Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: p5ZvWzW4sKiaxgKNNmpstlW4/vo8GHvIkUle18VuGK4=
Subject key identifier: 31:41:38:81:18:E0:A5:AE:B0:66:60:E3:3B:B2:06:6C:DB:7E:0C:A6
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 01A0CE23BE419C55755A1309C1DA86920BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 12:00:43 +0000
Manifest this update: Wed 23 Sep 2026 12:00:43 +0000
Manifest next update: Thu 24 Sep 2026 12:00:43 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: s+nEwQ09SzbOEarmwobdsrMTjheOUVyoFmObUtk2//Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:be:41:9c:55:75:5a:13:09:c1:da:86:92:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Sep 23 12:00:43 2026 GMT
Not After : Sep 24 12:00:43 2026 GMT
Subject: CN=3141388118e0a5aeb06660e33bb2066cdb7e0ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bd:e9:1a:91:d8:80:40:a9:2a:18:b7:e6:c5:
32:40:f0:d5:97:7a:6b:ea:14:c3:66:0d:99:69:c8:
38:2c:ae:8f:bd:5d:ef:af:18:d6:5e:65:c7:2c:de:
f5:68:b6:48:3d:38:75:72:8e:39:11:54:3e:b1:31:
7d:f7:f8:7d:a6:23:bf:9a:b7:2b:e2:b8:21:e2:54:
57:aa:df:02:88:10:c2:92:17:ec:8a:bf:59:d2:ed:
fa:c0:93:0e:3b:c9:fa:ea:44:92:06:c6:7c:6f:ca:
8c:26:01:24:3e:b9:bb:b2:bf:bd:45:8b:df:4e:07:
9a:12:0d:5e:bb:6a:22:dd:23:57:0a:56:ef:53:71:
33:12:18:9c:3e:6b:40:73:ec:cc:78:0c:b3:9f:e4:
18:7e:8c:e6:23:ee:ba:24:17:6e:06:ef:b4:6f:cd:
b9:a0:68:8d:02:4e:6a:dd:7c:99:d0:60:d2:21:a3:
42:5c:96:5f:4b:23:f9:25:ad:be:2b:c0:dc:75:2d:
d6:19:d9:d3:b3:3e:6a:96:c5:86:24:cb:9b:54:bc:
b0:e1:cf:6b:6b:62:84:ea:b0:a2:30:5b:e1:50:56:
dc:7f:fe:0a:ed:e7:3a:40:e9:0d:ee:0e:8e:8b:68:
be:e1:d0:bf:02:ac:54:44:cf:4d:45:e7:37:73:20:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:41:38:81:18:E0:A5:AE:B0:66:60:E3:3B:B2:06:6C:DB:7E:0C:A6
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ab:1a:c5:9d:1a:f0:3c:8d:3e:76:ee:a8:c7:3e:f3:6c:c5:
0a:2c:8e:3d:bc:c6:cd:cc:4b:41:c9:11:15:4c:62:7b:64:1e:
ab:0c:26:63:4e:f5:5d:2e:96:c7:1b:a7:29:02:27:a9:11:15:
78:47:ec:80:ea:b9:4b:b2:92:30:0f:a7:fb:5d:10:a8:c2:e5:
81:c2:2c:39:30:e3:03:7e:81:85:0b:8c:ca:2a:1e:0d:f5:ff:
6d:d5:89:bb:c9:b6:28:fb:69:a0:9d:3c:0f:f8:66:12:a3:47:
d0:1b:60:12:30:03:c1:68:70:41:39:bb:02:56:4c:0a:c3:ac:
e1:bc:f0:80:c6:43:3a:35:17:17:c4:f6:40:2a:73:90:85:db:
af:b2:9f:e4:50:8d:39:db:b4:12:0c:5c:e4:23:d9:39:8c:0b:
87:e3:e6:f1:c5:33:d0:24:b9:41:8f:cf:d8:22:fd:c0:f2:51:
32:4a:cd:9b:4f:d7:61:ae:8e:16:05:1e:1d:e6:bc:80:69:02:
37:87:ba:01:10:a4:c8:d9:af:67:47:9f:72:08:b6:7f:bf:a9:
da:97:28:e6:90:ca:72:bf:69:71:16:ee:e9:76:20:82:2f:51:
91:60:cd:e5:6b:a0:88:7c:13:0f:1f:1f:89:52:f5:33:b7:cd:
f6:2f:04:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI75BnFV1WhMJwdqGkgugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2I3NjY5Njg3MTYyOTZlNWJiYTBiY2U4Mzg1NmFlNzE2
NWI4YjgwHhcNMjYwOTIzMTIwMDQzWhcNMjYwOTI0MTIwMDQzWjAzMTEwLwYDVQQD
EygzMTQxMzg4MTE4ZTBhNWFlYjA2NjYwZTMzYmIyMDY2Y2RiN2UwY2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb3pGpHYgECpKhi35sUyQPDVl3pr
6hTDZg2Zacg4LK6PvV3vrxjWXmXHLN71aLZIPTh1co45EVQ+sTF99/h9piO/mrcr
4rgh4lRXqt8CiBDCkhfsir9Z0u36wJMOO8n66kSSBsZ8b8qMJgEkPrm7sr+9RYvf
TgeaEg1eu2oi3SNXClbvU3EzEhicPmtAc+zMeAyzn+QYfozmI+66JBduBu+0b825
oGiNAk5q3XyZ0GDSIaNCXJZfSyP5Ja2+K8DcdS3WGdnTsz5qlsWGJMubVLyw4c9r
a2KE6rCiMFvhUFbcf/4K7ec6QOkN7g6Oi2i+4dC/AqxURM9NRec3cyDDXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFBOIEY4KWusGZg4zuyBmzbfgymMB8GA1UdIwQY
MBaAFLh7dmlocWKW5bugvOg4Vq5xZbi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMt
M2Q2MTJmMzI0OTk2LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hM2VkZTYtYmMzMS00ZDAwLTkyNWMtM2Q2MTJmMzI0OTk2
LzEvdUh0MmFXaHhZcGJsdTZDODZEaFdybkZsdUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOasaxZ0a
8DyNPnbuqMc+82zFCiyOPbzGzcxLQckRFUxie2QeqwwmY071XS6WxxunKQInqREV
eEfsgOq5S7KSMA+n+10QqMLlgcIsOTDjA36BhQuMyioeDfX/bdWJu8m2KPtpoJ08
D/hmEqNH0BtgEjADwWhwQTm7AlZMCsOs4bzwgMZDOjUXF8T2QCpzkIXbr7Kf5FCN
Odu0Egxc5CPZOYwLh+Pm8cUz0CS5QY/P2CL9wPJRMkrNm0/XYa6OFgUeHea8gGkC
N4e6ARCkyNmvZ0efcgi2f7+p2pco5pDKcr9pcRbu6XYggi9RkWDN5WugiHwTDx8f
iVL1M7fN9i8EyQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:55 2026 by rpki-client