Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: PAMZl9VL8sGVjjlLCD5c8fzYpCbcCp9tVYf/2eMvkSI=
Subject key identifier: CC:95:61:3B:A0:4D:61:99:D4:F5:E9:68:73:9B:77:10:2F:12:EB:A0
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 01A0EC9D1792721808C6F63DC5CF1A2D0D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 1688
Signing time: Tue 29 Sep 2026 10:01:53 +0000
Manifest this update: Tue 29 Sep 2026 10:01:53 +0000
Manifest next update: Wed 30 Sep 2026 10:01:53 +0000
Files and hashes: 1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: ToPDyveXAulhkSZNehYZiTRZlvPe2UhRiQrfHl5UX0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:9d:17:92:72:18:08:c6:f6:3d:c5:cf:1a:2d:0d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Sep 29 10:01:53 2026 GMT
Not After : Sep 30 10:01:53 2026 GMT
Subject: CN=cc95613ba04d6199d4f5e968739b77102f12eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:77:9f:1e:a1:13:97:d0:c0:9c:fb:46:13:
fc:d2:79:e8:ba:d1:5c:5e:77:15:6e:0e:69:35:6c:
06:3f:fb:eb:b1:3f:1a:ea:3c:76:de:60:b2:9f:93:
16:89:67:b6:09:de:03:ec:31:c1:92:81:ca:cd:a0:
0e:67:ce:b1:d2:82:12:4d:9a:2f:dd:84:8f:d9:dc:
cd:34:d5:99:d0:5f:b2:a0:5a:d1:ea:6e:0f:7c:4f:
fb:09:2a:09:d4:38:46:cc:1b:ef:ea:6a:09:54:6b:
64:32:a8:f8:6f:50:89:d3:4f:1d:8f:b5:fe:ec:11:
f7:10:d0:87:cc:d0:4a:80:d5:72:aa:9d:e6:3d:36:
e8:12:91:78:31:c5:e3:c7:01:de:7c:84:bb:92:f8:
e3:1b:5e:6d:7c:5f:59:81:c8:e3:1c:9b:16:53:0d:
0b:3c:6b:c7:f0:2a:18:2b:ca:14:f2:66:35:9d:06:
50:70:1e:9a:b4:ad:d8:7d:c3:14:6a:33:4e:c8:d7:
cb:d3:c5:bd:fa:3d:ac:97:b5:4b:7f:9c:8d:54:a2:
e4:fa:24:80:1a:f8:3f:90:f4:de:41:e0:c8:23:a6:
91:7b:3f:3a:8f:e0:24:79:71:b3:5f:62:9b:60:59:
e1:e0:82:b7:59:c7:02:12:20:d5:cf:f1:f5:15:91:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:95:61:3B:A0:4D:61:99:D4:F5:E9:68:73:9B:77:10:2F:12:EB:A0
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a6:21:c1:7c:29:d2:c2:82:15:ba:3b:96:9d:af:3a:ae:22:
a2:59:b6:73:42:12:fd:43:ed:e1:40:85:45:12:b6:22:54:90:
13:a3:38:5d:1b:ef:4b:92:5a:9d:dd:9b:4d:e5:a0:69:77:78:
96:36:33:4b:39:b1:6f:26:41:2f:20:ad:e7:14:73:95:22:4c:
cb:ac:e4:a9:60:cc:52:90:50:0a:1a:4a:56:5f:4a:b8:4e:64:
8a:ff:32:84:2c:9c:7f:b4:ec:07:17:3f:75:ce:ea:7b:5c:0d:
0c:f7:92:dd:48:bb:e3:29:c8:40:74:01:a9:f6:03:38:0c:07:
ca:4e:de:da:bd:35:df:5a:00:92:00:af:6b:e2:83:22:a8:87:
4f:4a:9b:56:14:8c:10:b6:2c:e1:65:18:1b:9e:44:39:9a:2f:
57:d4:72:c9:e9:7e:5e:a2:47:ca:45:de:f8:bb:a2:45:d7:fe:
cc:e9:e0:4c:5f:5a:15:1b:79:89:df:e5:da:55:6b:e0:10:6b:
97:24:e1:d7:66:ec:3d:a5:34:a8:2c:ce:fb:15:0f:e8:65:5b:
71:b0:85:21:ae:26:9e:88:43:b9:ef:39:f7:f5:16:94:83:1f:
16:77:a5:38:80:7d:ff:cc:ac:6c:98:64:c4:2b:f4:b7:ff:3d:
26:18:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:24:26 2026 by rpki-client