Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: uKPBJw9hX9Oxr0VdVBxOF1kolLj2nWBA4/Xyi+kr4+k=
Subject key identifier: 22:68:C1:18:18:F9:C2:86:F0:25:D3:11:11:50:4F:45:42:FB:6C:16
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 01A110E00ECEF073A0F610DD6E76B31BF852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 11:01:21 +0000
Manifest this update: Tue 06 Oct 2026 11:01:21 +0000
Manifest next update: Wed 07 Oct 2026 11:01:21 +0000
Files and hashes: 1: RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa (hash: 6bNU9Qy7gfD16SLkxQ7XrFRbn1WRdrTIHlp5cBAhhLU=)
2: rQxBtH7hdMEEm2Jod-_z7L_0lFo.roa (hash: wmtNul/mb3o7mmH1j6RDeQtvK7CdPjjO3paUDDIesTU=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: /VPnqpmXk+p2eWdfiG/6x0EW6GmJl5EI8S5A+kuV9ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:e0:0e:ce:f0:73:a0:f6:10:dd:6e:76:b3:1b:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Oct 6 11:01:21 2026 GMT
Not After : Oct 7 11:01:21 2026 GMT
Subject: CN=2268c11818f9c286f025d31111504f4542fb6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f0:1c:26:4b:93:5c:37:f6:52:13:ea:48:24:
3d:8b:4f:1f:e4:61:3f:d3:b3:91:8b:20:55:6a:65:
a1:76:24:60:a5:02:66:3c:d2:47:14:cb:45:45:85:
18:e7:b8:01:05:15:ee:39:ac:dd:72:ca:dd:3c:cb:
74:92:8a:4c:64:04:c5:59:b3:a2:e5:e2:4b:03:31:
75:c0:b7:d4:23:b8:ce:c6:13:45:ad:65:de:8b:46:
2d:7c:50:a5:22:48:8b:a7:89:27:0a:aa:1b:76:cb:
e5:8e:e4:af:92:ec:5b:56:50:f5:ef:9e:ce:20:59:
15:97:fb:f8:45:25:de:40:19:74:5a:38:09:7c:79:
3d:d3:69:e0:c8:5d:ef:de:98:fd:6c:63:cc:a0:52:
3c:11:4e:4a:e0:1c:e1:f2:02:ce:19:3a:f8:4b:16:
49:31:9f:42:4a:d0:1b:c9:05:90:52:4e:aa:74:ab:
71:b8:b4:46:03:4b:11:91:06:e9:f4:96:51:75:88:
92:70:40:92:9a:c9:57:c3:34:e3:87:25:5c:3a:a2:
8c:49:05:d2:ac:8a:14:2e:b6:72:b3:30:b4:d3:ab:
96:0d:75:26:a9:3c:87:8f:cb:4b:95:46:6f:fe:4a:
b5:cc:4a:69:0b:f7:0c:59:2c:0c:2c:18:a1:af:d0:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:68:C1:18:18:F9:C2:86:F0:25:D3:11:11:50:4F:45:42:FB:6C:16
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:d8:0e:a1:da:e1:87:46:47:5d:7b:4b:b0:38:a3:40:b5:7b:
05:b6:cc:33:bb:10:8a:73:8b:45:48:6a:cf:10:67:d5:1a:72:
e5:c6:f8:02:57:b5:07:b8:d1:66:fb:8d:3e:30:88:6b:23:43:
28:98:ee:15:3e:c8:d6:02:be:e6:31:39:c8:ce:d2:bf:6f:04:
7a:8e:59:6b:0d:44:30:1a:2d:bb:7e:e3:2d:fb:d9:07:c8:c2:
0f:f5:f8:45:ec:20:b0:37:90:2b:e5:a5:44:81:75:bc:41:2b:
2c:8c:33:b1:71:d3:6d:c1:1b:87:f5:b9:7d:bd:ee:e5:0e:b9:
31:d5:a1:b3:ce:e7:32:47:bb:7e:d0:c7:17:f6:b9:b7:0d:ae:
92:2c:cf:18:60:d1:6b:15:0d:0b:97:79:3d:20:58:51:cb:fc:
52:d4:7e:55:8c:4e:cd:31:55:a5:08:fd:0c:98:3b:92:56:93:
15:5a:9e:34:f2:6e:f4:e4:3a:00:0d:63:45:31:97:e0:f7:06:
ef:7a:b6:9f:a8:28:2a:f1:65:bf:57:89:ad:9e:9f:34:01:43:
39:66:c3:f3:7d:1c:61:c4:1b:33:e6:02:77:9b:7f:0d:2c:58:
76:2b:30:9c:b9:05:40:cf:10:39:c6:4a:0c:9d:f3:7b:a2:00:
96:e8:77:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEQ4A7O8HOg9hDdbnazG/hSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGJiZDMzNDU4MWRkY2RkOTM1YmNlZjQ3ZDlhMDRjYmNl
NWZkZWQwHhcNMjYxMDA2MTEwMTIxWhcNMjYxMDA3MTEwMTIxWjAzMTEwLwYDVQQD
EygyMjY4YzExODE4ZjljMjg2ZjAyNWQzMTExMTUwNGY0NTQyZmI2YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vAcJkuTXDf2UhPqSCQ9i08f5GE/
07ORiyBVamWhdiRgpQJmPNJHFMtFRYUY57gBBRXuOazdcsrdPMt0kopMZATFWbOi
5eJLAzF1wLfUI7jOxhNFrWXei0YtfFClIkiLp4knCqobdsvljuSvkuxbVlD1757O
IFkVl/v4RSXeQBl0WjgJfHk902ngyF3v3pj9bGPMoFI8EU5K4Bzh8gLOGTr4SxZJ
MZ9CStAbyQWQUk6qdKtxuLRGA0sRkQbp9JZRdYiScECSmslXwzTjhyVcOqKMSQXS
rIoULrZyszC006uWDXUmqTyHj8tLlUZv/kq1zEppC/cMWSwMLBihr9ACcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJowRgY+cKG8CXTERFQT0VC+2wWMB8GA1UdIwQY
MBaAFLtLvTNFgd3N2TW870fZoEy85f3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEt
OTcxNzRhOTZlODE1LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEtOTcxNzRhOTZlODE1
LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAutgOodrh
h0ZHXXtLsDijQLV7BbbMM7sQinOLRUhqzxBn1Rpy5cb4Ale1B7jRZvuNPjCIayND
KJjuFT7I1gK+5jE5yM7Sv28Eeo5Zaw1EMBotu37jLfvZB8jCD/X4RewgsDeQK+Wl
RIF1vEErLIwzsXHTbcEbh/W5fb3u5Q65MdWhs87nMke7ftDHF/a5tw2ukizPGGDR
axUNC5d5PSBYUcv8UtR+VYxOzTFVpQj9DJg7klaTFVqeNPJu9OQ6AA1jRTGX4PcG
73q2n6goKvFlv1eJrZ6fNAFDOWbD830cYcQbM+YCd5t/DSxYdiswnLkFQM8QOcZK
DJ3ze6IAluh3yQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 14:45:35 2026 by rpki-client