Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: u6UDvA6sfkgVAprH//L1bA6Y+lHFcieqMCgk5CMlLGQ=
Subject key identifier: F2:F1:DB:6D:67:BC:F1:D6:17:92:96:F9:EF:3F:CF:7A:0A:EF:BC:16
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 01A0D8A80402E33BCB7E81526FDC9C0B4A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 1A02
Signing time: Fri 25 Sep 2026 13:01:24 +0000
Manifest this update: Fri 25 Sep 2026 13:01:24 +0000
Manifest next update: Sat 26 Sep 2026 13:01:24 +0000
Files and hashes: 1: F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa (hash: rPOBsU3IqWyWd2TrfL/Ef+LouW+88Qh38gAJottjBDo=)
2: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: d11fOS+dNR1w+bobJb1EhuhMsx9VG8gUbfJgGwF7QPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:04:02:e3:3b:cb:7e:81:52:6f:dc:9c:0b:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Sep 25 13:01:24 2026 GMT
Not After : Sep 26 13:01:24 2026 GMT
Subject: CN=f2f1db6d67bcf1d6179296f9ef3fcf7a0aefbc16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c8:ff:91:af:f2:f9:f7:49:49:ac:83:89:d6:
03:95:5c:df:d5:4f:20:91:61:3d:24:af:ed:1a:ff:
b9:92:d0:6d:a7:3d:96:78:e3:95:93:62:90:a2:73:
95:84:16:9e:4d:10:c5:57:b3:21:54:d7:f3:f3:80:
ec:b0:a8:23:ad:0e:30:ed:bd:f8:6c:e3:5c:2d:69:
9c:05:8c:0c:08:ae:57:cc:23:ec:15:9d:a5:d5:b5:
5b:4c:0f:a2:b2:19:41:9b:32:df:f0:a0:e0:8f:f3:
d2:be:41:b6:64:75:f6:d7:23:b0:6f:f8:28:e9:2e:
f1:bb:c7:b3:cd:f1:40:1c:8f:d3:71:3e:e6:68:52:
2c:c7:96:dd:e2:96:f5:42:86:d8:b1:5e:a1:4f:7c:
f7:44:42:13:45:aa:b4:02:82:c3:0d:b4:06:52:3e:
93:d6:91:46:5b:f8:4e:2d:cd:95:a4:6e:13:5f:af:
d4:34:07:ff:ba:33:5c:d3:a7:bc:5d:7f:95:1c:f7:
d0:d5:54:54:35:04:56:91:3d:e9:1b:a2:42:b8:c9:
d9:f2:63:52:3b:14:02:12:d2:d7:fb:c5:58:4b:29:
08:c9:78:b8:ee:3d:43:72:89:cd:91:5c:55:29:c7:
c9:4e:a5:60:ae:e1:1b:40:37:54:bd:c8:f1:99:2c:
52:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F1:DB:6D:67:BC:F1:D6:17:92:96:F9:EF:3F:CF:7A:0A:EF:BC:16
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:17:1b:48:15:13:f6:d7:1f:e8:8d:4b:a9:4e:a5:64:37:ea:
60:6b:86:48:35:44:c1:f9:72:40:29:a8:c7:8d:54:5a:c8:36:
15:da:f1:de:79:f3:9a:0e:75:a8:c4:c2:c5:2e:64:b4:23:32:
7f:97:7e:c9:97:0e:78:4a:b9:b5:a7:77:b8:72:6c:5e:83:02:
22:87:6e:7e:11:a6:23:39:62:6e:b8:47:3f:c1:7f:26:c6:d1:
47:22:29:21:f5:c2:e2:56:c2:47:0d:c5:bd:df:0b:80:e6:b5:
83:e8:32:fa:cf:de:42:12:7e:a6:04:eb:5d:14:e7:7f:3b:1b:
eb:b8:7f:c4:31:be:da:b2:de:0c:c6:2f:fa:08:39:53:57:83:
15:c6:44:97:15:6f:1f:4f:d1:55:e7:11:db:dd:50:b7:1f:7a:
fe:e4:98:23:2e:ea:f4:b9:f8:75:3b:29:23:8f:9c:bf:cf:2b:
e4:7b:b6:ea:4c:03:6b:fa:a7:44:bc:fa:c0:10:af:72:da:4d:
c4:1f:e5:1e:75:2e:94:a3:01:0d:36:45:80:6b:d2:2c:8f:26:
82:35:0d:8e:d2:21:3d:3e:41:20:cb:57:70:cb:4e:9d:ab:ec:
10:0c:63:a2:95:4e:4b:78:6a:39:a6:ef:d2:05:6f:b1:1e:86:
3e:03:79:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYqAQC4zvLfoFSb9ycC0qeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjYwOTI1MTMwMTI0WhcNMjYwOTI2MTMwMTI0WjAzMTEwLwYDVQQD
EyhmMmYxZGI2ZDY3YmNmMWQ2MTc5Mjk2ZjllZjNmY2Y3YTBhZWZiYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMj/ka/y+fdJSayDidYDlVzf1U8g
kWE9JK/tGv+5ktBtpz2WeOOVk2KQonOVhBaeTRDFV7MhVNfz84DssKgjrQ4w7b34
bONcLWmcBYwMCK5XzCPsFZ2l1bVbTA+ishlBmzLf8KDgj/PSvkG2ZHX21yOwb/go
6S7xu8ezzfFAHI/TcT7maFIsx5bd4pb1QobYsV6hT3z3REITRaq0AoLDDbQGUj6T
1pFGW/hOLc2VpG4TX6/UNAf/ujNc06e8XX+VHPfQ1VRUNQRWkT3pG6JCuMnZ8mNS
OxQCEtLX+8VYSykIyXi47j1DconNkVxVKcfJTqVgruEbQDdUvcjxmSxSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLx221nvPHWF5KW+e8/z3oK77wWMB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRcbSBUT
9tcf6I1LqU6lZDfqYGuGSDVEwflyQCmox41UWsg2Fdrx3nnzmg51qMTCxS5ktCMy
f5d+yZcOeEq5tad3uHJsXoMCIodufhGmIzlibrhHP8F/JsbRRyIpIfXC4lbCRw3F
vd8LgOa1g+gy+s/eQhJ+pgTrXRTnfzsb67h/xDG+2rLeDMYv+gg5U1eDFcZElxVv
H0/RVecR291Qtx96/uSYIy7q9Ln4dTspI4+cv88r5Hu26kwDa/qnRLz6wBCvctpN
xB/lHnUulKMBDTZFgGvSLI8mgjUNjtIhPT5BIMtXcMtOnavsEAxjopVOS3hqOabv
0gVvsR6GPgN5Ug==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:56:36 2026 by rpki-client