Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: CNZEzFqe7L/0+iJCLM5s05AqdyXvAIvuCe2KH+vhDv8=
Subject key identifier: E3:0B:76:63:1B:5D:3A:F7:D4:9C:32:CA:02:2A:82:D1:25:08:12:AC
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01A0DCF2AD03FF777D26D82A98012E25714A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0C3A
Signing time: Sat 26 Sep 2026 09:01:26 +0000
Manifest this update: Sat 26 Sep 2026 09:01:26 +0000
Manifest next update: Sun 27 Sep 2026 09:01:26 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: 6B/Y1FzD9Q+XETkDUMhctgU+7l3/z/0sGscV56iDcqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:ad:03:ff:77:7d:26:d8:2a:98:01:2e:25:71:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Sep 26 09:01:26 2026 GMT
Not After : Sep 27 09:01:26 2026 GMT
Subject: CN=e30b76631b5d3af7d49c32ca022a82d1250812ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:b5:a8:5e:7e:54:af:74:da:26:74:3f:7f:
de:e1:04:0e:4a:e1:ad:c0:33:af:6f:06:6e:ea:05:
06:73:4a:54:0f:6e:ea:c2:89:84:66:b3:d0:6f:c4:
3f:da:c7:30:ee:66:4e:f5:25:db:ec:3e:d8:81:6b:
03:c7:2d:dc:60:cd:e9:6c:40:a5:af:89:79:8c:34:
d0:ff:f7:c9:5f:c1:6c:77:99:df:d2:dc:a6:52:be:
ef:72:ac:0f:db:2a:f8:bb:38:37:9d:19:42:f4:34:
72:ac:c5:6a:74:fe:51:f0:fb:9f:40:05:45:20:58:
55:51:bb:47:f2:c7:d4:b1:02:a8:19:95:33:c8:b6:
6d:06:32:fd:d2:e9:9d:5d:cf:40:59:22:8d:da:ed:
05:e9:29:79:db:31:f9:67:36:69:d7:d1:2c:a4:18:
b6:f8:d1:74:39:2a:8e:ac:21:61:e6:a9:f8:17:97:
13:d5:60:6b:3e:78:8a:40:86:f8:20:19:2f:03:e8:
97:58:01:2b:69:ee:5a:d4:e1:ce:63:f5:4f:46:c0:
34:f6:97:7f:bb:6d:8a:cd:a2:13:1b:2f:db:84:a7:
5b:d4:6e:ae:94:9b:f3:a1:e6:89:13:18:fe:9d:f4:
79:79:50:6a:9c:93:1c:ea:ec:24:41:20:53:d1:71:
1c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0B:76:63:1B:5D:3A:F7:D4:9C:32:CA:02:2A:82:D1:25:08:12:AC
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:af:63:33:d1:f4:cf:4a:02:df:c1:22:97:61:1f:eb:87:
09:12:28:fc:cb:c7:9f:f0:6c:8a:ec:02:50:84:02:58:13:94:
da:a3:4c:eb:11:d8:77:20:a1:2f:76:d6:d6:84:13:29:d4:f2:
83:8c:c0:20:fb:90:7d:a4:d2:08:06:1d:93:72:c7:30:3a:1f:
db:4a:b4:38:2b:b5:7c:51:8c:55:d9:4c:c7:58:d2:79:0c:04:
c1:5e:2a:33:9d:0b:0a:9f:dc:9c:5b:bf:0f:85:42:0c:a7:5f:
25:eb:b3:99:6e:d4:e2:88:76:9e:f5:b0:8e:49:42:17:b4:03:
46:82:5c:4c:eb:51:d5:d4:3e:21:a2:c2:fb:bc:d0:1c:22:de:
34:b8:0e:43:42:c9:60:ff:b6:62:01:86:1c:fb:53:69:4e:d8:
a6:4c:26:2c:fe:d0:7f:91:e3:70:41:62:ec:7b:0f:55:08:2b:
49:65:ea:d4:b5:33:7d:16:4d:f4:d8:c9:00:ff:11:ae:77:37:
f2:f2:b6:46:7b:00:a8:e0:c9:93:c9:30:30:7c:38:d8:0e:5f:
f8:1e:23:4e:d4:b1:2e:6b:e6:16:92:39:5e:68:17:f5:04:13:
2a:4a:80:24:35:26:99:da:57:be:c8:e4:0c:ef:f1:7a:49:a6:
f9:9f:83:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:37:25 2026 by rpki-client