Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: YeN7d8EObqgEeiacFtnIEWTvhNQAmmix6B1KxKX3wyY=
Subject key identifier: 1F:46:10:85:C3:30:3F:98:B9:F5:EB:0D:51:83:4F:A9:E2:57:2B:52
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01A10EB9FD2EB5ADCC5E334113DB2105169B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1145
Signing time: Tue 06 Oct 2026 01:00:32 +0000
Manifest this update: Tue 06 Oct 2026 01:00:32 +0000
Manifest next update: Wed 07 Oct 2026 01:00:32 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: rjoc0DvjUvn90AOx6MfbqXYfz1NdED8U5o3YWnX3Z3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:b9:fd:2e:b5:ad:cc:5e:33:41:13:db:21:05:16:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Oct 6 01:00:32 2026 GMT
Not After : Oct 7 01:00:32 2026 GMT
Subject: CN=1f461085c3303f98b9f5eb0d51834fa9e2572b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:b0:7f:db:2f:44:58:05:ec:a9:29:dd:38:
70:4e:17:8a:e5:a0:91:80:a3:e7:a9:4d:6e:57:8a:
6a:d4:d1:82:36:36:c7:e5:08:ab:b1:47:fc:4d:b3:
c0:8f:14:8c:1d:77:bb:1c:87:de:76:3c:60:2e:63:
d7:92:17:06:db:db:1d:82:78:39:5e:e8:22:7e:e6:
17:9b:75:1a:1c:48:72:ce:ff:18:8e:6d:19:1f:22:
13:9e:e2:7e:52:7c:44:3b:1b:ce:b5:97:12:18:86:
e9:41:9c:c6:68:9c:b9:08:b3:d0:b1:7b:6e:f3:aa:
cf:f2:76:bc:19:6a:aa:ba:49:cf:ea:a5:a7:07:d0:
69:ae:87:ca:3e:1c:79:34:34:0a:b8:31:90:46:26:
13:61:98:41:de:4a:db:6e:7e:91:b3:f8:f2:fd:9d:
d3:84:83:96:97:9e:74:a4:0a:47:e0:3f:50:4b:09:
18:f5:42:a5:12:e1:20:cf:22:8b:aa:02:23:fa:82:
7f:ad:53:e2:4a:b6:33:68:bb:12:1a:a4:60:0e:a1:
b4:87:96:38:4d:1c:7d:72:70:79:84:8f:67:32:be:
2c:34:1c:24:ae:68:24:4b:cd:98:c1:38:b3:90:b1:
57:4f:ff:56:52:a8:ff:b4:14:71:a2:7e:61:e5:db:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:46:10:85:C3:30:3F:98:B9:F5:EB:0D:51:83:4F:A9:E2:57:2B:52
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9e:84:03:9d:bd:2e:ee:4d:2b:3a:2e:0f:42:c5:3a:af:e4:
98:15:71:74:6a:6d:12:41:d4:78:d9:bd:32:0a:f8:9b:7d:b7:
03:e9:4c:ee:2a:d5:cf:1d:e9:38:4c:e9:d4:15:9e:f2:4d:80:
61:57:45:b8:60:5a:f2:ab:46:79:5c:24:0c:dd:4f:71:a1:fa:
0c:13:92:e5:82:70:60:26:af:9a:68:a1:4c:b9:e7:be:d1:a0:
60:87:6d:9a:f7:f9:df:08:68:07:67:c0:f4:d7:fd:60:bd:32:
cb:08:2b:94:c4:24:17:55:5e:70:ce:70:88:c0:23:76:48:df:
80:1d:f7:f1:ae:4f:3e:d9:de:70:77:3c:c3:93:3e:7e:a9:04:
90:21:de:9b:a4:fb:e4:85:78:24:28:ab:75:bc:5c:48:e7:a8:
3b:19:cc:cd:1b:b8:12:a2:e9:1b:35:2d:e9:a7:65:a6:14:27:
5e:79:f8:4e:a6:b5:3a:1e:8d:80:4a:60:b8:68:7c:aa:a4:d8:
6b:0b:8f:de:e0:16:6f:ca:69:84:9f:90:77:93:11:2e:ca:9a:
9a:48:b9:33:4d:5f:95:47:e8:c0:ed:01:ed:2b:38:5a:9d:ba:
19:50:c2:cb:6d:cf:6f:25:c9:0c:a8:e2:6c:4f:b2:a2:5a:41:
86:b2:45:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 06:54:02 2026 by rpki-client