Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: dQ7s81bywOFXMWEATqrGF2LsgvpXuhWebpn8qtZ71T4=
Subject key identifier: 5D:77:C8:6C:25:70:99:CB:C9:03:6F:1C:4C:3C:1D:1B:68:03:74:22
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01A0D9F204A2D38B73C2AB0D63CDCA8602E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1A89
Signing time: Fri 25 Sep 2026 19:01:51 +0000
Manifest this update: Fri 25 Sep 2026 19:01:51 +0000
Manifest next update: Sat 26 Sep 2026 19:01:51 +0000
Files and hashes: 1: Gl6nscEbuwxlhw6IyHzvgXxRljA.roa (hash: AA68brDB6Rz3mYLHYI9epwbmVOwfLXw3fS9hyfIcyJM=)
2: pAa4twbgch_NoibL7fcENGRZDqc.roa (hash: bT577lKWRgaDRixbmeW8XPo7ur0o3DBiy64cY6iV2LU=)
3: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: 1EHrXWPbXkMK0qP2BY8yZS3E8Eiyh4/OaYJQzLoiekk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f2:04:a2:d3:8b:73:c2:ab:0d:63:cd:ca:86:02:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Sep 25 19:01:51 2026 GMT
Not After : Sep 26 19:01:51 2026 GMT
Subject: CN=5d77c86c257099cbc9036f1c4c3c1d1b68037422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:92:1a:bd:46:f2:3a:c5:f3:46:11:97:3f:
f7:8e:5b:bb:5d:a4:73:b7:7e:a6:75:73:48:65:1b:
47:3f:25:ee:70:05:0b:93:19:77:14:7b:29:e0:28:
15:06:ce:06:91:f2:b7:73:1b:05:83:eb:e9:df:94:
f1:15:8e:b5:c1:b6:da:c4:b0:78:95:a1:93:74:68:
31:61:07:97:8a:d4:d8:ba:05:d4:53:26:68:df:22:
8f:32:a1:33:d5:9a:5e:8d:5a:df:21:87:2c:ff:a0:
04:5d:2e:4b:09:7a:a0:e6:b6:8a:0b:99:5c:7d:c3:
8d:cb:9d:61:44:4a:c5:5c:32:f9:17:80:a6:a3:d7:
79:fb:76:24:82:c5:bf:a2:ca:cd:27:41:1a:5b:69:
9a:3d:c6:92:1c:7b:ff:ee:52:90:29:ae:d3:eb:eb:
0e:3f:b2:f1:0c:f5:1b:b3:7c:5f:36:af:98:57:bf:
7a:71:bd:f9:92:a9:78:2c:b1:93:3f:e7:ed:6e:a6:
c4:66:00:0d:cc:38:c3:97:e5:60:92:af:3f:d8:aa:
88:57:55:4e:5f:88:a7:0c:f8:48:f1:04:b7:e1:4b:
2b:5b:be:ca:8e:7a:67:26:d2:ee:8c:98:f4:ee:2a:
bc:d0:0f:a6:18:3a:37:bd:2a:15:5b:78:f2:ed:d0:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:77:C8:6C:25:70:99:CB:C9:03:6F:1C:4C:3C:1D:1B:68:03:74:22
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f7:63:33:6c:a6:0c:b9:86:7e:68:c9:e6:8d:e3:f5:37:da:
9f:68:bb:87:e1:63:64:9c:a5:78:cb:67:a2:a9:de:ac:8c:b4:
69:7c:cc:74:e4:00:65:0d:fb:1e:ea:26:76:bc:1e:1d:3e:53:
5d:af:29:ee:b1:ee:de:40:0e:ab:08:ae:69:3a:83:30:df:aa:
fd:8d:e5:a1:65:75:06:02:ff:32:16:e3:6f:ec:db:19:c7:55:
fb:33:f8:3f:2e:8b:12:52:5f:00:e9:53:52:06:6a:9e:f3:ab:
61:d0:61:6b:28:a0:73:e7:89:83:40:a2:d9:97:64:c0:f0:a7:
1f:72:0f:83:6f:b8:e8:32:e4:f1:3c:de:2e:46:fa:43:dd:fe:
a6:e4:0d:3c:9e:8a:ab:4b:f7:95:65:af:a1:92:8d:bb:30:52:
39:7f:d0:dc:3a:ec:2d:72:e4:70:e1:56:07:e8:b8:9f:f3:90:
2c:13:ae:f8:57:c9:68:e8:92:c6:1f:cb:45:97:46:bc:d6:a0:
c8:39:ba:e8:36:36:cf:19:d5:34:55:9b:d6:f9:b6:96:b5:ba:
80:ca:6f:21:9d:35:14:46:0c:82:c6:d1:fd:6d:74:b1:de:c0:
25:02:2f:7c:eb:f0:9f:24:49:c1:43:3f:c1:96:10:c6:8f:36:
dd:27:ca:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZ8gSi04tzwqsNY83KhgLnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwOTI1MTkwMTUxWhcNMjYwOTI2MTkwMTUxWjAzMTEwLwYDVQQD
Eyg1ZDc3Yzg2YzI1NzA5OWNiYzkwMzZmMWM0YzNjMWQxYjY4MDM3NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6mSGr1G8jrF80YRlz/3jlu7XaRz
t36mdXNIZRtHPyXucAULkxl3FHsp4CgVBs4GkfK3cxsFg+vp35TxFY61wbbaxLB4
laGTdGgxYQeXitTYugXUUyZo3yKPMqEz1ZpejVrfIYcs/6AEXS5LCXqg5raKC5lc
fcONy51hRErFXDL5F4Cmo9d5+3YkgsW/osrNJ0EaW2maPcaSHHv/7lKQKa7T6+sO
P7LxDPUbs3xfNq+YV796cb35kql4LLGTP+ftbqbEZgANzDjDl+Vgkq8/2KqIV1VO
X4inDPhI8QS34UsrW77KjnpnJtLujJj07iq80A+mGDo3vSoVW3jy7dCMkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF13yGwlcJnLyQNvHEw8HRtoA3QiMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvdjM2ym
DLmGfmjJ5o3j9Tfan2i7h+FjZJyleMtnoqnerIy0aXzMdOQAZQ37HuomdrweHT5T
Xa8p7rHu3kAOqwiuaTqDMN+q/Y3loWV1BgL/Mhbjb+zbGcdV+zP4Py6LElJfAOlT
UgZqnvOrYdBhayigc+eJg0Ci2ZdkwPCnH3IPg2+46DLk8TzeLkb6Q93+puQNPJ6K
q0v3lWWvoZKNuzBSOX/Q3DrsLXLkcOFWB+i4n/OQLBOu+FfJaOiSxh/LRZdGvNag
yDm66DY2zxnVNFWb1vm2lrW6gMpvIZ01FEYMgsbR/W10sd7AJQIvfOvwnyRJwUM/
wZYQxo823SfKvQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:14:12 2026 by rpki-client