
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: PZ2TROpXvHaKOfPjbicREhlVluQSiSXsePwoB1O43Cg=
Subject key identifier: 48:AB:2E:9E:A4:BB:AA:93:E0:F6:28:A3:8F:3F:14:B6:E4:4E:34:3D
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01A0D124C792C046B31DBD79348D14519DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 02:00:43 +0000
Manifest this update: Thu 24 Sep 2026 02:00:43 +0000
Manifest next update: Fri 25 Sep 2026 02:00:43 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: xNBy6Q6OnnTV++VrMWMR7/hq6mAk2cbrOdkmoay7i9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:c7:92:c0:46:b3:1d:bd:79:34:8d:14:51:9d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Sep 24 02:00:43 2026 GMT
Not After : Sep 25 02:00:43 2026 GMT
Subject: CN=48ab2e9ea4bbaa93e0f628a38f3f14b6e44e343d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:ac:ed:38:e3:f5:cc:42:11:09:ef:9f:9a:
a9:33:0e:3a:80:4d:10:7c:cf:02:70:dc:dc:c1:f7:
7a:a2:99:f3:cc:7a:e2:86:5e:c7:b5:6e:f2:37:44:
55:1e:bd:57:79:1f:e8:e1:83:43:e8:f1:9a:36:11:
17:b3:23:41:37:55:c1:b0:7b:81:20:c3:a3:82:ce:
f3:bc:ff:ef:8f:8f:bb:83:c4:16:83:62:9f:e9:63:
0d:be:6a:9e:31:b4:6b:62:40:f5:a4:92:90:2e:0f:
18:7f:95:06:7f:6b:ac:fc:36:a6:a5:0b:0a:6b:d3:
b6:14:8f:ac:d0:a7:a1:c1:0c:a0:9d:ee:09:85:78:
5d:49:2f:8f:de:4a:9b:4a:07:c3:86:04:7e:38:80:
81:7d:cc:47:e1:18:c7:a5:01:cc:aa:22:0f:4f:72:
f1:e6:a9:ad:52:d2:2e:ef:7c:20:e3:ac:dd:e0:99:
e8:ed:bd:37:68:10:aa:6c:1f:37:ac:51:7c:ef:fc:
fd:13:86:2d:ea:2d:62:63:63:e8:10:b8:58:67:22:
fd:17:75:ac:8a:93:ef:3f:30:76:03:3a:30:b6:1d:
58:b9:b8:47:28:ae:1d:ff:df:9c:d4:28:3a:2a:c9:
a2:11:7a:06:33:c7:1e:57:7a:3d:a5:af:0c:50:8c:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AB:2E:9E:A4:BB:AA:93:E0:F6:28:A3:8F:3F:14:B6:E4:4E:34:3D
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9b:4c:e7:38:74:ce:66:ca:5d:8b:75:79:6a:62:2e:81:2a:
7b:5b:65:6d:76:ae:4c:c0:44:12:8c:7d:70:45:8d:db:83:97:
30:8f:e3:39:67:ec:27:63:09:4a:da:d1:83:a6:b3:1e:ae:9b:
bc:d5:8b:4b:72:5f:b7:e5:e7:63:fa:77:57:39:ef:39:a6:14:
7b:1d:5d:90:64:16:59:91:f5:14:3e:21:0d:0f:3c:45:33:55:
70:84:75:87:19:d6:1e:f0:36:ae:72:8a:59:5d:01:6f:d2:32:
08:d6:12:48:d5:2d:c3:a0:2b:24:6c:f2:24:a6:6c:83:9e:45:
26:8e:f2:61:ce:48:42:6f:07:92:40:6c:4d:4a:ec:77:c6:b8:
f1:7f:0b:ae:8c:65:d0:b0:4f:67:44:d1:be:a5:dd:71:3e:4f:
25:11:a4:4f:f2:ef:e9:ff:bd:62:e8:a6:d8:20:7f:da:e2:8f:
df:e6:73:9b:67:b0:5e:49:43:73:46:f5:16:d1:ef:56:fc:c2:
8d:4d:96:e4:39:4e:9c:ad:c9:d6:91:68:d9:27:02:78:66:22:
80:d9:ab:2c:07:d8:f4:7f:48:dd:66:6d:59:bd:e0:49:b2:17:
00:4d:8a:3a:b4:92:a6:0c:93:b0:41:cc:ce:f6:da:68:41:92:
68:8f:75:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:19:14 2026 by rpki-client