Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: 6zwddiBs4ALmAZP0aMqYgF/YTJvgxfZgt/rc/KmdQyY=
Subject key identifier: 9F:1D:FA:A2:31:6A:D5:47:55:7D:20:10:FC:23:63:AC:15:4F:A5:32
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 01A1095D3EAA3C115A782377A3FC46069220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0F2A
Signing time: Mon 05 Oct 2026 00:01:08 +0000
Manifest this update: Mon 05 Oct 2026 00:01:08 +0000
Manifest next update: Tue 06 Oct 2026 00:01:08 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: 3giTp0cQ4+vN3Fp6NjV6yx7VGhrC8kMvSLjaZqr7Aog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:5d:3e:aa:3c:11:5a:78:23:77:a3:fc:46:06:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Oct 5 00:01:08 2026 GMT
Not After : Oct 6 00:01:08 2026 GMT
Subject: CN=9f1dfaa2316ad547557d2010fc2363ac154fa532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d5:f6:a7:7f:24:63:00:a9:3e:4c:48:54:2d:
6d:16:fa:90:be:a6:e1:76:1d:4d:2f:d5:6d:f0:b3:
d6:74:c9:20:70:7c:c6:b0:f8:41:a3:77:eb:35:2c:
d2:2a:ed:dd:be:ff:76:e5:c3:9f:8d:33:4c:46:a7:
70:a9:e8:10:c0:e8:8c:c0:77:12:c0:7b:9b:47:98:
61:df:fb:fe:e5:8b:e7:c0:99:b2:6a:b7:51:88:63:
49:b3:f9:17:93:32:fc:a0:75:bd:5f:22:6f:e8:3a:
d6:d0:89:f6:21:68:75:1d:47:55:12:05:98:ed:38:
6f:0f:f7:d7:77:e1:3b:b8:c0:87:a4:5c:14:5d:02:
c6:de:b8:ef:50:97:4b:ba:85:2f:0f:28:86:e8:f2:
f0:69:f3:95:54:f0:cc:d9:00:ec:c0:07:c4:7a:74:
ea:59:8d:73:7b:8a:f4:50:08:d3:ad:92:a3:71:32:
8f:1f:ed:9f:55:74:e8:c6:e6:0e:b5:da:ee:a5:48:
3d:4b:cb:64:9e:77:09:96:68:f3:8c:90:36:9a:74:
d0:08:aa:0c:a1:7d:2f:b0:4f:80:c9:34:94:92:3e:
77:6c:30:9a:79:24:48:30:4a:33:fb:1e:f6:22:e0:
ce:df:39:54:f2:9a:28:ac:bb:ce:c7:6b:02:78:1e:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:FA:A2:31:6A:D5:47:55:7D:20:10:FC:23:63:AC:15:4F:A5:32
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ab:73:e8:8d:14:25:07:22:4e:ec:73:98:6d:74:c9:27:91:
5a:1c:11:c2:35:78:38:3b:93:fe:f7:45:ae:49:24:4b:92:a1:
48:a4:a3:dd:9e:98:40:11:25:32:93:09:5b:74:69:95:94:90:
35:68:cc:3b:cd:1d:22:13:e5:48:65:c1:a0:81:c0:ef:65:cf:
ba:7f:47:bf:20:d1:16:3c:ed:b8:bf:fe:d3:8c:e1:eb:7e:56:
e9:48:3e:09:2b:33:4f:fd:c8:bc:18:a9:2b:6b:a4:1d:d4:46:
35:b1:17:4a:2c:72:0c:4a:f1:ca:fb:4f:8f:d2:c3:b0:af:8f:
af:44:27:3b:e2:f8:5d:1e:74:d1:26:8d:42:05:19:70:d5:99:
34:5c:b3:b2:14:76:4a:86:bc:eb:9f:a5:ba:dd:c2:26:44:62:
b7:d7:66:04:b7:e1:86:14:9a:a3:a7:3b:fb:67:f6:67:ea:93:
aa:49:09:73:87:23:ab:a3:9f:d0:a0:c8:b1:1e:94:68:ad:35:
b0:39:41:7b:7a:7e:3e:e8:82:e3:87:aa:a6:cc:86:d0:9e:54:
aa:4c:3f:e3:d4:dd:45:b4:28:4a:d3:b0:f9:79:af:8a:40:f9:
59:7e:f8:ad:ee:19:48:d3:3d:da:9b:bc:c6:e1:34:ce:d7:c5:
ec:b6:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:48:18 2026 by rpki-client