Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: qbI3pO13DxFl0u6uPX81QA1EYGfrSX9hQawJNMlfq6E=
Subject key identifier: 18:E8:A7:D9:32:BB:10:63:02:80:C5:97:34:A9:B5:54:D2:D3:74:D4
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A0E709A8DB36510954D49CAC87534E28F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 086B
Signing time: Mon 28 Sep 2026 08:02:44 +0000
Manifest this update: Mon 28 Sep 2026 08:02:44 +0000
Manifest next update: Tue 29 Sep 2026 08:02:44 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa (hash: dUYfJyucIcgSEye6sBcDdNQsfbXuPD7ojWDauTvFvck=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: xz9Qm2rGSUSsfa8QWf7yGvE9GHPfvfchnuwSFMrfMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:a8:db:36:51:09:54:d4:9c:ac:87:53:4e:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Sep 28 08:02:44 2026 GMT
Not After : Sep 29 08:02:44 2026 GMT
Subject: CN=18e8a7d932bb10630280c59734a9b554d2d374d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:c8:c6:3c:90:a5:61:1e:0b:6f:be:bc:55:
df:5e:99:0f:d9:b3:25:d5:cf:dc:d5:f3:d0:8f:de:
63:ef:e7:52:98:c7:27:a0:16:08:e2:77:47:c9:25:
ac:6a:9e:00:7e:ea:04:b5:2f:0e:83:ed:a0:3a:4d:
9a:84:15:05:84:e8:c2:3a:9a:a8:bb:21:03:26:3a:
17:16:ec:07:d9:a0:1b:43:65:3c:a1:47:82:4e:cd:
b2:61:74:bc:8e:b6:f4:97:97:69:96:b5:09:b0:f8:
e0:df:0c:2c:f4:45:d0:fa:1e:59:da:e5:01:f2:71:
de:9b:47:70:e7:fa:78:3f:46:48:42:c0:f8:5d:8e:
74:7f:f2:8d:09:36:7d:d9:a8:43:a7:94:9d:25:c8:
e1:07:f7:83:18:4f:c2:e8:6f:f8:29:f5:64:67:79:
1e:6e:ed:9c:cd:47:92:46:0e:dd:70:86:e1:83:85:
03:23:4c:68:7f:d9:59:32:1c:36:eb:c7:c9:01:25:
eb:f1:54:72:a3:7f:1d:5e:3b:d4:56:53:60:09:c3:
b7:a7:57:c6:3b:0b:ed:36:25:50:b2:a6:21:06:f4:
af:25:92:55:92:b5:25:e6:b2:fe:8d:f9:4c:26:7c:
e2:7b:be:3f:f9:c2:45:e0:01:b5:7d:c3:7e:a1:de:
01:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E8:A7:D9:32:BB:10:63:02:80:C5:97:34:A9:B5:54:D2:D3:74:D4
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:98:81:80:68:18:ba:a8:be:3c:17:75:e4:24:8d:85:32:88:
c4:a5:a3:0a:6f:36:8c:f3:b6:dd:19:9e:64:b7:97:cb:3c:b8:
29:17:90:5d:33:c1:cc:eb:bf:7d:30:e9:92:f6:2c:dc:00:4d:
0b:fc:9d:9a:5b:f1:e5:c4:f0:43:d6:2b:36:03:ef:05:55:39:
a7:3e:cc:66:45:b3:4a:ea:d5:e4:0b:c4:3b:4e:70:65:6a:88:
e8:97:b0:39:a1:a8:ae:a9:91:70:16:f5:cf:9f:1f:ce:3a:62:
c0:3d:77:d6:61:66:3c:8c:10:5e:35:c9:a2:08:65:32:95:e5:
76:8f:2b:ab:52:9d:89:12:12:d8:25:f1:a3:b5:6a:c5:ed:88:
42:d9:d7:dc:20:e4:7d:06:c9:5b:80:a0:8b:bb:f2:40:e5:2f:
ce:98:54:4f:56:af:40:d4:21:c1:5c:01:d0:25:49:12:7b:fe:
af:45:44:34:f6:4d:2d:90:00:36:b3:3c:52:9c:fe:bc:4f:42:
03:7b:49:6d:5d:6f:0d:15:76:af:0d:07:93:bd:90:39:75:9f:
a3:22:84:14:d1:9e:bc:4d:41:ca:0a:1e:dc:91:08:0d:9c:9a:
6b:b7:ad:53:4a:79:be:56:71:32:b1:1a:bc:ba:0b:07:04:4d:
f2:48:c4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:25:13 2026 by rpki-client