Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: 1dQ+bZvxJCQDJTphU5XnLixG0S8xRUyKYYt55SmMeII=
Subject key identifier: 35:17:87:C4:C0:F4:AC:D4:84:91:87:45:1F:8A:90:00:E4:53:00:F4
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01A0D83BDB837B48FCD14A74D9BDBDE13F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 15F1
Signing time: Fri 25 Sep 2026 11:03:16 +0000
Manifest this update: Fri 25 Sep 2026 11:03:16 +0000
Manifest next update: Sat 26 Sep 2026 11:03:16 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: zd7+0w79HBxseRDMCSu+imMX3UR4qcJq3a/wIEFw7qQ=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:db:83:7b:48:fc:d1:4a:74:d9:bd:bd:e1:3f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Sep 25 11:03:16 2026 GMT
Not After : Sep 26 11:03:16 2026 GMT
Subject: CN=351787c4c0f4acd4849187451f8a9000e45300f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:c4:f7:74:e4:2d:73:73:80:c6:7a:21:63:
bb:36:dc:d4:ec:e0:fb:c6:cc:72:6d:3b:61:99:6f:
0b:b0:11:71:6e:bc:d7:79:db:53:8b:3a:58:64:eb:
9e:59:72:14:cf:7a:f6:26:80:ff:d2:66:fc:9e:19:
6d:e4:7e:45:d6:6f:b3:19:ee:e2:01:ba:f0:64:10:
82:c7:31:ae:c1:97:1e:74:fd:fa:5f:01:a2:16:52:
b5:39:79:19:ca:c1:47:9f:44:83:97:ec:38:c2:90:
dc:e9:16:da:aa:ed:11:b2:f3:08:7f:70:a7:de:52:
af:ef:b6:35:21:25:21:5e:e1:d2:dd:e8:b5:ab:81:
ce:73:56:49:47:d1:54:7e:23:90:fc:4e:4c:50:1d:
be:1e:c8:03:12:06:2b:8f:c8:dc:c7:5b:9a:5e:af:
38:47:2d:a6:6f:9b:2e:e5:68:b8:4f:13:aa:af:6a:
87:73:f6:85:ac:0e:c0:74:7b:70:fb:52:3a:33:f8:
00:77:47:0a:ce:ff:df:5e:36:96:f9:10:16:a0:76:
38:ed:13:ae:9c:76:2b:8f:02:a5:94:83:95:ab:f5:
f1:5f:af:7d:19:98:7f:08:6f:e9:e2:f0:d7:d7:14:
b0:a5:38:79:29:e1:a4:c5:85:66:f2:f3:2e:db:43:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:17:87:C4:C0:F4:AC:D4:84:91:87:45:1F:8A:90:00:E4:53:00:F4
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:9b:ce:4f:77:a8:31:4a:29:83:b4:a0:11:a1:33:e1:e8:de:
67:a4:9f:c1:20:ba:33:d1:5f:17:dd:d1:9e:86:d6:d8:5d:8a:
cc:eb:38:bf:5b:33:75:1c:7d:e8:eb:05:58:98:bb:4b:50:0b:
4e:05:1a:0a:c8:4d:0c:0f:66:da:31:c6:76:17:67:d0:50:89:
a8:01:7b:55:28:a7:f7:fd:e9:a3:00:69:99:92:0a:ff:98:c4:
1a:96:b2:1f:a2:78:ce:62:47:cc:84:d8:08:5b:73:46:b5:57:
bd:19:7b:f3:91:ba:b5:0f:0a:79:70:8d:24:c0:79:8a:35:a5:
e0:be:dd:10:20:14:47:8c:77:90:8e:d5:b3:8e:4d:1b:6d:d4:
f3:7e:1d:14:fa:fd:ed:38:a0:ce:57:30:c4:3c:fb:ce:d8:83:
1f:43:10:f6:99:de:e6:57:c6:c6:75:77:f2:40:ca:42:9b:d0:
f5:63:ed:56:9b:8b:f4:d7:4c:f9:b8:4b:71:8b:42:34:ee:b0:
34:48:6f:95:7a:67:13:ae:e4:6b:5c:bc:49:65:ac:81:aa:5f:
58:56:3e:86:df:1c:a5:f4:96:94:d0:bd:79:b4:86:01:fe:c5:
c2:d6:12:a9:07:46:4c:2b:c9:cb:ea:ce:10:da:cd:42:b3:03:
ba:1f:bd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:00:45 2026 by rpki-client