Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: GznzVvKnfeDDTMh7tliiGnW6DXmZJG2OcwLLTV6xU6c=
Subject key identifier: 85:0F:9C:75:FE:AB:24:CB:7D:D0:73:49:C6:0D:CC:9A:9C:4A:05:18
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 01A131EB1A03352B8F2D826747AEF352BA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 21:00:53 +0000
Manifest this update: Mon 12 Oct 2026 21:00:53 +0000
Manifest next update: Tue 13 Oct 2026 21:00:53 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: RJfYhuj8IAV06nwip5D5ysPwklpJ+talp0JLseUj+uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:1a:03:35:2b:8f:2d:82:67:47:ae:f3:52:ba:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Oct 12 21:00:53 2026 GMT
Not After : Oct 13 21:00:53 2026 GMT
Subject: CN=850f9c75feab24cb7dd07349c60dcc9a9c4a0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:82:8d:3a:d7:b3:9d:90:43:4e:ab:dc:22:75:
ca:4e:dd:95:c2:03:aa:d2:69:f5:24:b7:fc:9f:79:
59:1d:04:69:ee:4c:70:a1:2e:25:7b:1a:d6:69:e3:
c0:76:64:d0:b3:c3:ce:27:8b:41:2f:8f:c2:79:07:
93:e4:09:f0:36:0f:0f:8b:e7:ae:3d:70:06:0e:e8:
5b:c9:ce:ce:03:df:7a:90:36:8e:eb:e5:32:41:90:
d3:09:01:66:8f:a6:ac:67:cd:b0:fa:3b:cd:45:31:
c3:cc:c0:85:fd:7c:d0:30:8a:37:8f:f3:58:bf:58:
0a:21:ba:b1:79:52:43:d3:a6:b2:ce:12:f0:74:ff:
87:2f:1e:bf:ec:3b:56:ec:2e:e8:9a:57:d4:d8:0f:
f8:92:03:98:1f:ff:2b:22:47:cf:39:dd:1f:99:56:
dd:83:ff:73:ce:ce:8c:dd:95:23:cb:2a:13:a6:4c:
47:f0:e9:ba:fb:a0:5f:fa:28:b9:f3:2a:ba:78:f9:
5a:6a:ae:b0:c2:df:f4:e9:e9:22:bd:c3:d7:be:fa:
68:ab:00:cb:b5:b3:cc:9b:98:19:d1:c5:90:45:cf:
f6:f8:26:39:9e:07:1f:15:ac:f3:91:c9:e8:dc:2b:
90:03:d4:7a:4d:2d:8a:36:cd:af:a8:33:f4:3f:5a:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0F:9C:75:FE:AB:24:CB:7D:D0:73:49:C6:0D:CC:9A:9C:4A:05:18
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:41:3f:2f:b1:49:bc:c9:ae:51:dd:c8:68:0a:af:d7:2e:5a:
ae:02:0a:68:97:9b:e4:05:b8:29:c0:57:80:32:8c:0f:67:67:
6d:44:8a:1a:7a:ca:14:71:43:ee:77:54:b8:02:b2:c2:be:0f:
21:ed:82:03:04:ef:1f:fa:32:cb:8a:c7:eb:8f:d7:79:af:2c:
43:93:6f:b2:0f:ea:86:87:9e:70:10:b8:ac:3d:44:b4:70:6e:
0a:b0:cb:47:99:16:27:0c:61:e9:96:f4:5c:0f:27:90:4e:5a:
39:31:36:12:f6:53:bd:a6:4d:93:66:2b:66:36:e2:da:80:1b:
8b:bf:5f:72:e0:5a:f1:82:50:4f:a0:e7:cc:6e:02:48:fe:98:
11:e4:5f:61:95:51:e3:14:09:54:ac:54:66:b8:f8:50:8d:88:
0b:59:b7:79:a5:ed:c9:79:93:ce:30:09:8e:6e:72:3e:35:3e:
ac:34:d8:e7:2e:05:f2:f1:b9:89:b2:37:d1:a9:e6:d1:27:b4:
c1:44:28:ba:17:6c:4f:99:0c:7d:1c:7a:86:07:dc:7e:6c:44:
0b:95:11:1d:2f:99:19:a2:dd:ef:6f:48:db:78:20:62:a3:90:
cd:e7:47:fe:24:e1:08:bb:7b:cc:5b:db:3f:ba:f6:30:5f:33:
07:bd:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:44:19 2026 by rpki-client