Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: 3cHIVAdIeBJoes8d+RB1UzOOjBR8F51VT/ikStrZ+5o=
Subject key identifier: E6:BC:60:01:37:F9:F9:4F:91:F9:50:5A:96:58:7D:C4:E0:60:FC:E6
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 01A0DBDFE09BE6113C0F753122F0B83B0A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: 01A9
Signing time: Sat 26 Sep 2026 04:01:17 +0000
Manifest this update: Sat 26 Sep 2026 04:01:17 +0000
Manifest next update: Sun 27 Sep 2026 04:01:17 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: JOn05LqdafK6ojxkVthzErKuv3D2bA2FGZl7dZc0XKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:e0:9b:e6:11:3c:0f:75:31:22:f0:b8:3b:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Sep 26 04:01:17 2026 GMT
Not After : Sep 27 04:01:17 2026 GMT
Subject: CN=e6bc600137f9f94f91f9505a96587dc4e060fce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:42:48:b5:ba:3f:c8:c3:40:c6:60:58:3b:
8f:94:bd:e7:de:0e:aa:35:d7:28:c6:06:d7:ca:33:
2e:47:ab:fa:5c:58:d0:3d:92:05:db:7c:42:eb:7f:
46:5a:5f:ac:ce:66:db:d9:c9:96:de:2b:e8:d3:51:
1c:5e:86:c3:c2:eb:ff:bb:71:43:a7:25:f4:c3:39:
f5:e0:70:32:16:7f:f5:8a:7b:04:82:e6:47:b4:02:
77:db:8a:64:3e:3c:87:50:52:80:47:f8:1e:54:b8:
b5:bd:90:73:01:19:f0:24:00:09:00:a8:e4:03:6f:
83:72:44:e3:bd:81:87:6e:1e:21:b8:71:27:a0:95:
35:26:99:c2:42:06:fa:aa:c6:51:ed:87:a9:7e:e5:
9b:90:73:77:aa:42:cf:71:73:00:b6:30:e6:44:9c:
79:65:0a:30:d1:9c:e6:4b:59:67:74:68:8e:af:5c:
10:23:7d:22:45:be:41:98:da:54:35:82:a9:a0:09:
18:63:5e:a4:bd:81:3d:65:85:d3:23:93:a8:ef:72:
4a:f8:15:2f:3e:3e:d3:5c:b7:db:d7:62:0b:1f:d5:
fe:ce:07:d0:90:8e:a8:0a:4e:39:63:36:c0:cd:c7:
84:3f:73:39:80:59:a8:38:53:af:f2:87:43:93:f4:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BC:60:01:37:F9:F9:4F:91:F9:50:5A:96:58:7D:C4:E0:60:FC:E6
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e1:82:5c:d2:5b:eb:bb:67:d0:38:87:d5:d8:59:4e:5c:ad:
5b:b8:bc:eb:c1:89:8a:93:06:df:32:e4:33:27:d1:e5:77:39:
53:6c:96:b3:a9:f1:13:8f:f6:01:e0:3f:02:e2:c2:34:98:71:
65:4b:b6:c4:74:b2:a5:1b:a2:b5:fe:67:c5:ea:44:a4:e1:b2:
18:c1:60:1f:54:c3:cb:64:de:38:14:b6:14:54:b6:30:1f:ed:
88:2b:4a:be:8e:0a:48:71:f4:91:91:3f:33:29:92:cb:a2:81:
55:ce:58:e5:39:07:81:5a:cd:25:d6:51:b5:e9:ba:44:ba:84:
e7:52:8d:15:19:97:54:94:4f:35:8b:9a:c4:a0:c1:b2:99:1b:
a7:be:90:ba:b7:b7:d5:f8:de:be:67:6a:06:dc:cf:42:95:c3:
ba:a8:d0:1c:40:b3:1c:33:99:ca:72:dd:4e:e9:40:2c:6b:49:
76:2e:d8:0e:04:38:23:86:3b:74:36:44:94:df:62:3a:d1:0f:
bd:9b:2f:4f:49:1f:fb:dd:27:82:82:80:ac:85:3c:fa:c0:1f:
6b:fd:eb:10:97:bd:5a:d0:aa:b7:3e:f6:e8:81:69:0b:5a:6e:
17:55:fe:e0:ab:fc:0d:60:c9:07:82:7c:52:5b:28:e0:ff:0a:
b3:aa:dc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:35:44 2026 by rpki-client