Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: qAApSSoYPdyuFIx69EUn+16s8UqUHyPoNt+/cYDp0fY=
Subject key identifier: A1:D2:0B:48:BE:85:57:47:1B:8A:B7:2E:FB:19:B5:0E:93:C7:A2:C6
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 01A0CF6D53EE2E6CED269EFF6B8BB6C28DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 18:00:43 +0000
Manifest this update: Wed 23 Sep 2026 18:00:43 +0000
Manifest next update: Thu 24 Sep 2026 18:00:43 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: 2gqaFf0CzGzk6FHXhnEQdAeJfddLYAOhPSqfKyFOSrs=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:53:ee:2e:6c:ed:26:9e:ff:6b:8b:b6:c2:8d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Sep 23 18:00:43 2026 GMT
Not After : Sep 24 18:00:43 2026 GMT
Subject: CN=a1d20b48be8557471b8ab72efb19b50e93c7a2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a5:3e:5c:9b:58:07:c0:83:ca:16:1c:62:d4:
c2:1e:1c:05:4e:f7:3c:ab:57:24:55:c4:c5:dd:a7:
f3:a3:30:e2:a7:df:6e:4c:bb:ca:6a:3e:a5:22:97:
13:8f:bc:68:07:73:c7:22:c7:8d:66:12:fd:07:3e:
9c:82:86:96:f7:d3:dc:c9:56:b0:51:10:62:5e:a5:
96:58:25:c1:08:bf:e5:df:85:54:19:34:96:2f:e2:
12:f6:ba:27:47:91:da:23:ae:17:e8:e6:63:5a:82:
29:b0:15:15:11:3f:06:f7:4f:cb:17:58:02:2f:5a:
00:95:2d:34:0f:1b:0f:41:58:bd:4a:ba:e1:ae:31:
9a:3a:25:da:92:64:86:bc:e2:14:0e:0d:87:da:44:
a8:b1:db:02:25:33:63:0f:bc:39:ae:3a:70:15:68:
5e:4f:34:85:e7:a4:64:8e:52:4e:c7:85:bd:e1:5e:
f4:5c:66:83:c2:29:d8:4e:94:76:ab:50:c1:3f:29:
ac:d9:14:f5:1f:d7:f6:0a:33:5e:74:76:d3:91:01:
04:5e:e1:05:d5:65:bb:77:e2:94:dc:7d:61:25:89:
8b:a6:56:ba:95:ba:ff:6d:83:dc:65:65:3a:08:81:
fe:42:b2:03:01:4b:7b:61:51:a7:c5:52:94:07:0b:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D2:0B:48:BE:85:57:47:1B:8A:B7:2E:FB:19:B5:0E:93:C7:A2:C6
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d7:ca:56:d1:6a:2e:cf:cd:b8:69:84:b1:2f:a3:8e:9f:85:
27:69:d6:92:5d:01:90:bb:36:cb:ab:19:39:3c:20:ac:d1:9c:
db:b2:f9:36:39:b7:83:56:0c:65:da:ad:e7:1d:8a:e6:8a:32:
2a:70:78:8f:39:72:56:51:a1:69:53:21:49:78:40:46:dc:9c:
5f:a8:59:4e:85:79:f3:fc:e7:5c:4d:65:4a:de:80:21:c9:4a:
63:4c:9e:fc:d2:7f:76:ce:dc:dc:69:3b:f7:b2:cd:08:c4:5e:
3e:74:16:ab:79:eb:50:d1:22:42:ac:ad:51:1b:52:8e:42:7e:
1d:fe:c5:5b:ce:27:b9:9e:1a:06:c9:dd:8a:e9:0a:1f:c0:e7:
44:09:98:f6:01:cd:d9:12:1d:44:d5:29:44:07:1f:33:9b:46:
5b:05:44:51:71:7b:84:9b:af:c8:b6:5e:e4:29:bb:72:6a:dd:
d7:2e:57:34:d0:e6:84:43:8d:5f:7e:f1:cc:03:05:04:bd:83:
9f:88:22:15:ae:96:cc:99:78:e6:ee:b3:c8:0d:95:e5:78:b4:
d9:87:f3:e1:cb:95:bb:14:83:48:d9:5c:c7:b7:7b:5f:56:76:
68:88:8b:d0:15:b4:6e:f4:ee:a8:eb:ea:cb:a4:73:a1:58:20:
a4:bd:eb:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPbVPuLmztJp7/a4u2wo3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MDMyYmRiMTI4Yzg2ZTAwYjIxYzc3OTU5YTgwMTFjNDBk
MDY1MGMwHhcNMjYwOTIzMTgwMDQzWhcNMjYwOTI0MTgwMDQzWjAzMTEwLwYDVQQD
EyhhMWQyMGI0OGJlODU1NzQ3MWI4YWI3MmVmYjE5YjUwZTkzYzdhMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6U+XJtYB8CDyhYcYtTCHhwFTvc8
q1ckVcTF3afzozDip99uTLvKaj6lIpcTj7xoB3PHIseNZhL9Bz6cgoaW99PcyVaw
URBiXqWWWCXBCL/l34VUGTSWL+IS9ronR5HaI64X6OZjWoIpsBUVET8G90/LF1gC
L1oAlS00DxsPQVi9SrrhrjGaOiXakmSGvOIUDg2H2kSosdsCJTNjD7w5rjpwFWhe
TzSF56RkjlJOx4W94V70XGaDwinYTpR2q1DBPyms2RT1H9f2CjNedHbTkQEEXuEF
1WW7d+KU3H1hJYmLpla6lbr/bYPcZWU6CIH+QrIDAUt7YVGnxVKUBwuFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHSC0i+hVdHG4q3LvsZtQ6Tx6LGMB8GA1UdIwQY
MBaAFLkDK9sSjIbgCyHHeVmoARxA0GUMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYt
ZmU4NDZmNzVkMTcwLzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iY2IwM2QtMWMxMS00NTE2LWE4OGYtZmU4NDZmNzVkMTcw
LzEvdVFNcjJ4S01odUFMSWNkNVdhZ0JIRURRWlF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdfKVtFq
Ls/NuGmEsS+jjp+FJ2nWkl0BkLs2y6sZOTwgrNGc27L5Njm3g1YMZdqt5x2K5ooy
KnB4jzlyVlGhaVMhSXhARtycX6hZToV58/znXE1lSt6AIclKY0ye/NJ/ds7c3Gk7
97LNCMRePnQWq3nrUNEiQqytURtSjkJ+Hf7FW84nuZ4aBsndiukKH8DnRAmY9gHN
2RIdRNUpRAcfM5tGWwVEUXF7hJuvyLZe5Cm7cmrd1y5XNNDmhEONX37xzAMFBL2D
n4giFa6WzJl45u6zyA2V5Xi02Yfz4cuVuxSDSNlcx7d7X1Z2aIiL0BW0bvTuqOvq
y6RzoVggpL3rQw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 02:45:11 2026 by rpki-client