Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: UmL8h3t2xAKfyM7aYGews4SSJuuvKgUSJj0yfa0kCNg=
Subject key identifier: 18:B0:1C:09:E5:A1:BD:4E:10:CA:7D:73:13:03:C2:67:7F:DF:B2:59
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01A108EF44D69188D769CD06E994BCB3FE60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1142
Signing time: Sun 04 Oct 2026 22:01:00 +0000
Manifest this update: Sun 04 Oct 2026 22:01:00 +0000
Manifest next update: Mon 05 Oct 2026 22:01:00 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: HdZByFCyfWk/ORX9J/hLnxsNizvsAQA60KjopyWdI5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:ef:44:d6:91:88:d7:69:cd:06:e9:94:bc:b3:fe:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Oct 4 22:01:00 2026 GMT
Not After : Oct 5 22:01:00 2026 GMT
Subject: CN=18b01c09e5a1bd4e10ca7d731303c2677fdfb259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:f2:f5:f6:c9:aa:5d:0c:10:3b:65:85:6f:
64:92:33:61:b7:09:c9:44:f6:e0:d0:46:94:3a:42:
84:c1:ed:36:ba:40:13:2a:e5:e9:f3:1e:17:92:0a:
1a:4d:45:26:1a:2d:29:c9:2d:5e:7d:e5:d4:75:3e:
4f:8e:a3:dc:34:77:52:a3:4d:ba:96:fa:3d:9d:50:
c3:ba:9e:28:ad:74:01:d2:9e:ea:e7:1c:1d:5b:14:
26:fe:5a:ce:23:5a:5a:ab:8c:5a:14:72:e5:02:db:
a5:7c:21:45:62:4b:17:25:0a:5f:2f:fd:d5:5e:06:
ad:be:40:62:3b:b2:48:50:7a:e8:f9:70:72:79:1b:
c9:01:f9:18:f4:df:89:46:51:da:3e:2b:68:2f:45:
2a:78:1b:22:0f:8a:de:19:4d:c0:d2:4d:7b:cd:1e:
c9:98:e7:51:fd:c9:cc:0b:b6:3c:b5:f5:53:82:1f:
37:5f:61:ef:2e:6f:94:52:4f:0a:d4:cf:0e:83:63:
52:b1:f5:e8:f7:c3:c2:a2:04:ce:9b:2f:49:b6:57:
30:01:63:bb:35:5c:9f:09:0f:9d:73:1f:b8:55:0b:
76:90:e0:ff:ee:2a:e6:24:3b:50:ee:dc:6b:35:09:
b8:dc:58:17:5a:04:0e:dc:59:e1:56:ad:76:f0:8a:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B0:1C:09:E5:A1:BD:4E:10:CA:7D:73:13:03:C2:67:7F:DF:B2:59
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:89:e7:c4:17:55:aa:17:53:81:5d:32:72:ba:76:9e:76:06:
e0:02:77:93:d2:32:ce:70:ab:44:29:06:69:c8:85:68:3e:32:
07:69:a7:8a:04:2f:3c:39:3b:3b:b5:7d:d5:3f:e1:b4:38:3d:
c7:5e:43:96:cf:30:bf:2b:42:94:00:63:7b:ec:cf:f8:16:d2:
ca:b3:64:3d:76:76:a0:41:47:0e:28:1b:23:c6:c6:b7:71:e1:
48:2c:68:67:c1:6d:5f:34:db:f6:95:8a:c3:68:f2:a3:a0:cf:
b1:69:92:f5:f6:6e:93:dd:b0:20:da:54:84:47:65:59:a2:00:
33:b4:98:2f:84:93:cc:81:82:0b:11:25:57:0b:8c:81:5a:9c:
af:05:ba:b2:1c:e7:22:a8:37:39:c0:e9:af:54:24:77:c0:16:
71:5a:c9:36:bb:c0:a3:20:29:9e:b4:ec:2a:69:ba:f9:3c:75:
31:06:29:aa:97:ff:0a:c3:a4:04:2a:c1:14:96:0a:d2:27:4b:
aa:01:b9:75:e6:e9:40:b1:0a:13:59:7b:0d:d2:03:98:52:2d:
7f:21:42:e7:c4:02:9d:94:1c:39:4d:93:8a:0c:d1:2c:09:a6:
70:67:a4:d1:49:19:1a:70:b6:fe:d7:d5:fb:f0:64:77:8d:d9:
14:27:e3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEI70TWkYjXac0G6ZS8s/5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2Q0YWMxMzQ0ZWMzOGRjZTk5NzY4ZDc4YTExNGViZjdm
MTdkODUwHhcNMjYxMDA0MjIwMTAwWhcNMjYxMDA1MjIwMTAwWjAzMTEwLwYDVQQD
EygxOGIwMWMwOWU1YTFiZDRlMTBjYTdkNzMxMzAzYzI2NzdmZGZiMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZXy9fbJql0MEDtlhW9kkjNhtwnJ
RPbg0EaUOkKEwe02ukATKuXp8x4XkgoaTUUmGi0pyS1efeXUdT5PjqPcNHdSo026
lvo9nVDDup4orXQB0p7q5xwdWxQm/lrOI1paq4xaFHLlAtulfCFFYksXJQpfL/3V
XgatvkBiO7JIUHro+XByeRvJAfkY9N+JRlHaPitoL0UqeBsiD4reGU3A0k17zR7J
mOdR/cnMC7Y8tfVTgh83X2HvLm+UUk8K1M8Og2NSsfXo98PCogTOmy9JtlcwAWO7
NVyfCQ+dcx+4VQt2kOD/7irmJDtQ7txrNQm43FgXWgQO3FnhVq128IpnFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBiwHAnlob1OEMp9cxMDwmd/37JZMB8GA1UdIwQY
MBaAFLp9SsE0TsONzpl2jXihFOv38X2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUt
YWY0MjYyM2VhNDMxLzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iNjYxMjUtNjg0NC00YTg3LTliYjUtYWY0MjYyM2VhNDMx
LzEvdW4xS3dUUk93NDNPbVhhTmVLRVU2X2Z4ZllVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuonnxBdV
qhdTgV0ycrp2nnYG4AJ3k9IyznCrRCkGaciFaD4yB2mnigQvPDk7O7V91T/htDg9
x15Dls8wvytClABje+zP+BbSyrNkPXZ2oEFHDigbI8bGt3HhSCxoZ8FtXzTb9pWK
w2jyo6DPsWmS9fZuk92wINpUhEdlWaIAM7SYL4STzIGCCxElVwuMgVqcrwW6shzn
Iqg3OcDpr1Qkd8AWcVrJNrvAoyApnrTsKmm6+Tx1MQYpqpf/CsOkBCrBFJYK0idL
qgG5debpQLEKE1l7DdIDmFItfyFC58QCnZQcOU2TigzRLAmmcGek0UkZGnC2/tfV
+/Bkd43ZFCfjyQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 09:59:12 2026 by rpki-client