Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: fdKPPvdcV3BJmH2w12XOUdksxGdTwLIM98/IBmt0HV8=
Subject key identifier: 8A:7E:89:1A:12:BF:11:D0:E9:E0:74:FC:BC:6C:3F:56:9B:EB:E2:CA
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 01A1DCB97E770CFE3FE3925D05B73ADEC58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: 0495
Signing time: Sun 15 Nov 2026 01:01:46 +0000
Manifest this update: Sun 15 Nov 2026 01:01:46 +0000
Manifest next update: Mon 16 Nov 2026 01:01:46 +0000
Files and hashes: 1: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: hTRl45EuGFekOr3MpWwe8eg58d0lOTP6HQ1Wr1faEQ8=)
2: xCaYNGpP4uLWhfHqxPMUEQYMbhk.roa (hash: M179D5ht95HXvmui8qseKlw67qEOyUtRNjFtSwuAk2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:7e:77:0c:fe:3f:e3:92:5d:05:b7:3a:de:c5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Nov 15 01:01:46 2026 GMT
Not After : Nov 16 01:01:46 2026 GMT
Subject: CN=8a7e891a12bf11d0e9e074fcbc6c3f569bebe2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:d4:aa:c0:ef:a6:71:2d:fb:f0:0c:5f:6d:
65:cf:d8:e2:9f:8b:22:40:44:66:60:17:a7:b2:bb:
af:a2:11:a0:c7:6b:63:f4:43:03:08:79:ea:40:51:
73:36:b8:f2:ef:33:ea:46:c4:7f:b7:40:fc:26:da:
ed:a3:af:f7:7f:ff:07:9a:4b:6b:00:ea:0e:2d:e6:
cb:1e:b1:82:6f:0a:3c:e7:9d:69:e0:29:13:3b:87:
32:f3:da:f9:13:d1:0a:54:63:cf:ff:61:a6:f3:8b:
b8:c6:fd:37:cb:45:77:12:8b:3c:00:48:07:74:b1:
cf:47:88:b9:79:85:d0:5b:b5:50:19:f1:36:51:97:
f3:c5:26:29:e4:95:e4:ff:be:e2:4a:4b:e8:fc:8d:
33:72:f9:20:02:16:8e:1d:1a:84:88:60:42:e6:dd:
2d:09:8c:66:19:5b:9d:54:e3:36:fa:61:df:cd:fc:
d2:d0:1c:8c:61:2f:79:61:3a:38:cb:c7:b9:64:84:
4d:fc:a7:3e:c0:2e:e7:a1:72:b6:06:9f:8d:f2:5d:
09:0c:4a:54:94:73:b2:76:aa:8b:ab:70:bc:0c:35:
25:d8:17:e3:fc:aa:1b:a7:24:81:4d:8c:8e:23:00:
34:78:78:21:9d:b7:77:5a:f7:52:2c:cc:53:7a:71:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7E:89:1A:12:BF:11:D0:E9:E0:74:FC:BC:6C:3F:56:9B:EB:E2:CA
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:f3:9f:7d:b1:2f:01:5b:ff:32:24:56:69:e7:e9:a8:e0:7c:
91:8b:dd:db:97:f6:c6:b2:ce:c5:0d:75:73:9b:c3:1d:0b:91:
ef:7c:cd:19:1c:b7:d3:9d:ce:70:64:1e:62:72:4b:1f:ad:31:
1d:cc:40:54:d7:bb:e4:ec:b6:c5:2b:c4:f0:e0:eb:31:c4:86:
66:ba:4b:df:3a:e6:29:7a:14:04:eb:45:c0:db:6f:bd:c7:88:
cc:6b:ae:36:fd:22:81:3b:93:dd:58:ea:ed:c5:63:cc:9c:11:
33:4c:ba:1a:7a:11:bd:bf:54:ee:9c:ab:f2:9c:20:7c:cf:05:
49:e2:38:68:dd:ec:31:85:34:2b:70:08:bd:6a:16:f0:86:f1:
6f:17:27:d8:6f:48:b5:a7:4e:6d:85:fe:00:00:f4:8e:b4:2b:
ff:4b:2e:4b:3f:ec:91:33:e3:de:d0:a3:89:b4:f1:41:e9:d4:
13:b5:3f:c7:6a:ad:c9:74:a2:a4:11:9c:f5:0c:28:74:d5:88:
b6:f1:3c:08:18:fc:89:2f:4c:13:22:1d:25:a4:da:ca:51:27:
65:ba:4e:35:fa:2d:be:82:70:19:af:8d:9d:6b:6c:ab:4e:29:
f0:3c:33:47:1b:00:74:22:4a:0c:e3:9b:25:d4:00:d9:f6:67:
98:a4:f6:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcuX53DP4/45JdBbc63sWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYTNiZGIyYzc4NDZmYmY3ZDAwODdkYjQ1NTJlZWIzNjNk
ZjllYTUwHhcNMjYxMTE1MDEwMTQ2WhcNMjYxMTE2MDEwMTQ2WjAzMTEwLwYDVQQD
Eyg4YTdlODkxYTEyYmYxMWQwZTllMDc0ZmNiYzZjM2Y1NjliZWJlMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuHUqsDvpnEt+/AMX21lz9jin4si
QERmYBensruvohGgx2tj9EMDCHnqQFFzNrjy7zPqRsR/t0D8Jtrto6/3f/8Hmktr
AOoOLebLHrGCbwo8551p4CkTO4cy89r5E9EKVGPP/2Gm84u4xv03y0V3Eos8AEgH
dLHPR4i5eYXQW7VQGfE2UZfzxSYp5JXk/77iSkvo/I0zcvkgAhaOHRqEiGBC5t0t
CYxmGVudVOM2+mHfzfzS0ByMYS95YTo4y8e5ZIRN/Kc+wC7noXK2Bp+N8l0JDEpU
lHOydqqLq3C8DDUl2Bfj/KobpySBTYyOIwA0eHghnbd3WvdSLMxTenFrvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIp+iRoSvxHQ6eB0/LxsP1ab6+LKMB8GA1UdIwQY
MBaAFLujvbLHhG+/fQCH20VS7rNj356lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMt
YWEzNGQxZmZmMzg3LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8yNmQxY2ItZTFhNS00OTBjLTgxYmMtYWEzNGQxZmZmMzg3
LzEvdTZPOXNzZUViNzk5QUlmYlJWTHVzMlBmbnFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvOffbEv
AVv/MiRWaefpqOB8kYvd25f2xrLOxQ11c5vDHQuR73zNGRy3053OcGQeYnJLH60x
HcxAVNe75Oy2xSvE8ODrMcSGZrpL3zrmKXoUBOtFwNtvvceIzGuuNv0igTuT3Vjq
7cVjzJwRM0y6GnoRvb9U7pyr8pwgfM8FSeI4aN3sMYU0K3AIvWoW8Ibxbxcn2G9I
tadObYX+AAD0jrQr/0suSz/skTPj3tCjibTxQenUE7U/x2qtyXSipBGc9QwodNWI
tvE8CBj8iS9MEyIdJaTaylEnZbpONfotvoJwGa+NnWtsq04p8DwzRxsAdCJKDOOb
JdQA2fZnmKT2gQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:10:42 2026 by rpki-client