Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: Ru3eDTUlECjbjjVkOn87P+zouwz8RovOBhxh42Zns/g=
Subject key identifier: 31:26:5A:5D:67:41:01:E4:64:60:6E:0F:27:5B:C1:3E:E8:49:41:75
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 01A0DF1791AD2B7637A57037189CBD9E99AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 028B
Signing time: Sat 26 Sep 2026 19:00:58 +0000
Manifest this update: Sat 26 Sep 2026 19:00:58 +0000
Manifest next update: Sun 27 Sep 2026 19:00:58 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: PkhQcqjT3JW0Xe0OXT4XfWXJYxFX+/KBB0/U3awcd5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:91:ad:2b:76:37:a5:70:37:18:9c:bd:9e:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Sep 26 19:00:58 2026 GMT
Not After : Sep 27 19:00:58 2026 GMT
Subject: CN=31265a5d674101e464606e0f275bc13ee8494175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:dc:72:35:9d:b4:36:15:52:47:88:e6:1f:
ec:54:a1:97:5c:20:da:f3:a3:d8:91:0d:9f:c8:bf:
f2:9a:bc:d1:28:0d:43:52:37:94:26:f2:a7:f2:59:
a9:ef:99:d2:e0:09:52:50:51:59:f1:db:6c:e4:ea:
6a:ce:6a:9a:7c:61:52:06:e4:57:16:6d:22:c5:99:
af:81:3a:46:31:dc:a6:8b:fe:87:c7:78:5d:a0:43:
91:6c:9d:2c:de:d8:d5:b5:e4:0f:9a:80:fc:79:74:
fe:7c:3f:95:96:41:de:82:c9:9f:c6:5b:2d:76:04:
f0:75:03:d7:88:8a:62:30:09:bc:e2:3c:a1:bb:00:
ad:5c:a7:2c:6a:98:b7:b4:e9:14:74:a8:6c:fd:77:
f4:90:a7:b5:92:ed:18:fc:02:dd:d0:1f:d9:b5:22:
9f:0a:7e:79:f8:4c:06:3f:90:c9:ff:09:36:d4:5f:
ed:37:4a:52:58:d3:6d:64:0e:b0:61:ec:f6:64:8d:
ba:44:80:44:99:e2:43:ea:30:7d:dc:31:13:3e:2d:
58:79:e6:91:68:33:74:61:bf:17:35:a9:ef:71:82:
fa:09:23:c8:3b:af:ad:e2:84:41:e2:b5:49:0d:ef:
76:1f:e1:c2:f7:2d:86:38:aa:0e:94:a6:29:16:ae:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:26:5A:5D:67:41:01:E4:64:60:6E:0F:27:5B:C1:3E:E8:49:41:75
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:da:cc:bd:45:1a:3d:74:d3:b7:ec:dd:12:c3:2e:ee:23:52:
52:99:22:51:3e:71:46:ec:d8:98:2c:b6:cd:d4:6d:1a:a5:5e:
06:07:51:b4:41:ad:1a:28:37:d2:fd:85:a6:12:cc:00:42:71:
f2:47:88:ff:e6:4a:8e:0d:96:82:9f:1a:b1:ea:e8:7c:51:ee:
6a:49:3f:be:cb:b6:3b:c6:31:30:42:66:97:af:3c:45:79:06:
5c:4b:2a:41:c1:07:a9:d9:4e:66:95:f5:2b:7f:28:70:e6:bc:
6d:d8:f7:61:51:c9:af:e2:5e:f8:43:7d:19:af:8f:e6:dd:f1:
3d:95:f1:33:a0:52:ce:00:50:b4:3b:47:01:6e:a5:a9:44:e5:
49:98:56:ad:e5:ea:fd:e0:fd:58:6c:13:06:e3:c0:3f:f0:09:
45:78:5e:79:76:28:f4:81:3e:2f:9d:47:d5:fe:4e:3e:99:f7:
9d:d4:78:0d:8a:36:5c:71:c7:b6:6e:43:ab:eb:c9:a5:19:99:
d8:c6:26:90:6c:b4:27:32:29:70:aa:03:ed:e0:52:fc:9a:a4:
92:63:fa:99:7a:69:ee:52:e2:5a:87:12:6f:0f:16:c5:ec:f1:
c8:81:bd:af:cc:af:e5:7e:34:d7:94:35:f0:6d:d1:12:96:a9:
79:62:60:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfF5GtK3Y3pXA3GJy9npmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTFiZDZiMGQ1ODllMWEwZjkwYmFkZjczNTAyMDcxNGYw
ZWNmN2EwHhcNMjYwOTI2MTkwMDU4WhcNMjYwOTI3MTkwMDU4WjAzMTEwLwYDVQQD
EygzMTI2NWE1ZDY3NDEwMWU0NjQ2MDZlMGYyNzViYzEzZWU4NDk0MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS/ccjWdtDYVUkeI5h/sVKGXXCDa
86PYkQ2fyL/ymrzRKA1DUjeUJvKn8lmp75nS4AlSUFFZ8dts5OpqzmqafGFSBuRX
Fm0ixZmvgTpGMdymi/6Hx3hdoEORbJ0s3tjVteQPmoD8eXT+fD+VlkHegsmfxlst
dgTwdQPXiIpiMAm84jyhuwCtXKcsapi3tOkUdKhs/Xf0kKe1ku0Y/ALd0B/ZtSKf
Cn55+EwGP5DJ/wk21F/tN0pSWNNtZA6wYez2ZI26RIBEmeJD6jB93DETPi1YeeaR
aDN0Yb8XNanvcYL6CSPIO6+t4oRB4rVJDe92H+HC9y2GOKoOlKYpFq579QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEmWl1nQQHkZGBuDydbwT7oSUF1MB8GA1UdIwQY
MBaAFLvhvWsNWJ4aD5C633NQIHFPDs96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2It
NjE3ZDE3YmUzMDA0LzEvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2ItNjE3ZDE3YmUzMDA0
LzEvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9rMvUUa
PXTTt+zdEsMu7iNSUpkiUT5xRuzYmCy2zdRtGqVeBgdRtEGtGig30v2FphLMAEJx
8keI/+ZKjg2Wgp8aserofFHuakk/vsu2O8YxMEJml688RXkGXEsqQcEHqdlOZpX1
K38ocOa8bdj3YVHJr+Je+EN9Ga+P5t3xPZXxM6BSzgBQtDtHAW6lqUTlSZhWreXq
/eD9WGwTBuPAP/AJRXheeXYo9IE+L51H1f5OPpn3ndR4DYo2XHHHtm5Dq+vJpRmZ
2MYmkGy0JzIpcKoD7eBS/JqkkmP6mXpp7lLiWocSbw8WxezxyIG9r8yv5X4015Q1
8G3REpapeWJgZw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:57:15 2026 by rpki-client