Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: S2Z4bYicXBG6cI90O9BFLcr4fXfKaB4bxyGiWPNZbuQ=
Subject key identifier: 25:E0:3A:32:FF:62:23:FC:C5:93:FE:99:CA:3C:18:32:E4:E6:4B:6E
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A0D53915281732553AFCF45F00C7EE92F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: E9
Signing time: Thu 24 Sep 2026 21:01:22 +0000
Manifest this update: Thu 24 Sep 2026 21:01:22 +0000
Manifest next update: Fri 25 Sep 2026 21:01:22 +0000
Files and hashes: 1: PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa (hash: ftUQrFR+3ehEYLFohxpomme6EwAaFtgPBICTDxCfk6I=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: 80LThUQCQud/2sVIcXm7M0xWZGU4ZZchgkqxDnmrokk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:15:28:17:32:55:3a:fc:f4:5f:00:c7:ee:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Sep 24 21:01:22 2026 GMT
Not After : Sep 25 21:01:22 2026 GMT
Subject: CN=25e03a32ff6223fcc593fe99ca3c1832e4e64b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:5c:60:27:46:28:13:82:a8:77:17:33:88:
eb:8d:7d:75:93:f5:d4:fa:8e:bc:f1:13:b7:b1:0c:
f7:14:f3:7f:ef:73:87:ae:1b:ec:c6:5c:3f:1f:37:
86:3d:40:3d:5d:03:f3:f6:b3:ef:3b:82:9f:88:cc:
ef:7d:02:eb:69:a7:39:1e:30:7d:b0:e2:6b:c3:89:
05:0f:c4:68:eb:fc:63:82:f3:58:2e:35:3c:2e:c9:
83:84:73:84:fb:38:74:35:c2:09:3c:28:10:c9:a1:
64:d2:83:ae:fb:15:74:bf:f7:2e:2e:9f:ff:0f:c0:
ea:f0:05:7d:52:bd:2a:0c:18:c4:53:ae:32:97:6f:
7e:b8:70:58:b8:87:d4:b4:84:3a:6e:56:d1:24:49:
09:19:cb:40:cc:7f:bb:20:b0:35:b1:e6:da:b5:9e:
b8:03:a8:5c:e4:68:6e:56:e3:47:85:c0:fe:7f:25:
ec:6c:b7:f1:36:8b:7a:fb:bd:a1:1c:00:13:f0:b9:
3e:cf:84:17:55:89:7e:36:3e:eb:8d:38:d5:6f:b4:
6b:73:f1:cf:2a:40:87:b5:1f:4b:f8:cb:23:da:be:
47:6c:01:4d:9c:98:b7:9b:7d:15:0f:79:34:68:82:
b2:5e:ec:3c:fc:5c:65:8a:5e:ea:6c:1e:17:2d:c7:
ac:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E0:3A:32:FF:62:23:FC:C5:93:FE:99:CA:3C:18:32:E4:E6:4B:6E
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:f4:50:61:a3:f0:50:e7:23:67:cb:01:b7:28:2f:ae:21:
11:d8:d9:52:e3:70:ce:78:de:31:5f:07:5c:4a:cd:a3:46:25:
e6:41:90:ab:9a:87:c5:27:4e:9b:73:09:ad:2f:44:0a:ae:ed:
3d:d6:42:61:e0:7d:de:86:a3:df:72:40:6c:5f:49:70:b8:2c:
fe:40:43:6c:13:be:15:d9:0a:03:f1:aa:39:82:9b:f9:2f:33:
aa:0d:a9:38:88:e4:3c:28:ce:15:0c:31:36:f3:e1:83:dd:13:
76:b7:fd:c7:e9:e9:d9:7a:d7:09:b8:8b:ac:01:6a:d7:c2:6a:
c2:ed:b0:e8:10:14:f1:44:d4:e2:27:30:71:2c:79:b9:22:d4:
5f:6c:d3:2b:ae:a5:86:1f:f1:97:93:63:88:b3:6c:3e:47:ef:
d8:a2:e8:26:67:04:8b:70:f0:d3:41:df:d4:fb:e5:1d:21:84:
9c:be:23:3a:ce:94:47:d1:6c:80:c5:2f:d9:59:22:56:7c:48:
87:c0:a3:25:17:68:3a:08:46:a3:75:e9:f3:e0:b3:64:3a:a0:
90:fb:20:24:59:6c:89:a2:ce:be:ff:48:c1:82:92:57:64:5a:
77:0e:bf:b1:18:19:0a:c2:fd:61:6b:be:8f:09:a0:02:0a:e0:
5d:3c:97:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVORUoFzJVOvz0XwDH7pL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNzk2OTU1ZDZjNjRkZGZhMTVjZDRhYzg4Y2U1NGQzZjhj
YjEzNDQwHhcNMjYwOTI0MjEwMTIyWhcNMjYwOTI1MjEwMTIyWjAzMTEwLwYDVQQD
EygyNWUwM2EzMmZmNjIyM2ZjYzU5M2ZlOTljYTNjMTgzMmU0ZTY0YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuBcYCdGKBOCqHcXM4jrjX11k/XU
+o688RO3sQz3FPN/73OHrhvsxlw/HzeGPUA9XQPz9rPvO4KfiMzvfQLraac5HjB9
sOJrw4kFD8Ro6/xjgvNYLjU8LsmDhHOE+zh0NcIJPCgQyaFk0oOu+xV0v/cuLp//
D8Dq8AV9Ur0qDBjEU64yl29+uHBYuIfUtIQ6blbRJEkJGctAzH+7ILA1sebatZ64
A6hc5GhuVuNHhcD+fyXsbLfxNot6+72hHAAT8Lk+z4QXVYl+Nj7rjTjVb7Rrc/HP
KkCHtR9L+Msj2r5HbAFNnJi3m30VD3k0aIKyXuw8/Fxlil7qbB4XLcesCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXgOjL/YiP8xZP+mco8GDLk5ktuMB8GA1UdIwQY
MBaAFLt5aVXWxk3foVzUrIjOVNP4yxNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmIt
YWM0MDE2MTIwY2I5LzEvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi83MzJhODctNGRiMC00ZWYxLWJhZmItYWM0MDE2MTIwY2I5
LzEvdTNscFZkYkdUZC1oWE5Tc2lNNVUwX2pMRTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcL0UGGj
8FDnI2fLAbcoL64hEdjZUuNwznjeMV8HXErNo0Yl5kGQq5qHxSdOm3MJrS9ECq7t
PdZCYeB93oaj33JAbF9JcLgs/kBDbBO+FdkKA/GqOYKb+S8zqg2pOIjkPCjOFQwx
NvPhg90Tdrf9x+np2XrXCbiLrAFq18Jqwu2w6BAU8UTU4icwcSx5uSLUX2zTK66l
hh/xl5NjiLNsPkfv2KLoJmcEi3Dw00Hf1PvlHSGEnL4jOs6UR9FsgMUv2VkiVnxI
h8CjJRdoOghGo3Xp8+CzZDqgkPsgJFlsiaLOvv9IwYKSV2Radw6/sRgZCsL9YWu+
jwmgAgrgXTyX9g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 06:47:53 2026 by rpki-client