Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: BQzcj6MSQiFwZZnHj6RmBssl8ss86owW4WQcZdYu0TQ=
Subject key identifier: B8:D7:57:36:E7:AA:EE:2B:7E:15:61:6A:D2:47:3F:CE:20:92:56:60
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 01A0F8AAC77CC9C603E9BB23F5CF9BF57C1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1A8D
Signing time: Thu 01 Oct 2026 18:12:16 +0000
Manifest this update: Thu 01 Oct 2026 18:12:16 +0000
Manifest next update: Fri 02 Oct 2026 18:12:16 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: kuobY0dwcbn9xpmxPetHBxibwbOmVagCRBkZYdKsmFU=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:c7:7c:c9:c6:03:e9:bb:23:f5:cf:9b:f5:7c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Oct 1 18:12:16 2026 GMT
Not After : Oct 2 18:12:16 2026 GMT
Subject: CN=b8d75736e7aaee2b7e15616ad2473fce20925660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:61:64:8c:8e:20:1e:02:74:aa:90:64:6b:
24:f6:96:05:34:a0:e3:d7:79:ea:b9:35:d6:3e:8c:
32:f5:37:df:a6:59:54:53:1f:20:04:f0:6e:0e:1d:
73:46:2c:bc:a5:c3:17:88:d8:69:59:ed:8a:c9:b2:
6b:87:47:a5:20:80:b1:f2:ba:cc:b3:2c:4b:c6:6f:
6e:55:19:8c:2b:f6:ba:35:2e:b3:b8:09:da:7d:11:
da:36:52:12:2d:2b:77:6b:d1:5c:8c:16:5f:fb:7a:
bf:dc:38:8f:4b:07:f5:a7:ba:e1:bb:58:7c:24:15:
01:71:a8:ec:11:c3:aa:79:88:c1:c5:cf:25:4c:ef:
1e:40:66:a9:c6:a6:da:44:3c:82:04:9d:83:a3:e7:
f4:c1:2e:16:fd:0d:ff:9a:b2:51:0e:68:d3:a8:bc:
a5:ba:34:b6:79:b3:59:43:45:87:72:1a:aa:16:59:
b6:50:6e:29:93:78:7d:3f:ff:01:1e:13:2b:64:2c:
89:87:fd:5f:2d:6e:e2:a4:b0:f4:6d:15:51:e4:b3:
0b:72:fe:13:de:6d:a1:b6:b2:ff:ae:dd:24:39:8f:
f1:b8:4f:da:0b:e2:99:8b:d8:38:7e:67:4a:14:7c:
cc:db:5d:5f:4e:32:47:5b:b8:c7:1d:d7:7a:b4:58:
a5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D7:57:36:E7:AA:EE:2B:7E:15:61:6A:D2:47:3F:CE:20:92:56:60
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:28:4e:b2:ff:57:9c:01:2a:54:01:39:38:6c:0f:fb:d0:03:
a6:e0:2a:92:d9:85:d4:7d:ae:83:e2:3d:18:26:c5:ed:16:6e:
20:ab:44:3b:98:86:f5:79:0c:3d:79:45:6d:31:6d:8e:54:c1:
e0:f4:6a:1e:1e:6c:3e:07:c5:4f:f5:15:64:1b:39:04:3e:c4:
a2:e3:91:0b:d7:49:ec:6b:28:8a:4e:f9:77:1d:2b:10:fd:86:
c6:03:6d:d8:9c:d6:9e:0a:a7:76:59:4d:94:9d:56:cd:12:22:
ad:af:2d:55:cc:dd:5e:95:85:fd:ff:b2:c5:47:ea:df:e9:4c:
71:b7:af:c8:3e:0f:3e:e0:e2:5e:cd:46:fc:ca:85:29:49:68:
cd:46:ad:5c:3a:fd:39:c2:51:f2:b9:e0:33:dc:bf:4e:c6:7a:
8a:de:31:58:6e:90:8c:6d:bf:14:26:d4:3c:24:60:a4:45:56:
6a:47:0d:18:ed:09:63:f5:b5:04:3f:70:1e:07:f5:6d:58:3e:
b7:12:4e:73:0b:d7:69:3c:4a:f0:98:36:3e:c7:36:4d:f8:a1:
9e:ef:56:4c:8e:e4:a8:d6:bc:07:14:b9:82:fa:67:15:a1:be:
ad:4d:ec:52:37:87:e2:be:cf:bf:fc:fc:7d:3a:69:b7:98:f3:
68:d5:ab:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD4qsd8ycYD6bsj9c+b9XwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjYxMDAxMTgxMjE2WhcNMjYxMDAyMTgxMjE2WjAzMTEwLwYDVQQD
EyhiOGQ3NTczNmU3YWFlZTJiN2UxNTYxNmFkMjQ3M2ZjZTIwOTI1NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqlhZIyOIB4CdKqQZGsk9pYFNKDj
13nquTXWPowy9TffpllUUx8gBPBuDh1zRiy8pcMXiNhpWe2KybJrh0elIICx8rrM
syxLxm9uVRmMK/a6NS6zuAnafRHaNlISLSt3a9FcjBZf+3q/3DiPSwf1p7rhu1h8
JBUBcajsEcOqeYjBxc8lTO8eQGapxqbaRDyCBJ2Do+f0wS4W/Q3/mrJRDmjTqLyl
ujS2ebNZQ0WHchqqFlm2UG4pk3h9P/8BHhMrZCyJh/1fLW7ipLD0bRVR5LMLcv4T
3m2htrL/rt0kOY/xuE/aC+KZi9g4fmdKFHzM211fTjJHW7jHHdd6tFilFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjXVzbnqu4rfhVhatJHP84gklZgMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArShOsv9X
nAEqVAE5OGwP+9ADpuAqktmF1H2ug+I9GCbF7RZuIKtEO5iG9XkMPXlFbTFtjlTB
4PRqHh5sPgfFT/UVZBs5BD7EouORC9dJ7Gsoik75dx0rEP2GxgNt2JzWngqndllN
lJ1WzRIira8tVczdXpWF/f+yxUfq3+lMcbevyD4PPuDiXs1G/MqFKUlozUatXDr9
OcJR8rngM9y/TsZ6it4xWG6QjG2/FCbUPCRgpEVWakcNGO0JY/W1BD9wHgf1bVg+
txJOcwvXaTxK8Jg2Psc2Tfihnu9WTI7kqNa8BxS5gvpnFaG+rU3sUjeH4r7Pv/z8
fTppt5jzaNWrXQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 13:12:06 2026 by rpki-client