Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
File: unCBZs7wN1WvaGaB95MfjVe6jsg.mft (raw, json)
Hash identifier: XtipKNrn9V69Gkc2ZpfIIkNbFxVlDepuSvpU+8yxX8I=
Subject key identifier: DB:B5:93:45:5E:35:03:93:F5:C7:99:F6:8D:F7:88:61:41:8F:44:72
Authority key identifier: BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
Certificate issuer: /CN=ba708166cef03755af686681f7931f8d57ba8ec8
Certificate serial: 01A0DBA9F5D2127C1A46A497E247B1F16832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
Manifest number: 87
Signing time: Sat 26 Sep 2026 03:02:23 +0000
Manifest this update: Sat 26 Sep 2026 03:02:23 +0000
Manifest next update: Sun 27 Sep 2026 03:02:23 +0000
Files and hashes: 1: pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa (hash: AwQf+/zNLpDriXjSh7WcAWIIEv/q4fP/dqqhXPd5R8U=)
2: unCBZs7wN1WvaGaB95MfjVe6jsg.crl (hash: +N8GjfqQI2weGgn+ygmC9sd5MXg2Pk1dGzJtOPPgqJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:f5:d2:12:7c:1a:46:a4:97:e2:47:b1:f1:68:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba708166cef03755af686681f7931f8d57ba8ec8
Validity
Not Before: Sep 26 03:02:23 2026 GMT
Not After : Sep 27 03:02:23 2026 GMT
Subject: CN=dbb593455e350393f5c799f68df78861418f4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:02:8b:16:6f:bb:52:29:d7:a8:d5:13:e0:61:
b1:ea:4b:fc:ac:ed:d9:44:e4:17:83:86:5f:93:be:
19:cc:49:b5:41:87:8c:00:a7:d5:7c:7a:48:6c:ae:
4a:8c:20:f4:a3:79:b2:bc:06:d9:79:90:d8:62:d1:
c5:a7:0d:7f:7c:78:af:fb:9a:24:b3:65:ad:d1:9e:
5f:61:c6:7e:e8:6e:1f:24:be:df:be:b6:b0:83:7d:
b3:49:17:ae:ea:54:96:3a:5e:59:e0:59:4b:58:50:
60:e6:0f:0d:43:aa:8e:87:8c:cc:14:a2:c7:c2:09:
ec:20:9d:c5:b5:8e:1a:58:1d:31:db:f1:3b:66:7c:
78:b5:73:d2:af:ba:88:ec:71:1f:49:2d:ec:5a:8f:
75:f4:bc:b2:95:6c:79:ac:f0:e3:20:93:67:33:01:
2f:d0:9f:0a:6f:79:1d:1c:a0:c0:6d:14:a5:91:e2:
89:d9:90:e3:f9:c5:c0:de:5f:2f:a7:0e:e8:0f:fb:
46:27:ab:47:81:aa:16:34:15:dd:45:c0:ce:1c:9c:
fe:ac:ae:b4:44:41:04:e4:25:67:02:dc:9e:f1:8c:
49:e0:cf:25:21:b2:48:d5:02:db:67:0e:0e:aa:68:
aa:81:33:a9:d0:3d:5c:be:a4:c1:73:8e:70:43:97:
9b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B5:93:45:5E:35:03:93:F5:C7:99:F6:8D:F7:88:61:41:8F:44:72
X509v3 Authority Key Identifier:
keyid:BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:e3:a4:f3:91:13:78:b8:be:1d:a5:59:1d:16:d3:e3:0f:
73:1a:f2:30:20:fd:0b:46:43:70:6e:20:92:9c:28:4b:9a:c0:
34:ec:a3:b2:f9:e3:b8:a9:3f:c9:ba:dc:36:05:17:17:87:ff:
9c:47:7a:db:4e:8c:af:ff:0f:f8:37:cc:67:95:47:d2:23:4c:
3e:7e:ea:44:f8:21:25:4c:45:df:a6:70:4a:b4:f7:2c:5c:40:
e8:b8:9b:6c:57:bc:af:dc:d9:37:de:59:65:0f:ef:9e:a6:e3:
ca:50:1f:f1:39:1a:6c:e6:d4:8e:a6:31:e2:7e:ae:6b:8c:58:
ac:41:eb:8f:96:c9:8e:ca:1d:d7:1a:7e:9e:cc:74:66:c5:15:
a6:9b:d5:e5:67:30:a2:46:cd:d9:82:6e:33:af:b0:e9:c1:7d:
05:45:ce:84:a2:46:7f:59:35:b9:7e:d8:12:eb:92:92:5a:65:
70:b7:cb:47:18:11:87:65:d6:d6:1f:ce:88:fa:e1:85:93:4e:
f6:6b:24:46:58:dc:e2:4b:3c:0c:9c:63:88:38:51:1e:70:fd:
fb:65:ae:ce:c1:d3:f0:28:17:d1:70:d5:02:d6:ef:07:4d:dd:
ef:16:4c:8b:83:7b:42:6d:ef:84:e5:da:46:61:18:6d:51:a1:
05:ea:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:02:49 2026 by rpki-client