Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: WHorlSfA4gP7Qqy552PhzfCySRgDokuu+M6udb5/rkM=
Subject key identifier: D3:41:47:1F:CD:6E:A5:04:D0:92:54:A4:77:F0:34:0B:48:EB:3E:A0
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 01A0DBE027DB3C053BA227F0160CDB82E0F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: 040F
Signing time: Sat 26 Sep 2026 04:01:35 +0000
Manifest this update: Sat 26 Sep 2026 04:01:35 +0000
Manifest next update: Sun 27 Sep 2026 04:01:35 +0000
Files and hashes: 1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: l/LxtXhfPSGK1XrwkQAUuzXLBDAmXC95L7VE16PkYww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 04:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:27:db:3c:05:3b:a2:27:f0:16:0c:db:82:e0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Sep 26 04:01:35 2026 GMT
Not After : Sep 27 04:01:35 2026 GMT
Subject: CN=d341471fcd6ea504d09254a477f0340b48eb3ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:cd:87:dd:d7:1f:77:cc:40:09:3d:e1:99:
0f:e1:20:61:79:5a:ee:3b:22:9c:3c:aa:8b:7f:09:
f6:e7:94:36:8b:30:02:f7:70:3b:01:a2:35:52:06:
04:f8:f9:9a:a1:0b:2f:8d:56:b0:cf:07:b3:5d:1e:
0c:af:3b:0d:21:67:14:d4:27:47:b8:48:e0:24:f3:
c4:62:31:82:71:e1:0f:ec:e1:7a:94:61:49:cc:fc:
86:ca:05:27:ac:c2:fd:09:d8:e4:3c:80:b3:37:6c:
e6:e4:f0:91:a8:18:7d:75:21:26:4b:be:9e:13:7e:
7a:ab:d2:0b:6d:9d:5c:77:48:df:ca:cd:fe:6d:3a:
df:c8:b6:37:b0:36:03:fb:38:7d:66:7a:8c:42:1f:
0c:a4:4e:02:6b:08:ff:13:7c:b4:2e:12:34:3a:a3:
22:6b:8e:4e:43:6a:0c:2a:b4:33:ad:89:cd:cd:b3:
db:fc:d9:82:75:ea:38:40:76:cb:94:44:04:bd:b3:
85:60:78:48:d4:89:ae:15:0f:ec:8d:1c:85:44:54:
82:81:1e:38:6d:33:38:5f:fe:d9:8c:e6:60:38:e4:
6d:ff:38:03:de:58:ea:5e:20:dd:8d:9b:15:06:00:
a6:7f:f6:fc:cb:28:b4:db:aa:43:c3:4b:b7:f3:fe:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:41:47:1F:CD:6E:A5:04:D0:92:54:A4:77:F0:34:0B:48:EB:3E:A0
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:7c:24:81:e1:cd:04:44:ac:5a:84:5c:84:cb:6d:31:34:35:
1c:ac:d8:df:92:1b:5b:15:e4:d2:3e:e6:e9:cb:ea:0c:d4:d1:
91:71:57:8a:c2:4b:ed:e0:6a:c2:8b:2c:ec:2c:cf:1c:a8:a4:
96:f7:2d:80:d6:6a:43:cd:f6:1c:0b:75:df:2a:1e:3d:df:c7:
55:6b:e7:ca:68:82:93:7f:b7:3d:c6:69:30:92:b0:5c:34:a4:
54:2b:4d:0f:9b:41:92:08:af:fd:31:07:d6:fc:14:a8:ad:33:
ca:82:db:57:76:f8:15:da:93:ab:44:6b:5f:d6:b1:9d:0a:c5:
08:11:54:99:aa:48:9c:ba:0f:01:a2:ac:e8:de:b9:c5:eb:f2:
7f:f8:ef:27:8a:8b:b3:27:b6:84:ad:54:2d:dc:31:73:5c:c9:
d2:4e:e9:f7:47:9b:9e:8a:7f:66:62:17:ae:65:24:13:5f:65:
c3:f2:f2:5d:95:0f:d3:e5:51:51:68:ff:02:84:a9:34:a3:22:
4d:7e:0a:5e:4f:77:52:55:d9:e8:7e:2d:ba:a2:ba:c8:b1:bc:
74:d1:19:56:01:9c:3f:72:b6:2c:b9:08:39:9b:a1:72:af:39:
08:0e:83:75:63:ec:43:f5:0c:d5:11:37:2b:fe:28:7b:da:49:
a8:8b:1a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4CfbPAU7oifwFgzbguDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTNiZGIyYzc4NDZmYmY3ZDAwODdkYjQ1NTJlZWIzNjNk
ZjllYTUwHhcNMjYwOTI2MDQwMTM1WhcNMjYwOTI3MDQwMTM1WjAzMTEwLwYDVQQD
EyhkMzQxNDcxZmNkNmVhNTA0ZDA5MjU0YTQ3N2YwMzQwYjQ4ZWIzZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8vNh93XH3fMQAk94ZkP4SBheVru
OyKcPKqLfwn255Q2izAC93A7AaI1UgYE+PmaoQsvjVawzwezXR4MrzsNIWcU1CdH
uEjgJPPEYjGCceEP7OF6lGFJzPyGygUnrML9CdjkPICzN2zm5PCRqBh9dSEmS76e
E356q9ILbZ1cd0jfys3+bTrfyLY3sDYD+zh9ZnqMQh8MpE4Cawj/E3y0LhI0OqMi
a45OQ2oMKrQzrYnNzbPb/NmCdeo4QHbLlEQEvbOFYHhI1ImuFQ/sjRyFRFSCgR44
bTM4X/7ZjOZgOORt/zgD3ljqXiDdjZsVBgCmf/b8yyi026pDw0u38/6BJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNBRx/NbqUE0JJUpHfwNAtI6z6gMB8GA1UdIwQY
MBaAFLujvbLHhG+/fQCH20VS7rNj356lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMt
YWEzNGQxZmZmMzg3LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMtYWEzNGQxZmZmMzg3
LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3wkgeHN
BESsWoRchMttMTQ1HKzY35IbWxXk0j7m6cvqDNTRkXFXisJL7eBqwoss7CzPHKik
lvctgNZqQ832HAt13yoePd/HVWvnymiCk3+3PcZpMJKwXDSkVCtND5tBkgiv/TEH
1vwUqK0zyoLbV3b4FdqTq0RrX9axnQrFCBFUmapInLoPAaKs6N65xevyf/jvJ4qL
sye2hK1ULdwxc1zJ0k7p90ebnop/ZmIXrmUkE19lw/LyXZUP0+VRUWj/AoSpNKMi
TX4KXk93UlXZ6H4tuqK6yLG8dNEZVgGcP3K2LLkIOZuhcq85CA6DdWPsQ/UM1RE3
K/4oe9pJqIsaTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:28 2026 by rpki-client