Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: BlPewJKEcrj9x9WYaVe+G0G2aqheuAVSlg3S5xb4x1g=
Subject key identifier: E3:2E:D2:2D:6E:08:E8:51:E6:6E:10:B4:9E:B8:F9:53:FC:3F:52:DF
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 01A0C632F89EEBBD689F7BC8A6F852FC4A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 11AB
Signing time: Mon 21 Sep 2026 23:00:24 +0000
Manifest this update: Mon 21 Sep 2026 23:00:24 +0000
Manifest next update: Tue 22 Sep 2026 23:00:24 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 80ovjyylVpPU/U9QeSSAjcPBeakvZpVfMIAAaDzdr30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:f8:9e:eb:bd:68:9f:7b:c8:a6:f8:52:fc:4a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Sep 21 23:00:24 2026 GMT
Not After : Sep 22 23:00:24 2026 GMT
Subject: CN=e32ed22d6e08e851e66e10b49eb8f953fc3f52df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:70:15:bc:d8:27:7f:87:0c:9c:d5:06:38:3e:
16:c8:2f:40:17:97:93:14:81:ef:7b:56:02:96:c0:
4e:79:de:5a:c5:3f:33:f4:3c:01:52:a3:e6:c5:df:
35:44:82:73:08:cc:be:ad:7c:ef:ad:2d:9c:23:d9:
31:a1:1f:cc:cf:e0:3f:67:e8:67:a8:7e:00:69:72:
ed:9f:86:4c:de:08:18:6c:39:65:86:2c:dd:3d:0e:
ad:56:b6:4a:6c:89:c9:84:0d:38:a9:e9:50:9b:85:
d3:31:53:9f:c1:60:d4:10:31:3c:e6:33:75:7d:0b:
34:c5:4e:45:52:ed:81:c8:c1:cd:4f:e5:25:75:3e:
ee:67:86:d9:98:7a:7f:aa:10:a1:60:81:71:95:2c:
f2:32:fc:56:75:58:2a:f1:ce:c5:55:01:e3:b4:61:
ec:da:fe:44:bf:54:02:bd:3c:b0:cd:68:b7:bb:b3:
8c:a2:87:fa:4d:05:e1:5d:a0:71:1b:c1:d6:36:21:
1f:0f:19:23:b0:37:95:35:e7:b3:25:fa:e2:ca:22:
73:b1:b8:a0:5d:16:e9:1e:cb:91:73:b8:14:73:44:
03:59:25:ab:0e:cd:9f:c7:1c:e4:48:80:ab:23:45:
11:3b:89:8d:10:5c:ba:c0:2d:d9:91:2e:d7:7b:c3:
be:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2E:D2:2D:6E:08:E8:51:E6:6E:10:B4:9E:B8:F9:53:FC:3F:52:DF
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:0b:13:f7:07:66:b1:0e:5e:03:e9:50:73:0a:2a:d5:87:ee:
17:4b:6f:73:27:6b:18:4c:c0:dc:d0:a4:e8:fa:a7:03:cf:66:
9f:4a:07:d9:a1:bb:60:b7:e5:ca:a7:53:f9:28:40:4b:e0:99:
0d:af:60:db:5f:b6:b9:ea:83:7d:fd:15:f9:d2:5b:ed:4e:0e:
25:eb:2f:35:70:f8:52:8e:0b:f8:0e:a2:00:e3:46:a3:7a:23:
7c:d6:f5:9a:a3:5b:4e:86:4e:c1:81:f4:f9:1b:bb:26:a6:80:
9d:d8:ce:65:6c:20:9e:22:f0:16:ca:df:bc:a7:e7:ff:be:87:
d2:61:31:bc:db:10:65:fd:46:f2:98:32:f0:fa:30:21:e9:13:
9c:d1:12:5c:80:58:b7:e4:b7:25:35:f1:6e:c8:cf:ec:88:20:
60:45:4a:f3:09:d7:ba:56:30:55:8d:7a:3d:0a:f8:66:c4:1b:
c9:41:06:5a:62:14:9a:25:17:42:1a:70:5a:15:ad:b6:e6:c5:
32:49:44:3c:5c:cb:89:90:10:42:84:df:2e:8d:93:b0:58:35:
b2:28:77:ca:cf:a8:8a:7a:c8:48:07:3d:b9:02:87:36:54:36:
03:e1:f1:05:4d:31:1e:dc:4f:f6:1e:51:c4:9d:0a:73:65:60:
1e:c8:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:23:31 2026 by rpki-client