Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: T7yCIdI+/x72thsj7mX2lEwww72W/pO4QPPdpYUwog0=
Subject key identifier: D2:63:3A:60:BD:D3:91:B9:78:40:7D:FE:17:92:08:48:F7:41:87:FA
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 01A0D5DE5E3CBCBF8BC04DCF2AC3C5EE01CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 11CA
Signing time: Fri 25 Sep 2026 00:01:55 +0000
Manifest this update: Fri 25 Sep 2026 00:01:55 +0000
Manifest next update: Sat 26 Sep 2026 00:01:55 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: iO8wSAb12euyh2kHxoLyDH4FazMOfwXABBCJPyvvrFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:5e:3c:bc:bf:8b:c0:4d:cf:2a:c3:c5:ee:01:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Sep 25 00:01:55 2026 GMT
Not After : Sep 26 00:01:55 2026 GMT
Subject: CN=d2633a60bdd391b978407dfe17920848f74187fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:11:69:c3:12:c5:2c:48:4e:cc:7e:b2:d3:
f2:96:a2:76:44:b9:bd:c3:fe:89:09:c9:5a:71:2c:
56:7a:47:86:4e:c0:bb:c4:8a:d2:c5:ff:eb:7a:10:
12:8e:c3:5c:d3:01:0d:df:13:11:cc:5e:96:0c:9c:
b3:3c:90:b5:7e:11:33:7f:2b:a8:b8:07:20:87:2d:
a4:1d:ee:20:3e:74:fc:83:f9:af:62:42:f1:b8:e3:
b7:f9:7d:11:39:11:85:16:58:3b:4a:bb:81:6b:6c:
97:d1:49:82:22:30:d0:3c:35:da:3e:72:e8:62:1a:
68:36:1e:db:3c:96:a6:4e:2a:2c:bf:7f:ec:82:d1:
87:2b:24:93:e6:3a:25:74:42:86:b6:43:fe:0b:ed:
16:8d:0b:bc:21:63:74:39:d2:9c:28:e5:b6:28:89:
a6:f5:cc:cf:cc:30:24:e4:72:52:88:d0:08:87:7f:
02:7d:51:c4:34:26:59:59:a3:44:32:bd:a0:33:f8:
01:84:2a:7e:38:98:2e:e6:cc:ae:be:58:9b:33:e8:
35:1b:ec:3e:f0:8c:95:7c:ee:47:9c:97:99:dc:72:
b9:76:ff:76:23:23:50:20:e3:e4:90:f1:d7:e6:4e:
b3:1b:80:38:b8:98:ae:cf:22:cc:b2:98:f3:49:23:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:3A:60:BD:D3:91:B9:78:40:7D:FE:17:92:08:48:F7:41:87:FA
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:af:0b:cc:ba:b1:e3:11:6e:81:4a:30:36:03:00:1d:f7:ab:
56:5e:f6:68:47:96:67:8e:42:9f:db:17:d1:27:75:3d:9f:e4:
69:58:0d:81:e9:32:e1:3c:89:81:38:b7:4d:ac:2f:74:a9:92:
b8:d3:31:95:22:a9:e6:3e:c8:0a:87:9d:7a:94:0d:45:b5:f4:
85:14:05:e4:3f:6f:52:5e:db:61:8c:3e:bd:39:26:14:bf:27:
1d:fb:e6:12:8e:e4:01:b3:e1:01:af:47:72:39:38:61:80:66:
b2:b6:6f:d1:cf:55:66:de:96:56:d3:c8:26:12:71:18:d7:98:
62:07:01:d7:a6:54:4a:a1:17:b4:8f:90:b8:7f:62:bd:f2:71:
b3:6c:04:c9:67:81:d3:cf:f0:ef:dc:c8:f2:bb:75:b4:02:65:
0b:f2:31:64:a0:99:19:6a:76:3a:05:6c:76:de:87:e0:3a:d9:
ed:16:10:2d:82:51:13:45:6b:e7:d5:1e:04:f5:da:ab:e2:87:
ed:fc:a1:56:fd:e3:33:81:41:9d:fe:89:dc:17:6f:2b:2f:45:
d2:fa:33:bb:2c:fb:b3:82:02:77:57:4f:41:f7:bc:c5:a3:22:
ed:da:f6:12:16:87:e7:cf:a8:43:0e:90:a8:78:93:22:fa:0f:
39:a2:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:25:31 2026 by rpki-client