Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: +yeI1kG3XVS3Su5X6hH+B64EDip9+8H+jo3mIxPt9sM=
Subject key identifier: A7:F9:C5:BE:20:F7:5C:A4:8E:3A:DA:32:9C:B5:BF:47:97:82:48:35
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 01A10B149CD639599953A130D0FB4BE4E46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1A8C
Signing time: Mon 05 Oct 2026 08:01:02 +0000
Manifest this update: Mon 05 Oct 2026 08:01:02 +0000
Manifest next update: Tue 06 Oct 2026 08:01:02 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: mxBtBneQ7ZvKkzINdjRmhWeQxdRvWq02GCXEyu1qeas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:9c:d6:39:59:99:53:a1:30:d0:fb:4b:e4:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Oct 5 08:01:02 2026 GMT
Not After : Oct 6 08:01:02 2026 GMT
Subject: CN=a7f9c5be20f75ca48e3ada329cb5bf4797824835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:88:16:01:16:8b:80:c1:fc:70:be:06:a8:cb:
55:3f:80:3e:7f:e7:15:19:ae:00:cb:e3:6e:f8:a5:
0f:3a:e8:d0:be:9a:86:2e:33:a4:c0:bb:f0:de:2e:
ec:a8:f9:0c:3c:af:8b:6f:60:db:2a:ae:7e:57:c1:
6f:06:14:a2:5a:1d:ba:cf:0d:41:56:13:10:87:4b:
da:30:24:e3:1a:47:ac:24:3c:3e:67:de:bc:6f:0a:
e4:54:cd:f8:4f:d5:56:be:a3:e2:5e:97:c2:a1:99:
c1:e4:40:6e:22:23:6c:b4:e7:0f:7a:a4:41:f0:05:
2e:7f:58:91:6f:1f:b7:dd:7f:32:ea:14:ed:61:20:
f0:9d:d4:d6:c4:9d:34:47:b1:54:26:db:63:48:65:
f7:2f:60:ba:d2:fc:37:df:62:27:f9:13:48:82:1f:
a0:3b:ed:cf:d0:bd:61:49:06:e3:bc:c4:91:8d:4f:
53:55:9f:47:24:e4:3c:18:51:89:52:68:94:f6:8a:
cd:f5:99:28:fd:13:b0:83:ee:3d:49:e2:0b:36:be:
8c:b3:fd:24:ab:7a:e0:cf:df:e9:8d:17:fb:89:79:
b8:36:ee:51:20:13:03:73:86:ca:63:cf:4e:d4:7a:
e5:22:69:97:d0:b1:ac:1d:8d:35:e0:1e:27:0b:27:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F9:C5:BE:20:F7:5C:A4:8E:3A:DA:32:9C:B5:BF:47:97:82:48:35
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:99:ad:9f:0e:7a:5f:75:75:b1:1b:ec:8a:c4:8e:d3:0c:4e:
58:c0:19:20:8d:65:c9:03:14:c9:73:d0:38:45:2d:74:36:9c:
9b:13:cd:06:4b:f3:b3:85:6a:4c:56:5a:a0:25:44:6a:fb:cb:
7f:fb:6d:63:67:3a:6e:72:96:68:97:a2:ca:24:cc:48:06:a3:
70:48:cb:d1:29:69:07:88:65:c2:96:1a:26:c6:b9:e3:6a:26:
ba:35:f8:25:03:de:3b:41:25:23:a9:26:f1:82:dc:34:e2:0a:
a1:b3:15:f7:97:f6:f4:cd:30:82:12:21:2e:bd:44:77:66:86:
ea:ae:03:e8:d7:45:6c:65:6a:f7:09:5a:dd:c8:e0:f7:02:f5:
94:68:1d:5c:00:9d:41:52:f4:21:a1:91:50:ac:65:83:e3:d3:
37:3f:e0:ae:92:4c:cf:9c:17:43:0c:1d:2a:fb:bd:03:ee:48:
0b:c0:9b:2f:11:e6:c4:73:6d:fc:f0:1d:c7:ef:48:7f:0b:83:
c1:a6:7f:39:09:c7:46:b9:3a:d4:51:ed:e1:c4:7f:af:cb:f7:
d3:21:95:bd:c7:6f:4c:40:87:f6:06:44:c2:d0:71:a6:36:39:
8b:15:45:cb:64:09:d2:d2:58:94:41:59:24:ce:3d:f6:d4:82:
b4:11:56:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELFJzWOVmZU6Ew0PtL5ORrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx
OGU5MDMwHhcNMjYxMDA1MDgwMTAyWhcNMjYxMDA2MDgwMTAyWjAzMTEwLwYDVQQD
EyhhN2Y5YzViZTIwZjc1Y2E0OGUzYWRhMzI5Y2I1YmY0Nzk3ODI0ODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYgWARaLgMH8cL4GqMtVP4A+f+cV
Ga4Ay+Nu+KUPOujQvpqGLjOkwLvw3i7sqPkMPK+Lb2DbKq5+V8FvBhSiWh26zw1B
VhMQh0vaMCTjGkesJDw+Z968bwrkVM34T9VWvqPiXpfCoZnB5EBuIiNstOcPeqRB
8AUuf1iRbx+33X8y6hTtYSDwndTWxJ00R7FUJttjSGX3L2C60vw332In+RNIgh+g
O+3P0L1hSQbjvMSRjU9TVZ9HJOQ8GFGJUmiU9orN9Zko/ROwg+49SeILNr6Ms/0k
q3rgz9/pjRf7iXm4Nu5RIBMDc4bKY89O1HrlImmX0LGsHY014B4nCydSCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKf5xb4g91ykjjraMpy1v0eXgkg1MB8GA1UdIwQY
MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt
MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi
LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMpmtnw56
X3V1sRvsisSO0wxOWMAZII1lyQMUyXPQOEUtdDacmxPNBkvzs4VqTFZaoCVEavvL
f/ttY2c6bnKWaJeiyiTMSAajcEjL0SlpB4hlwpYaJsa542omujX4JQPeO0ElI6km
8YLcNOIKobMV95f29M0wghIhLr1Ed2aG6q4D6NdFbGVq9wla3cjg9wL1lGgdXACd
QVL0IaGRUKxlg+PTNz/grpJMz5wXQwwdKvu9A+5IC8CbLxHmxHNt/PAdx+9IfwuD
waZ/OQnHRrk61FHt4cR/r8v30yGVvcdvTECH9gZEwtBxpjY5ixVFy2QJ0tJYlEFZ
JM499tSCtBFWkA==
-----END CERTIFICATE-----
Generated at Mon Oct 5 12:43:37 2026 by rpki-client