Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: EEgZG7A1X0JymbkEhB2dH2Ip/URjEq755gjuQnZ+oDA=
Subject key identifier: D0:2D:5A:AD:90:74:F8:BA:15:C6:60:BC:89:0C:B6:42:A5:B0:0A:6A
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01A0DB3AF8216DC33BA627351A38F2629545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 01:01:09 +0000
Manifest this update: Sat 26 Sep 2026 01:01:09 +0000
Manifest next update: Sun 27 Sep 2026 01:01:09 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: u/yZ3YMlWbX5L4adM75eAAIxiez08jBpTJqBIJnmtjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:f8:21:6d:c3:3b:a6:27:35:1a:38:f2:62:95:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Sep 26 01:01:09 2026 GMT
Not After : Sep 27 01:01:09 2026 GMT
Subject: CN=d02d5aad9074f8ba15c660bc890cb642a5b00a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:4e:c8:0f:e2:d3:1d:78:6d:27:51:a4:55:
42:d7:76:02:ae:be:f3:28:31:65:7a:6e:06:f9:21:
36:8d:8b:63:d6:5b:40:99:c9:bc:86:73:2f:3b:6a:
e6:ef:b7:b5:5b:d5:38:12:b4:ac:e6:62:52:26:e7:
ad:f1:a1:c1:05:e6:e0:66:5a:99:12:61:c1:62:32:
4c:f6:84:76:91:a5:a7:49:f7:c5:ad:f5:92:2d:33:
32:43:38:50:15:b1:49:6e:ba:b7:c1:86:85:bf:33:
b1:b3:32:34:45:73:ba:42:bf:61:93:ee:cf:aa:e5:
f6:c6:e8:2b:6f:af:94:a4:19:3d:f4:37:98:03:8e:
e4:5c:54:e6:a1:31:da:fc:84:e1:1a:5a:4a:28:dd:
49:2c:b2:a5:7a:93:f8:71:68:0e:3a:e7:5d:89:fc:
05:9e:dc:69:cf:a5:0e:63:9a:d9:99:8e:d2:b6:3f:
a4:b0:72:7d:c8:94:10:8f:10:55:8b:9f:e1:59:93:
ac:48:8f:ca:26:a4:16:8e:01:e4:c7:cd:57:ba:a9:
cc:b0:1e:e3:b2:55:de:95:eb:66:11:b1:aa:68:aa:
2c:f4:f1:28:fe:29:f5:84:82:a6:91:b7:bf:8c:19:
5e:fe:07:08:35:51:7c:5e:58:60:e6:e4:c1:4b:b4:
11:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:5A:AD:90:74:F8:BA:15:C6:60:BC:89:0C:B6:42:A5:B0:0A:6A
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ef:fa:7a:fe:56:e6:5d:c0:00:50:c6:a3:a5:54:d3:e5:cb:
19:2b:7d:08:ed:f5:55:72:0c:5b:32:37:8a:d0:02:a5:8f:e1:
02:fa:ab:2c:22:fe:c9:4f:33:5d:f6:27:17:12:d1:a2:f5:3e:
66:0a:67:51:86:bc:2e:dc:40:a7:69:cd:b8:bb:8d:ff:05:67:
87:a2:33:6a:8f:3f:ac:40:41:0b:c0:fb:34:04:d0:fd:0f:01:
7a:27:a5:7b:2d:3b:c7:49:6a:5c:96:f4:88:26:cf:62:e3:99:
cd:33:56:21:92:16:c6:96:d0:88:74:11:11:c5:28:f6:f6:e6:
40:86:55:11:1a:f9:0d:9d:46:ce:54:ff:bc:2b:41:6f:31:d5:
04:bc:a3:e9:ce:bc:34:14:40:a5:d2:2e:90:40:d5:36:47:89:
9e:35:7e:e8:f6:dd:2b:cf:40:09:6b:8e:cc:e7:ac:e1:e4:90:
45:3f:15:5f:e5:3f:c5:5b:dc:95:56:64:51:aa:a9:12:16:56:
ca:18:3d:0a:de:a7:5c:5f:f0:8c:47:fc:e9:42:22:7a:b2:68:
bc:f2:4f:d8:fe:39:dc:66:c8:ea:20:f6:f4:d7:18:63:0d:cb:
58:bf:fe:13:96:24:43:13:18:9b:91:cf:c3:28:5c:78:ca:cf:
9a:8b:32:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbOvghbcM7pic1GjjyYpVFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjYwOTI2MDEwMTA5WhcNMjYwOTI3MDEwMTA5WjAzMTEwLwYDVQQD
EyhkMDJkNWFhZDkwNzRmOGJhMTVjNjYwYmM4OTBjYjY0MmE1YjAwYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNBOyA/i0x14bSdRpFVC13YCrr7z
KDFlem4G+SE2jYtj1ltAmcm8hnMvO2rm77e1W9U4ErSs5mJSJuet8aHBBebgZlqZ
EmHBYjJM9oR2kaWnSffFrfWSLTMyQzhQFbFJbrq3wYaFvzOxszI0RXO6Qr9hk+7P
quX2xugrb6+UpBk99DeYA47kXFTmoTHa/IThGlpKKN1JLLKlepP4cWgOOuddifwF
ntxpz6UOY5rZmY7Stj+ksHJ9yJQQjxBVi5/hWZOsSI/KJqQWjgHkx81XuqnMsB7j
slXeletmEbGqaKos9PEo/in1hIKmkbe/jBle/gcINVF8Xlhg5uTBS7QRPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAtWq2QdPi6FcZgvIkMtkKlsApqMB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO/6ev5W
5l3AAFDGo6VU0+XLGSt9CO31VXIMWzI3itACpY/hAvqrLCL+yU8zXfYnFxLRovU+
ZgpnUYa8LtxAp2nNuLuN/wVnh6Izao8/rEBBC8D7NATQ/Q8Beieley07x0lqXJb0
iCbPYuOZzTNWIZIWxpbQiHQREcUo9vbmQIZVERr5DZ1GzlT/vCtBbzHVBLyj6c68
NBRApdIukEDVNkeJnjV+6PbdK89ACWuOzOes4eSQRT8VX+U/xVvclVZkUaqpEhZW
yhg9Ct6nXF/wjEf86UIierJovPJP2P453GbI6iD29NcYYw3LWL/+E5YkQxMYm5HP
wyhceMrPmosyYQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 07:06:28 2026 by rpki-client