Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: 7boBtkLpHPLnCmLloVs/L/6SU5aGs3g/7CFPn/4Ti8I=
Subject key identifier: F8:13:B8:3B:F0:ED:F6:CC:15:4E:E1:A2:A6:8E:2D:2E:A2:26:57:65
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01A0CD485695096F6AD12EE46EA758FED11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 08:01:05 +0000
Manifest this update: Wed 23 Sep 2026 08:01:05 +0000
Manifest next update: Thu 24 Sep 2026 08:01:05 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: 4l4GBOK5kl6npf2vSvrbSfMxFHX0Q1hCkMtywI9F4QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:56:95:09:6f:6a:d1:2e:e4:6e:a7:58:fe:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Sep 23 08:01:05 2026 GMT
Not After : Sep 24 08:01:05 2026 GMT
Subject: CN=f813b83bf0edf6cc154ee1a2a68e2d2ea2265765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:08:60:7f:6e:24:09:03:3d:eb:16:2e:d0:
eb:7e:fc:97:59:22:3d:31:6b:c8:a5:cf:2b:35:8e:
cc:dd:88:32:c0:48:d5:03:34:5a:90:4b:b2:be:2f:
41:a0:15:86:1c:f2:5d:ec:a8:31:6f:fa:66:81:26:
f9:bd:77:66:40:74:77:c3:d8:50:6e:d1:eb:b1:71:
f7:71:c9:79:56:e6:70:ed:3d:50:a4:4d:38:c3:64:
f6:05:68:f4:f0:1a:28:00:e5:bb:70:af:18:d1:71:
26:8c:8c:1e:1c:1a:60:33:d7:e0:a5:a3:32:ba:7c:
41:49:f1:69:49:a2:9b:d8:eb:2f:ba:22:db:da:45:
49:27:3d:6f:58:1b:97:7e:31:f4:01:3d:03:bf:6b:
e8:73:e3:08:8a:91:2e:3d:52:d1:9c:c9:e4:15:14:
4e:b0:54:3a:38:ae:18:24:0e:71:16:3e:c6:4d:dc:
7c:d9:9f:f6:e8:e2:b7:28:cd:01:32:bc:aa:7b:f7:
28:e9:df:ee:eb:60:16:ce:a8:58:a5:0c:27:22:d2:
7b:de:bc:98:9b:1a:05:a1:5d:8d:fe:69:37:dd:34:
a9:31:5d:e5:5d:35:88:c1:c5:cf:72:42:99:c1:5a:
6f:95:3b:b8:7f:d3:35:8e:c7:f4:93:48:5f:22:f5:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:13:B8:3B:F0:ED:F6:CC:15:4E:E1:A2:A6:8E:2D:2E:A2:26:57:65
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ad:42:d2:05:aa:9f:d6:15:fa:1e:6e:c8:04:e8:26:b2:14:
b5:09:0c:d2:15:9e:84:24:68:d5:41:f6:7b:2b:b1:ad:5c:66:
46:d5:b9:76:f9:42:36:8f:5e:df:4c:89:66:e3:9a:05:ce:04:
63:7e:81:be:b5:3a:52:63:5e:23:00:4f:fe:df:1b:e9:2c:90:
b9:fa:bf:b9:29:52:49:c9:b2:26:68:54:67:ff:9e:d9:4c:e5:
30:6b:c3:dd:ea:29:d4:83:cb:ca:70:50:12:8d:10:e6:b5:1c:
27:d1:2d:3b:5f:fd:f9:c4:bc:eb:0e:c6:44:c9:49:f9:7f:c6:
18:85:be:60:f3:cf:e8:a3:ff:a2:fb:e4:97:13:fe:ff:ae:44:
15:5c:57:d9:0f:17:2f:a3:c9:33:92:4e:3d:ac:86:61:ce:50:
cf:2d:87:ab:64:db:f9:85:02:1e:8e:a7:5c:62:6b:c0:ed:3a:
91:ae:e8:d7:75:83:0e:70:5d:b6:b8:9f:9e:b7:ce:f2:35:2e:
5c:73:7f:c4:09:03:68:ac:21:19:fc:59:f4:cc:ec:5a:c9:da:
fe:5a:bf:5d:38:9e:7c:87:b3:b7:11:6b:d0:9e:23:5b:b0:e4:
d5:b1:a8:2c:60:32:2f:c9:e2:df:72:30:ce:85:68:74:0c:3b:
9f:38:e9:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNSFaVCW9q0S7kbqdY/tEaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGUyZjVhYzdjYmU2MjExN2RhNDc4YWMwYzAyN2FkNmQ4
NDNjNTYwHhcNMjYwOTIzMDgwMTA1WhcNMjYwOTI0MDgwMTA1WjAzMTEwLwYDVQQD
EyhmODEzYjgzYmYwZWRmNmNjMTU0ZWUxYTJhNjhlMmQyZWEyMjY1NzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+4IYH9uJAkDPesWLtDrfvyXWSI9
MWvIpc8rNY7M3YgywEjVAzRakEuyvi9BoBWGHPJd7Kgxb/pmgSb5vXdmQHR3w9hQ
btHrsXH3ccl5VuZw7T1QpE04w2T2BWj08BooAOW7cK8Y0XEmjIweHBpgM9fgpaMy
unxBSfFpSaKb2OsvuiLb2kVJJz1vWBuXfjH0AT0Dv2voc+MIipEuPVLRnMnkFRRO
sFQ6OK4YJA5xFj7GTdx82Z/26OK3KM0BMryqe/co6d/u62AWzqhYpQwnItJ73ryY
mxoFoV2N/mk33TSpMV3lXTWIwcXPckKZwVpvlTu4f9M1jsf0k0hfIvWFXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgTuDvw7fbMFU7hoqaOLS6iJldlMB8GA1UdIwQY
MBaAFLuOL1rHy+YhF9pHisDAJ61thDxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjIt
M2I5ZGIwNWQyMzg0LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMjA4YTAtZTQzNi00ODk2LWJlZjItM2I5ZGIwNWQyMzg0
LzEvdTQ0dldzZkw1aUVYMmtlS3dNQW5yVzJFUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgK1C0gWq
n9YV+h5uyAToJrIUtQkM0hWehCRo1UH2eyuxrVxmRtW5dvlCNo9e30yJZuOaBc4E
Y36BvrU6UmNeIwBP/t8b6SyQufq/uSlSScmyJmhUZ/+e2UzlMGvD3eop1IPLynBQ
Eo0Q5rUcJ9EtO1/9+cS86w7GRMlJ+X/GGIW+YPPP6KP/ovvklxP+/65EFVxX2Q8X
L6PJM5JOPayGYc5Qzy2Hq2Tb+YUCHo6nXGJrwO06ka7o13WDDnBdtrifnrfO8jUu
XHN/xAkDaKwhGfxZ9MzsWsna/lq/XTiefIeztxFr0J4jW7Dk1bGoLGAyL8ni33Iw
zoVodAw7nzjprg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:43:45 2026 by rpki-client