Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File: ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier: wImv3PRsGonLyRRYCs3sZol72iuZEjPqEQYdnpAfxNc=
Subject key identifier: 21:9A:F6:ED:7B:F5:29:39:4A:64:21:09:13:F7:F1:CA:08:34:CD:14
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer: /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial: 01A0D2A5ECF41649725BF8AB2E56F68896B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number: 0444
Signing time: Thu 24 Sep 2026 09:01:24 +0000
Manifest this update: Thu 24 Sep 2026 09:01:24 +0000
Manifest next update: Fri 25 Sep 2026 09:01:24 +0000
Files and hashes: 1: 1-AnQsPvquasIYQF_pbTcTs5sQ4k.roa (hash: mq1rSn55gnymBbNseBpxuFvSEdX74zl3MSqDR0xhbUI=)
2: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: T9Im2+Uel1mnMr65LONV1En0bgb8Y0wYx+RgV69QDdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:ec:f4:16:49:72:5b:f8:ab:2e:56:f6:88:96:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
Validity
Not Before: Sep 24 09:01:24 2026 GMT
Not After : Sep 25 09:01:24 2026 GMT
Subject: CN=219af6ed7bf529394a64210913f7f1ca0834cd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bd:a0:09:78:70:e5:65:83:50:be:36:90:af:
e3:c5:75:6d:4b:7c:37:59:a3:b5:c0:5a:e7:e6:49:
9a:51:3e:62:0a:00:e4:72:77:1a:1c:cf:a9:ab:86:
db:a7:3b:fd:55:a0:e3:2e:97:44:94:6e:00:5f:1f:
27:ed:19:1d:40:95:53:a1:f9:e4:ef:9d:33:aa:a6:
b8:ea:3f:a6:85:1a:27:65:44:1c:aa:5c:9f:bd:9d:
e8:e3:e3:13:1b:ef:8d:ac:09:70:ec:e4:3a:72:9b:
ce:32:6a:d8:c1:c0:24:ef:e1:72:ee:08:06:29:d9:
81:7d:b7:cf:2d:31:68:2a:09:e1:1d:33:0d:e3:dc:
36:d0:0b:74:9e:e6:1d:33:a9:76:96:ea:f7:1f:d2:
88:2d:42:c3:84:50:8b:a0:96:8a:ee:2f:0f:0f:71:
59:d0:25:30:8d:74:68:35:3a:cb:43:b9:1a:ec:03:
27:15:12:b2:a7:79:f6:7c:a8:f1:f7:f7:6b:bb:85:
93:c1:3e:de:ed:82:77:c6:62:55:a6:64:1e:4a:c8:
60:3d:34:6a:fe:15:a4:11:60:d4:b5:0d:4f:78:ad:
2f:63:5a:bd:ee:ff:0e:40:e8:88:26:d2:9d:00:63:
7c:a2:bf:39:99:4b:9f:99:cd:07:e2:70:5b:8b:d1:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:F6:ED:7B:F5:29:39:4A:64:21:09:13:F7:F1:CA:08:34:CD:14
X509v3 Authority Key Identifier:
keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f8:95:be:22:c8:29:95:6f:15:1d:39:66:e2:de:4c:b9:6b:
73:d0:52:cf:23:b8:d9:64:ad:7c:71:2a:f8:b3:ee:71:f1:d9:
4e:25:2a:f2:45:cf:f9:3c:43:92:16:2f:98:ce:6d:9e:64:27:
e6:66:94:d5:8a:38:6c:33:fc:21:a4:01:b1:db:f0:89:2f:5c:
fc:0a:2a:33:6d:a0:54:ad:cd:15:5f:1c:9d:75:3c:de:b5:4a:
cf:e5:6c:a6:99:47:0d:f4:8d:95:af:bd:4b:ca:2a:88:6a:de:
65:d8:d8:94:fd:ca:a8:2b:68:dc:4f:a5:47:4b:17:3c:9d:86:
15:78:c3:53:ea:10:bc:2b:49:8b:c3:f0:56:8b:13:c1:c5:86:
0c:67:82:3d:ca:a6:bf:3c:cd:f0:a0:e8:27:a3:19:a7:53:60:
3e:55:11:2e:15:17:ad:9a:38:0f:96:2a:44:74:3b:ef:f0:c7:
6a:df:2e:47:f3:6f:f2:c8:e6:7b:17:64:cc:77:90:c2:f1:f3:
51:6e:8a:e8:29:05:8f:8f:54:d3:ff:14:c3:95:1e:e7:df:f4:
7c:5e:35:b5:f7:0c:71:29:22:83:ad:16:a6:5c:bd:b1:48:06:
48:67:c2:3f:b5:7e:bf:e2:25:f9:1d:87:e1:d0:e3:b7:a3:f8:
74:bb:3d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:48:12 2026 by rpki-client