Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: jBfHpaa/qr5VLHcpRTa9y8PzpuR2JRwI7e0f0YN0XKk=
Subject key identifier: AD:A4:43:42:7A:F9:C7:3D:D9:AA:E2:33:7D:64:82:4E:12:59:57:0B
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01A0C96BBAD0011A9079191579CA9551B9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 14:01:15 +0000
Manifest this update: Tue 22 Sep 2026 14:01:15 +0000
Manifest next update: Wed 23 Sep 2026 14:01:15 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: e0EjWq9BpkTcWXTipr9sTXqUeCi9J7+y8ezXZKMp2Mc=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:ba:d0:01:1a:90:79:19:15:79:ca:95:51:b9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Sep 22 14:01:15 2026 GMT
Not After : Sep 23 14:01:15 2026 GMT
Subject: CN=ada443427af9c73dd9aae2337d64824e1259570b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:5d:f1:f0:62:6f:a8:c9:cc:21:43:b8:69:
e4:75:af:c7:37:03:e1:7a:17:c9:2a:4b:51:11:60:
05:67:e4:c2:5c:40:c1:15:c5:4c:52:25:01:d0:25:
f6:01:61:3a:b6:e3:49:20:0e:86:88:32:b4:69:10:
43:a0:b5:3f:85:54:0c:87:ef:61:70:15:5b:89:7f:
d7:88:25:43:c3:60:dd:1d:21:90:fe:08:0c:3d:8d:
cf:18:bb:6d:e4:f6:e7:2f:90:96:ce:66:ec:8f:80:
96:2f:ae:7e:d8:47:fc:d2:62:28:fb:22:af:01:c5:
68:ef:81:33:52:00:83:97:1a:02:eb:c5:d2:61:09:
c0:06:f0:98:2b:60:9c:5a:ee:25:90:15:a3:c3:89:
f3:69:63:23:53:0f:f2:39:91:0f:93:4c:12:74:f5:
6b:24:2d:fd:b8:8e:3a:06:50:29:a5:5c:47:3e:64:
e5:cf:47:7c:ea:19:38:17:ef:b8:61:92:c4:b8:82:
77:70:85:19:49:71:e1:ac:a2:cd:4f:b9:91:75:94:
97:5a:49:2d:85:87:e4:70:3a:e6:17:c8:e6:71:8c:
90:f0:2f:9c:9c:5d:6e:62:52:7b:ca:75:59:ba:f4:
ef:3a:4a:a3:5b:86:90:67:df:02:72:9f:25:93:fc:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A4:43:42:7A:F9:C7:3D:D9:AA:E2:33:7D:64:82:4E:12:59:57:0B
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:0a:bf:9a:24:8e:73:91:8d:bf:a8:57:e0:9b:9f:ab:c6:
a9:f0:d5:b7:4e:36:a9:38:aa:0d:fc:48:ba:26:31:7b:ed:99:
97:13:7d:99:ac:c8:3c:8c:a9:27:dc:99:bb:14:35:4d:70:bb:
2a:2f:44:f1:fc:39:e3:4c:49:bc:f6:9a:d7:b3:9e:86:34:48:
b8:16:43:72:e3:0a:67:0b:d6:4e:46:d8:51:07:6c:ba:c1:77:
5f:fa:50:f3:13:10:dd:1a:d2:b5:01:37:94:49:bb:e0:cb:04:
07:58:cd:bf:df:37:27:ba:fb:21:47:75:06:0b:a7:c5:d5:e8:
96:43:e9:1f:6c:ed:60:1c:a0:ca:d2:97:46:df:91:78:18:f1:
79:29:e3:7c:4a:4a:ab:a2:ee:be:89:0c:77:6e:95:8b:f2:ca:
41:35:d5:cf:da:c7:45:a9:87:9e:c1:4c:cb:e6:7c:25:78:46:
1d:dd:f8:10:28:f9:f6:9a:b9:5a:30:10:b3:de:23:cb:bc:ae:
0a:94:03:b5:10:bc:61:43:cf:c9:a1:f6:1f:fa:36:0b:f9:80:
96:2a:65:6d:2b:7d:06:90:9c:6e:39:52:17:c5:70:8b:0d:b9:
8c:63:1a:08:48:35:ff:38:92:2c:22:27:86:a7:b1:7a:c9:e9:
1d:4c:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:39:16 2026 by rpki-client