Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
File: B_U9OUYncp8GiDprXg8JnzHMke4.mft (raw, json)
Hash identifier: Kj7yM+nvzM6Zi8QftVI50Dzw8HdoUEw8rmb/9foYgbc=
Subject key identifier: D3:66:94:27:F4:87:20:D3:48:CB:00:87:B0:CC:A0:27:0F:74:E2:F8
Authority key identifier: 07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
Certificate issuer: /CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Certificate serial: 01A0D0EE5DEDFF54B83DD200DF36650619EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
Manifest number: 39
Signing time: Thu 24 Sep 2026 01:01:17 +0000
Manifest this update: Thu 24 Sep 2026 01:01:17 +0000
Manifest next update: Fri 25 Sep 2026 01:01:17 +0000
Files and hashes: 1: 7WOSlFPLYKbaSc0AywlRaUbStyY.roa (hash: uO8CfwrbWZwCpJPs/hwdVR7Fs/7M1x6qs0VxV8ncyjU=)
2: B_U9OUYncp8GiDprXg8JnzHMke4.crl (hash: sK74LrN4i0Da5kn5pCvrDc170lauk4ambUDBT9Hef2o=)
3: s_LGdjThiFcrMxcJkmwRhZvzZNk.roa (hash: E33m6eSC8t6LmYaovZYmAszctVcFzgqvduI9yyCSdCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:5d:ed:ff:54:b8:3d:d2:00:df:36:65:06:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Validity
Not Before: Sep 24 01:01:17 2026 GMT
Not After : Sep 25 01:01:17 2026 GMT
Subject: CN=d3669427f48720d348cb0087b0cca0270f74e2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:89:f4:2a:9e:86:71:84:59:68:fc:a8:f1:4d:
b1:5e:82:bb:9a:b3:a5:80:3a:cf:94:51:f6:c1:c7:
e8:38:61:67:66:86:82:09:ba:fa:9b:19:bf:c3:83:
7e:86:2a:4b:4d:cf:a0:8f:b1:19:8f:44:c8:54:7a:
b4:2a:ff:ba:87:66:ee:0f:fc:d1:1b:d2:54:39:5c:
fd:c6:98:38:33:22:17:07:9a:e9:a7:f8:ab:fe:52:
f6:e8:b6:6f:56:17:ff:7f:12:f0:ff:8c:75:99:80:
40:0c:72:05:1d:0d:b2:87:81:a8:e6:d2:b5:1c:0b:
7b:19:ee:98:2c:b0:8a:11:d0:7f:72:e9:46:68:03:
ff:73:31:e5:81:05:a2:a6:5b:c3:44:60:cc:fd:da:
aa:b7:27:cc:44:e0:ff:0a:cc:c2:e3:5a:17:e2:c5:
9f:c0:70:57:62:cd:f3:1b:22:83:5e:2c:65:fe:05:
dc:d7:41:82:15:36:77:66:8f:08:d4:26:c8:49:1a:
61:40:45:b9:09:ed:6f:5c:f9:d7:46:0a:02:a1:69:
bc:b3:1f:cb:7f:d2:e3:9b:5f:2e:0e:c0:df:11:42:
bc:20:fc:6c:ec:96:65:ab:31:00:c4:00:32:bc:a2:
5f:af:ae:da:9f:b7:30:b9:f7:fd:d4:54:2b:2a:49:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:66:94:27:F4:87:20:D3:48:CB:00:87:B0:CC:A0:27:0F:74:E2:F8
X509v3 Authority Key Identifier:
keyid:07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:84:11:43:b6:20:01:7f:7a:f0:06:53:34:b1:0b:af:26:6b:
99:07:d1:23:90:75:d6:8b:17:c8:54:e2:6e:ba:a4:f8:2c:2e:
38:1a:b3:a9:cf:e2:64:9c:a8:51:a2:48:38:30:58:ed:aa:cc:
f4:ca:20:72:b5:4a:3a:09:31:3d:8f:22:3e:fb:66:ee:bf:6c:
20:d4:5f:71:2c:c6:e0:4c:42:c7:52:01:05:a8:6a:c2:ca:b2:
9b:25:39:82:8b:df:b0:61:63:03:e9:d9:39:9a:52:39:f7:82:
ce:a6:45:f7:e4:46:32:64:ad:54:a9:c7:61:fe:0f:6e:d9:31:
75:ff:ab:c2:6c:79:70:7f:e7:02:96:39:3c:e2:ff:98:b5:cf:
c7:50:d1:45:31:64:e3:39:f0:61:0b:c3:e5:a6:04:e1:51:a2:
69:62:2b:9c:c2:93:8a:66:4a:aa:d0:f3:b4:94:15:1a:8f:a9:
29:de:e2:dd:1b:b3:ef:43:6e:c7:bf:7b:49:ed:56:8b:96:83:
18:75:0f:02:e8:a0:d1:fe:d2:84:9d:05:fd:0f:06:df:0e:9a:
65:17:a2:38:76:f4:a7:a5:b4:5b:af:9e:c8:98:50:22:f7:dd:
87:a2:da:57:cd:b3:1f:69:51:35:31:e4:e1:81:a1:5e:eb:e7:
fa:9a:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:27:23 2026 by rpki-client