Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: b5FCZGhhOKywQX4yzA1dbLOu6TYmDcixFl+EfeWQeRs=
Subject key identifier: B2:37:46:84:B0:A3:09:A6:FF:23:DD:BE:49:1C:B7:A8:B2:F4:6B:79
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 01A0CFDB41A06BF54EC5E79EDCE8B1A0748F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1A75
Signing time: Wed 23 Sep 2026 20:00:47 +0000
Manifest this update: Wed 23 Sep 2026 20:00:47 +0000
Manifest next update: Thu 24 Sep 2026 20:00:47 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: kPRoapFh0mwcMX7x99oCfqqktAIov5PD2wvKrHE8z2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:41:a0:6b:f5:4e:c5:e7:9e:dc:e8:b1:a0:74:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Sep 23 20:00:47 2026 GMT
Not After : Sep 24 20:00:47 2026 GMT
Subject: CN=b2374684b0a309a6ff23ddbe491cb7a8b2f46b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:70:3e:ed:50:44:b3:b5:a8:a7:66:87:d4:
61:3d:7f:8f:d6:86:fd:1c:06:a5:a2:e2:10:2e:01:
c5:20:81:93:71:cd:ca:cc:f4:50:a9:2e:d3:44:f1:
0a:4d:0f:42:6f:10:68:6e:6b:f8:f7:17:97:e2:cd:
63:2c:ad:4c:4d:5e:d7:24:0e:72:a4:04:71:d5:b5:
64:6c:6b:5e:e3:5e:17:a4:87:e2:b4:79:e1:49:c9:
8a:a2:59:55:b6:bd:ee:cd:ae:7a:1a:2e:2e:86:6d:
13:ab:9e:fe:3b:30:37:c5:b0:dd:71:76:59:90:fc:
03:15:c6:53:ef:cb:21:90:7c:ff:15:ef:33:2a:c8:
7b:4a:68:80:ca:c8:4b:82:c8:2c:f9:83:04:e2:80:
7f:df:e7:54:6b:0b:fa:36:10:12:4f:35:47:28:f2:
b1:10:a6:c0:35:b4:90:87:9e:01:fd:e4:93:26:0d:
86:d1:83:5d:2a:34:5d:08:ba:25:63:5b:04:88:f1:
d3:7f:48:90:d9:d8:ef:0a:c1:52:69:06:b7:4d:7c:
00:fa:1e:ff:c0:05:0f:58:cb:dc:d1:15:1e:07:e1:
85:0b:b4:bb:75:00:8e:45:41:a7:d4:b6:13:4e:19:
ca:89:13:eb:98:87:cc:4d:4a:be:e1:20:66:35:ee:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:37:46:84:B0:A3:09:A6:FF:23:DD:BE:49:1C:B7:A8:B2:F4:6B:79
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:90:da:10:ae:98:f9:cd:2b:f7:1c:a4:02:13:80:13:0d:5c:
82:32:e7:e3:72:a6:19:9d:e1:41:80:4d:e6:6c:a5:64:60:1c:
bf:e5:f2:11:a3:02:35:cb:58:4b:50:a8:7d:9d:0c:f2:00:ab:
df:c1:a7:fe:e9:65:2b:0f:21:dd:42:b9:98:06:c9:8d:cf:ad:
93:ee:d5:ec:c4:4f:bb:4c:b4:1c:5a:63:c7:64:b8:db:6d:95:
f0:71:33:ea:bd:ae:fb:c3:bf:24:47:eb:25:68:c7:bb:48:68:
92:c2:7c:f3:3c:87:c4:31:a8:51:8a:8f:1e:12:61:f3:e6:5d:
b3:f7:85:29:a3:fa:83:34:49:10:aa:d8:c2:c6:29:f1:4e:1e:
fa:a0:de:51:92:b7:39:41:16:64:61:94:b8:c0:19:fe:8d:b0:
68:6a:50:68:74:78:dd:17:0a:93:a6:aa:aa:87:b7:19:75:e4:
99:d7:27:ef:86:eb:f0:77:15:9b:77:d4:b0:f4:16:24:bf:fe:
11:9b:25:d4:cd:29:78:6f:40:1a:d0:cc:0f:1f:26:50:2c:16:
c9:c1:41:d6:9d:70:59:3c:6c:12:92:28:73:a1:d0:d2:24:1a:
70:6a:15:43:84:ec:13:92:ed:12:c1:6a:56:0d:40:e5:2e:fd:
c4:84:bd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:08 2026 by rpki-client