Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: /31GLOhFY3CRSmrRRNhjAUe0oz5z8bjxDDFgOFwbXVU=
Subject key identifier: 46:82:43:AF:63:30:12:3F:0F:62:48:58:73:13:8B:9E:84:74:88:62
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 01A0D5020EF35C9E19B9EF7BBBC225EC7C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 20:01:16 +0000
Manifest this update: Thu 24 Sep 2026 20:01:16 +0000
Manifest next update: Fri 25 Sep 2026 20:01:16 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 4+sR//BdMOBgNujVN4sWDKVhW7r7Rf7mh4t8rnSsRQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:0e:f3:5c:9e:19:b9:ef:7b:bb:c2:25:ec:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Sep 24 20:01:16 2026 GMT
Not After : Sep 25 20:01:16 2026 GMT
Subject: CN=468243af6330123f0f62485873138b9e84748862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:25:27:96:5b:e0:67:df:01:4b:5e:6f:92:
2f:f4:f1:b2:35:29:c9:67:aa:df:2b:18:03:02:39:
15:dc:5b:a1:4b:22:82:be:4e:b5:99:76:11:3c:16:
4e:d5:bc:c5:c8:3e:17:a4:5b:b1:f5:71:89:42:34:
21:68:eb:de:82:12:e7:75:f7:fb:85:59:e7:34:0b:
dd:a6:63:37:c1:f4:c9:db:44:51:65:e7:3d:9d:9e:
29:f6:2e:4f:55:ff:93:c9:b2:84:92:db:07:02:ad:
7a:94:21:ff:11:b9:03:75:e5:41:8b:1a:11:0f:d2:
04:7e:18:69:6c:23:b5:00:83:08:b6:11:ac:78:07:
f2:97:27:46:27:48:44:d3:ad:9f:c7:62:b3:6c:c5:
33:68:7d:c2:72:b6:4c:9a:ac:59:73:47:c1:3b:72:
b5:43:93:57:ed:70:42:f7:3c:a2:1e:36:25:04:ff:
0b:40:ba:c4:8b:9f:82:7e:24:b3:e9:01:1a:05:d1:
ec:7a:d0:10:0e:14:8e:9b:91:45:45:0b:f7:51:64:
37:41:33:90:fe:5c:85:d6:e3:c1:a3:9e:7f:3d:c1:
f2:0a:29:52:ad:37:a6:fe:de:5d:e1:af:16:81:1e:
01:83:ee:e1:f0:31:b5:ee:50:e9:ea:94:bf:90:59:
c6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:82:43:AF:63:30:12:3F:0F:62:48:58:73:13:8B:9E:84:74:88:62
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f2:3b:40:85:8e:71:b2:cd:4f:97:f7:31:80:cd:2d:04:59:
28:b1:b9:ce:35:87:d7:51:31:95:0c:80:86:ac:d5:21:87:99:
1e:71:f9:ef:bd:18:fa:9c:d0:3b:c6:94:0e:f7:c3:9b:28:35:
c2:35:ed:97:f9:a0:5a:ff:c9:e4:97:57:c1:c8:ea:74:14:4f:
23:c1:a3:d0:68:4c:ab:e4:64:f2:84:7d:98:89:b8:9b:23:52:
73:0f:40:91:c2:68:57:d1:06:ef:b1:95:da:5a:da:8a:28:8b:
de:48:65:0d:cb:c9:d9:a8:1d:bd:00:fd:b6:cf:93:18:ee:11:
48:7f:61:24:f0:f8:41:1a:0c:ac:55:2d:ec:24:62:0d:be:90:
b2:fc:53:3c:3f:b1:cc:e5:8f:e0:38:06:fd:40:e9:72:5b:28:
02:b3:8d:26:ef:03:65:34:f1:64:d5:f1:65:01:17:37:58:ad:
f3:0f:13:75:38:df:0c:6a:da:74:72:3d:6b:ab:f4:52:e6:a0:
4c:04:03:47:49:88:b5:9f:77:09:4d:8a:fd:14:77:dc:a9:74:
38:f4:b5:9e:8c:80:23:3e:ee:7d:59:ea:df:e9:0f:f2:dd:e6:
02:ce:91:53:2f:d2:ce:fa:b7:84:66:ee:96:59:0c:e3:3d:78:
dd:ef:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:47 2026 by rpki-client