Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: XlvzbblP4XpTb0UOXyjQzmX/krGO4cMm2rbLZv5Rw4o=
Subject key identifier: 3B:88:40:19:B9:AC:8F:68:8D:E8:7A:56:B6:20:4A:42:C1:90:DC:40
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01A0D5DE0E8FF641C137352168F4D500F2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1A03
Signing time: Fri 25 Sep 2026 00:01:34 +0000
Manifest this update: Fri 25 Sep 2026 00:01:34 +0000
Manifest next update: Sat 26 Sep 2026 00:01:34 +0000
Files and hashes: 1: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (hash: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: iIbOvaJSsELt9DNygbIZs6YP+BQsOscEY7aYIV1cxLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:0e:8f:f6:41:c1:37:35:21:68:f4:d5:00:f2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Sep 25 00:01:34 2026 GMT
Not After : Sep 26 00:01:34 2026 GMT
Subject: CN=3b884019b9ac8f688de87a56b6204a42c190dc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:ec:f5:f5:24:0c:de:1d:eb:8c:ab:83:16:
7c:a4:94:27:8a:c0:9f:60:77:5c:f8:68:97:08:bb:
33:0f:2c:13:31:e2:bc:bd:ea:7a:78:94:f5:f7:29:
fd:51:eb:75:70:e6:1e:17:4a:aa:b5:71:46:df:22:
85:b3:11:73:47:95:f9:5d:8c:9c:dd:85:ac:1f:fc:
83:6a:2d:52:dc:40:43:0f:fa:51:5b:7f:ef:62:fe:
7e:d0:be:16:19:57:94:33:76:1f:39:a2:41:e0:3e:
3a:75:8d:29:7e:3d:d8:e2:e2:01:45:15:73:3b:49:
7d:2e:4f:41:3d:e9:b4:f5:76:35:1c:86:5d:81:bc:
c8:3b:3d:88:5c:a6:0c:b7:79:32:cf:5d:4b:42:76:
1f:67:e9:8d:5f:f5:ed:1b:4b:19:3b:6d:ac:71:d0:
eb:8b:8e:d8:b3:b0:18:12:61:41:a7:d5:71:26:0a:
bd:ee:8e:e1:df:59:d8:a2:f3:53:40:3a:47:c2:e0:
70:89:15:11:f5:db:55:56:92:c8:97:07:eb:87:c5:
94:31:ac:6c:9b:46:88:24:5b:85:71:0d:54:93:f2:
4f:6d:c9:1f:bc:b2:37:9c:b7:4b:59:9d:a4:0f:8d:
50:84:a5:1d:f8:75:9a:62:ba:3e:c3:f6:3a:29:63:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:88:40:19:B9:AC:8F:68:8D:E8:7A:56:B6:20:4A:42:C1:90:DC:40
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:88:fb:7f:82:d3:1f:fd:39:0e:65:1f:63:aa:46:90:33:12:
a7:48:f9:45:4e:6d:42:bb:26:0e:7e:31:09:f2:a2:cc:6b:e7:
ec:69:40:1f:3b:e9:ab:46:4f:62:aa:7e:6b:30:ef:82:fb:af:
28:82:b6:3b:a4:ac:ec:f3:54:e5:90:4a:d8:8d:48:7f:63:e8:
d2:56:2a:55:d3:60:c6:e4:09:47:6c:59:7d:39:d3:1e:a6:85:
50:a7:aa:73:b6:5e:f5:f8:55:bc:07:7e:91:01:b5:3e:66:f3:
fa:a6:6a:9d:94:42:5a:c6:a2:e3:1e:b4:d4:6b:ee:1c:1e:4b:
0f:56:02:d9:65:5b:23:9c:5d:60:80:8d:87:b5:bc:3d:b0:51:
8a:3a:d4:ca:72:c5:a0:93:9c:29:dd:90:44:69:7e:75:ac:02:
b6:42:29:32:86:ae:84:9d:90:76:bb:40:0e:23:b7:55:5a:f8:
6b:73:fd:e5:fc:21:01:2e:d7:54:37:f8:47:1e:f3:a0:73:2d:
66:9d:f7:06:79:e6:e1:46:9e:3e:37:56:1a:fb:c0:80:cd:98:
57:43:5a:a4:18:e5:5e:9f:12:a3:83:06:e0:ac:23:bd:ee:50:
2d:be:76:e6:8a:e1:ab:a3:ba:ac:9c:e1:9e:83:a5:96:12:97:
64:b9:e0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:45:19 2026 by rpki-client