Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: S6psgYDPU58Z+4aYK3Ix6GA+C5agXWBrfyNNCPJF/Pw=
Subject key identifier: 4B:CE:1B:FC:0D:87:2A:9B:5E:FC:CC:7C:8E:E7:D9:1F:4B:57:24:AB
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 01A1076F47D13820B0B2479945D2E831FE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 15:01:35 +0000
Manifest this update: Sun 04 Oct 2026 15:01:35 +0000
Manifest next update: Mon 05 Oct 2026 15:01:35 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: ub/dh6C7V7JA2dhkHfrSRI8uEK07X4kXZly5Spc+IBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:47:d1:38:20:b0:b2:47:99:45:d2:e8:31:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Oct 4 15:01:35 2026 GMT
Not After : Oct 5 15:01:35 2026 GMT
Subject: CN=4bce1bfc0d872a9b5efccc7c8ee7d91f4b5724ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:f7:6b:ac:45:26:1c:b3:f5:8e:33:bc:81:
e8:8c:a8:41:23:8c:0d:46:b9:95:af:5c:1b:37:88:
36:07:da:6b:1c:76:e4:f8:a1:7f:e3:47:bd:d2:95:
01:1f:df:c2:f4:8a:f6:8c:42:ac:1f:bd:ae:ee:2c:
ff:5b:a8:92:a7:a4:bc:cf:b1:3d:9e:9a:b7:c4:9b:
6c:6b:3a:dd:13:09:d3:15:3a:b3:c8:5c:2a:b5:1c:
55:30:26:e6:ad:e2:9a:f8:a4:00:9b:5b:75:9e:9c:
b2:d8:8d:02:ef:8d:c1:3b:d6:d5:f9:aa:07:b8:a2:
4a:a0:a6:60:da:c8:42:be:6d:4e:47:b6:75:77:46:
f9:89:b6:9e:d6:75:b2:ff:42:11:6b:bc:88:92:90:
e1:fa:f5:90:b8:80:b1:53:c6:6a:34:1d:ec:d8:e1:
e1:71:4f:7d:0c:1d:97:5c:7c:01:40:a0:03:a2:11:
d9:a0:4b:9f:1a:c7:61:ea:21:4a:d7:29:62:52:45:
cc:89:64:65:12:3b:4c:86:e8:00:e8:cc:70:34:4e:
23:ad:59:0a:1b:f7:d4:af:2c:f6:7c:c4:39:36:71:
58:bb:39:d6:38:1e:7a:10:88:96:69:1b:db:c2:e1:
9b:ce:02:0c:25:dc:2c:af:ee:66:3e:31:3e:39:1a:
52:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CE:1B:FC:0D:87:2A:9B:5E:FC:CC:7C:8E:E7:D9:1F:4B:57:24:AB
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:06:ec:94:f7:a6:7a:5f:87:07:db:dc:d7:45:54:cc:fd:
dd:44:3b:f9:c5:0f:75:84:1f:80:33:11:5e:60:74:37:04:86:
28:fa:78:38:1b:b2:6f:23:3f:e9:12:73:23:b5:43:2c:3e:e7:
42:4d:d8:2d:86:54:9e:11:a4:67:69:8d:59:bd:2f:85:41:9a:
2a:ae:4d:7c:7b:5c:12:41:27:c4:d4:5c:6f:90:e3:1d:fe:e2:
0a:98:e1:47:ad:a6:cf:19:95:b3:c6:46:d6:83:e0:e8:4e:2a:
d7:c0:1c:5d:09:33:32:e3:4c:8a:46:f1:90:c6:bc:c3:55:ef:
40:f9:c7:e9:79:42:c6:45:ba:32:0f:d0:e6:fe:ec:e7:6c:db:
99:87:55:63:cd:9d:8d:c8:55:a1:17:1e:0e:b7:e2:47:63:04:
10:64:60:fc:31:d3:1c:2b:77:d6:4a:f0:f4:5b:bf:49:34:4c:
d2:99:31:ac:a5:ac:c7:80:57:67:49:9c:23:03:0f:fe:27:fd:
76:a2:70:31:10:74:55:f1:42:8f:0e:32:81:f1:06:75:aa:0f:
5c:43:46:6a:1a:9a:63:1c:27:5e:a8:40:90:22:54:6b:3a:4e:
34:fc:24:44:40:5a:07:f4:b6:1f:cd:38:a8:6e:7a:3a:b4:00:
f9:61:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:31:22 2026 by rpki-client