e6:4d:f7:7a:9c:96:d3:81:54:
cf:05:48:a2:cc:24:7f:3a:1a:b2:23:27:60:be:5a:38:fa:2b:
c7:26:f8:fa:69:54:53:3d:99:b5:e4:fa:45:4e:39:75:1a:a8:
ee:61:82:fb:e4:7e:33:98:c5:f8:35:0f:be:d0:2b:49:bc:fb:
cc:a7:18:d2:87:68:75:47:d5:e4:d6:28:cf:a7:0d:21:09:7d:
31:ea:30:e7:ce:0e:a9:cf:c8:2a:85:8e:28:a1:5f:f8:4d:9d:
bf:fa:e9:d6:ba:82:7c:35:77:d8:92:03:06:9e:01:e4:84:bd:
22:85:4c:bf:22:da:fa:d6:26:b1:80:73:ff:b4:eb:6d:79:85:
4a:d8:53:b8:52:cd:c0:ff:50:24:6d:bf:35:40:b6:5f:b2:15:
a0:87:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:22:55 2026 by rpki-client