Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: keZsQNX0EFsg7/yN2WOU+C/arBlunuLEjEoszyVUHpk=
Subject key identifier: 67:1D:B7:33:13:BC:A3:36:AC:D6:D9:12:51:89:BD:58:60:71:CD:F0
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 01A0D83C14DE412A450B818CDC61AA8A4C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 11F6
Signing time: Fri 25 Sep 2026 11:03:31 +0000
Manifest this update: Fri 25 Sep 2026 11:03:31 +0000
Manifest next update: Sat 26 Sep 2026 11:03:31 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: 9bSJVbMm9T0c6Is+RFV0WvBmCsKwKhgrckrPc6KJ+Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:14:de:41:2a:45:0b:81:8c:dc:61:aa:8a:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Sep 25 11:03:31 2026 GMT
Not After : Sep 26 11:03:31 2026 GMT
Subject: CN=671db73313bca336acd6d9125189bd586071cdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:a4:17:2a:6c:ab:25:f1:cc:b4:47:d1:eb:
d4:b9:b9:62:8d:9a:50:10:3d:6b:57:0d:b6:91:d6:
3a:5b:04:b5:8e:a3:2e:4f:6d:a3:0f:47:b7:04:e3:
4a:cd:7b:58:91:b5:6b:ae:5a:40:c2:32:9b:fe:75:
02:b5:ce:78:69:f3:78:0f:60:3f:24:c6:3a:fd:71:
c7:e3:9e:33:e2:e1:99:74:9c:66:0c:4e:f1:83:6b:
f0:85:06:0a:1f:f2:9c:22:99:2c:21:eb:63:a5:0c:
f7:07:d4:15:9b:55:db:07:78:71:1d:3b:5a:8d:89:
82:1e:7d:2f:82:25:73:9e:43:ed:a9:dd:36:18:75:
77:97:01:75:d8:20:6e:f1:96:be:e7:50:41:6e:21:
20:d2:1e:d5:8c:fa:c9:83:f8:91:e0:b2:80:15:df:
00:3e:45:58:38:b9:50:47:12:32:83:8f:5d:e3:e5:
91:80:1c:db:c6:2d:dd:ce:4f:20:a0:72:7c:93:22:
44:94:0c:0b:24:a0:49:90:50:1d:f2:5e:d5:25:de:
29:9f:58:12:ba:ab:86:cb:9d:b5:87:72:b9:39:66:
c0:24:14:d3:86:f5:57:82:5a:87:9f:9b:56:2e:68:
0e:0c:0c:a8:95:e3:78:97:6d:c8:9c:53:ba:69:23:
73:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1D:B7:33:13:BC:A3:36:AC:D6:D9:12:51:89:BD:58:60:71:CD:F0
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:00:e4:16:cf:da:00:b1:ee:c1:a1:a4:5f:a6:ad:f2:7f:
64:96:d3:1a:df:6c:5d:1d:c6:6b:51:2e:45:14:fe:06:76:4b:
5e:b6:63:60:95:a3:46:f1:34:77:cd:33:6f:ac:19:68:a6:35:
bc:20:68:31:e2:64:11:bd:75:a8:04:ed:f9:18:30:38:11:e7:
66:2b:a7:32:81:99:a9:e7:82:3c:0b:48:89:cf:a2:d3:38:db:
1c:bf:30:2a:e8:2d:d0:00:66:f8:bb:46:6b:60:d6:db:e3:2d:
30:9f:db:90:d1:f4:0b:05:d8:ab:25:8e:5b:2d:2a:89:40:2d:
19:25:cb:98:f4:9a:c3:97:02:4c:03:53:68:01:41:53:d9:9c:
ab:91:4d:3b:2d:bb:35:40:6d:7b:cd:35:36:a5:ea:f8:e9:f9:
9a:14:28:7e:af:d4:60:4a:3d:15:24:52:e0:84:c4:24:88:70:
de:79:20:d6:8c:5c:b3:2f:ca:b0:ec:51:a2:3c:ef:00:ac:a6:
a8:b7:11:d3:1e:13:05:28:10:82:32:a2:7f:d9:d9:4e:d4:e0:
54:cf:06:59:5b:0d:93:49:5d:38:03:40:f8:f7:cd:42:07:86:
b6:c9:eb:aa:fb:af:a3:d5:e4:1b:c1:62:15:3c:00:3d:a9:68:
23:e2:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:38:36 2026 by rpki-client