Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: +yAk+ymFHHbNpaErsKwYt1cBaSSNx4L+XGNgmUJfjgE=
Subject key identifier: 72:24:9A:76:1B:5D:BF:5B:3F:D3:C6:31:F3:F1:F0:E9:40:D4:C2:4D
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 01A0CE5A3E9F6B288309D09ADEF60876CED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 10E8
Signing time: Wed 23 Sep 2026 13:00:15 +0000
Manifest this update: Wed 23 Sep 2026 13:00:15 +0000
Manifest next update: Thu 24 Sep 2026 13:00:15 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: tRKzxrIAJvo0zKl95OBxYLKvQzSlyRabNslUOFwm3RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:3e:9f:6b:28:83:09:d0:9a:de:f6:08:76:ce:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Sep 23 13:00:15 2026 GMT
Not After : Sep 24 13:00:15 2026 GMT
Subject: CN=72249a761b5dbf5b3fd3c631f3f1f0e940d4c24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:de:af:8d:27:9a:6f:dd:5f:55:69:e3:01:
a2:98:41:67:11:47:3e:98:c7:4b:16:e9:1a:2a:b6:
15:8d:86:14:63:ba:a9:f3:58:82:74:c0:58:35:b5:
d4:a3:24:24:b8:09:31:dc:ca:0a:39:66:fb:33:0b:
fc:ff:1a:89:d2:ea:c1:3b:11:41:e5:95:0b:20:05:
80:aa:02:ce:4f:5e:24:ce:9f:79:24:80:db:e0:71:
cf:da:ae:67:c6:54:4a:fa:58:04:24:fd:e1:05:03:
01:ad:3c:a1:d0:fb:85:41:b5:9c:e6:7f:26:97:7e:
c5:5e:00:ed:45:e7:8d:0c:52:68:3a:21:c8:02:c6:
19:74:04:c3:ba:89:48:05:b5:6a:71:cc:5b:3f:a2:
a0:c2:06:9e:47:1e:df:5b:1d:e6:57:f3:2c:11:36:
9d:d8:28:00:47:51:13:9f:80:68:99:22:ec:20:36:
07:d9:c1:dc:d7:c2:94:1f:33:10:80:26:0b:81:ab:
71:f6:af:70:b5:f1:39:b0:ec:4f:ec:43:9d:e2:a5:
4b:b9:8b:af:07:ec:d0:98:5e:61:fa:bd:88:7a:b3:
2b:e2:8e:bf:75:59:1a:95:e3:80:6c:fd:43:90:79:
98:a3:36:56:0b:23:d0:a4:04:92:47:67:07:b3:c4:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:24:9A:76:1B:5D:BF:5B:3F:D3:C6:31:F3:F1:F0:E9:40:D4:C2:4D
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f2:15:b4:7b:e6:8a:6b:19:91:79:02:57:68:93:ad:ef:0b:
eb:6b:57:b9:59:19:88:61:27:bb:e9:32:ff:03:7c:53:13:cf:
3e:e6:22:59:89:d3:63:90:2b:e7:df:36:91:8d:b4:69:dd:c5:
29:6c:03:1c:a6:23:df:1a:9e:f9:2a:c0:31:db:44:49:fd:71:
79:46:05:6d:50:1d:9a:ed:ab:8c:08:63:e7:a5:5d:01:ae:cf:
7e:5d:88:1f:ee:b2:da:3c:de:0c:ff:2b:55:85:48:59:1c:04:
0d:a9:52:05:ec:0f:5e:e4:64:09:14:78:79:bb:17:60:1b:60:
70:c2:8b:0f:18:1e:5d:13:e5:e8:91:d1:cc:9a:1d:be:38:68:
42:9d:99:5c:91:c7:d2:5d:a9:53:d7:e9:77:5e:2f:a4:db:5e:
9b:96:dd:42:a4:22:51:ee:d7:62:80:cb:4d:35:37:dd:26:cf:
a7:b4:ee:86:e6:a4:06:54:e0:a7:9d:93:56:07:ba:ea:43:a8:
16:3c:95:a7:c7:7c:de:25:16:f5:b7:83:a1:0f:75:e7:3c:15:
68:11:6a:d6:e6:ed:58:e3:05:95:3f:f9:68:18:98:5d:1d:6c:
e7:7b:f8:07:aa:3e:97:0b:95:6a:92:02:78:8d:24:35:f9:39:
91:33:b7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:14:44 2026 by rpki-client