Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: Tbzayp3X2UviIWUk8zJOU+knbXRSs1mb9zyEN+tKJOk=
Subject key identifier: 33:4F:57:FC:4E:CA:03:25:05:32:66:BB:1C:08:B1:DB:C6:4E:53:FB
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01A0D5022B7DEF08E77F83CBC9CEDF02DC7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 20:01:24 +0000
Manifest this update: Thu 24 Sep 2026 20:01:24 +0000
Manifest next update: Fri 25 Sep 2026 20:01:24 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: IWqBvAiBPCWk/jHwrBf4JvHPMMundIPnzl/1LzJXktM=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:2b:7d:ef:08:e7:7f:83:cb:c9:ce:df:02:dc:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Sep 24 20:01:24 2026 GMT
Not After : Sep 25 20:01:24 2026 GMT
Subject: CN=334f57fc4eca0325053266bb1c08b1dbc64e53fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e8:9f:8b:4d:67:31:64:20:05:18:42:6b:cd:
87:7d:96:91:b9:cc:df:d4:40:00:1c:b3:b3:a4:49:
e8:11:61:cf:08:91:8c:97:1f:f8:f5:51:eb:d4:7a:
31:d2:40:7e:47:1e:0e:f6:f9:34:bc:8b:37:b2:e6:
3f:6f:54:41:a7:32:8f:94:c0:e6:a7:c5:6a:4b:ce:
32:ab:46:ec:df:a5:04:ae:68:5e:32:84:92:eb:e3:
d1:fb:76:bc:ed:89:b6:a2:aa:39:86:ae:d8:e1:e4:
10:08:9f:a4:1f:65:49:82:da:8c:e0:18:a4:51:27:
c9:5a:39:88:5f:89:9a:03:21:b9:eb:e4:ab:39:f7:
bd:e1:54:67:f2:09:7a:c1:3c:93:d3:da:3b:85:4a:
94:10:86:4c:dd:be:e1:8c:3a:c8:9f:b9:a1:b3:6b:
20:56:93:99:ac:ce:98:2a:64:f1:1e:13:e0:e5:e4:
25:7c:6a:37:8f:c4:ab:ae:f2:f9:39:5b:8a:06:57:
83:a5:71:ef:b2:e9:7e:5f:15:69:33:d2:56:37:d9:
a0:2e:e1:bc:db:e4:8b:47:c4:05:07:ed:f5:8d:ed:
ab:66:a0:3a:73:7f:05:f0:af:88:84:04:8a:eb:c9:
8f:71:ff:d2:24:5f:5d:70:9f:03:23:6d:cd:65:20:
3e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4F:57:FC:4E:CA:03:25:05:32:66:BB:1C:08:B1:DB:C6:4E:53:FB
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1e:da:57:8d:9d:41:58:37:6e:eb:35:9b:ae:0e:0e:64:0c:
01:92:ae:fc:25:cf:c7:ab:e9:e5:d0:46:e1:09:db:6a:f3:f4:
11:df:f3:c9:54:a1:4c:dc:f0:1a:f6:4d:38:41:f6:46:09:20:
8d:12:66:bf:1e:c6:58:a4:94:e1:81:42:a0:67:a7:a0:2e:39:
e4:ac:39:3d:64:fa:24:61:a2:b1:19:e5:3a:da:d2:99:0f:75:
2e:98:7c:a0:43:de:6c:18:63:ea:8d:be:66:c4:fe:15:cb:49:
57:07:73:85:b9:6f:3e:16:39:c3:f5:70:a2:7d:f8:fd:5d:61:
96:cc:41:55:34:ac:65:70:86:b3:f1:fd:8e:30:b9:fe:6c:42:
95:13:85:e8:e2:7f:f2:1f:a0:e5:b7:94:d3:3b:30:86:61:fb:
f1:9e:f5:6b:f7:a5:39:15:78:3b:17:f5:f5:2a:73:c7:ab:3c:
97:86:82:17:2f:29:52:53:f4:c6:95:39:e6:b4:42:82:39:7b:
fd:ec:5c:92:29:54:84:b4:ff:80:20:86:2f:8e:d2:5f:18:64:
50:d3:69:3f:0f:7e:1d:71:85:66:db:cb:2e:a0:8d:69:5e:e3:
7c:11:62:1b:be:f6:b4:fe:a1:7f:65:40:bd:6b:d1:e2:62:b8:
9b:34:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:28:16 2026 by rpki-client