Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: FklmM48J+HgGh+mIxcFWnwfKnuAmZzZBu6tM/VmUMYg=
Subject key identifier: E9:12:77:BE:DC:E2:88:F9:F0:35:30:94:AE:B4:98:8C:20:59:52:85
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01A0DCBBBC5AB30511D43B40D23CE2140223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 174F
Signing time: Sat 26 Sep 2026 08:01:25 +0000
Manifest this update: Sat 26 Sep 2026 08:01:25 +0000
Manifest next update: Sun 27 Sep 2026 08:01:25 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: jlT4CNpotdX+kriBqZYkwCuS4/TMLkGQdGIspr7vK64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:bc:5a:b3:05:11:d4:3b:40:d2:3c:e2:14:02:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Sep 26 08:01:25 2026 GMT
Not After : Sep 27 08:01:25 2026 GMT
Subject: CN=e91277bedce288f9f0353094aeb4988c20595285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:14:08:f0:3c:9f:2f:ca:3a:f9:80:9e:50:
bc:03:a5:4d:a7:ba:45:70:a7:06:8f:14:bd:49:e2:
71:f2:9f:da:e6:1f:09:18:60:96:73:44:7f:c0:d3:
1e:b3:3c:b4:6d:07:6a:1d:dd:2e:21:41:89:0c:67:
86:7c:3d:3a:3d:12:3d:7f:04:fd:be:e1:a3:d1:5a:
46:52:a1:83:9d:f7:b3:8f:0a:78:8a:7d:dd:6a:eb:
be:9a:92:e4:99:cd:c9:0d:93:b7:3d:6c:b1:55:5a:
6e:b1:45:18:e4:54:78:7c:1f:26:d5:86:7e:35:76:
8e:29:f4:f9:40:40:db:0d:03:99:a2:bb:ca:18:17:
54:ed:27:7c:f4:ee:15:1b:aa:f3:fd:6c:5e:0a:e7:
47:10:b2:4f:f4:ea:8c:f3:c9:86:d6:7c:c8:b1:0f:
85:44:e1:ce:af:58:87:81:0f:ad:03:3b:b6:25:0e:
31:ec:fa:7b:71:2f:f2:c6:15:e5:c5:77:09:4f:33:
7a:5c:5a:c6:cc:27:70:35:e9:4c:f5:d5:7b:ad:11:
4a:03:17:74:71:16:dc:de:d6:6f:cd:7f:3a:63:30:
46:79:bb:64:7c:6d:29:8f:ab:b9:e8:4f:e0:bb:6f:
dc:28:19:b0:6b:ad:5f:92:64:cf:6c:de:48:52:89:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:12:77:BE:DC:E2:88:F9:F0:35:30:94:AE:B4:98:8C:20:59:52:85
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:5c:a4:a3:9b:c1:95:27:89:d6:5d:01:87:99:03:f3:a3:
cb:f4:1b:a2:3a:a6:5e:75:ab:56:1e:b4:97:b7:61:2b:f7:72:
80:4c:7d:0b:ce:c3:33:29:74:bd:de:d6:04:bc:bf:a9:18:c5:
e2:94:57:75:5f:75:eb:bb:67:95:78:b3:9b:d9:26:15:59:99:
40:32:36:8a:27:86:6d:92:48:b9:f9:14:71:05:06:70:8c:a5:
19:6b:fa:5f:93:ef:d7:05:7e:94:06:5c:d9:00:20:2b:56:ed:
ff:1e:a7:3b:f3:a3:c4:8c:d8:fa:ef:36:4e:a2:61:93:4a:17:
33:5e:88:63:10:a8:98:45:0e:d5:ca:a2:c0:73:cb:15:9f:05:
e2:e9:59:ea:58:51:08:c1:36:01:66:52:fc:a1:d9:b7:30:ea:
cd:d2:d7:ef:89:31:59:e1:50:5e:0d:62:f4:ef:ac:e9:c1:8c:
78:a1:5a:d3:64:8d:be:c1:ba:73:b3:68:ae:76:ad:06:02:d1:
f3:43:b9:80:88:5b:90:7b:bd:5a:24:d2:f1:cd:15:19:de:51:
6d:a5:55:a1:3f:f9:5e:7f:59:d5:3f:bf:2b:e0:06:4a:7a:df:
91:f2:b1:83:08:05:c2:e2:a4:0f:e8:10:27:cb:16:77:71:8a:
7e:1e:2d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:52 2026 by rpki-client