Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: tTtEIyt6/X7hW/ESBO7GvXyf9c4/mmAnu37OsdryxUs=
Subject key identifier: 85:A9:07:CB:F3:7D:11:91:21:39:45:41:D8:7E:24:5F:19:6B:09:70
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 01A0D5025312F896AB2BB94CD2FE6C76E572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 0694
Signing time: Thu 24 Sep 2026 20:01:34 +0000
Manifest this update: Thu 24 Sep 2026 20:01:34 +0000
Manifest next update: Fri 25 Sep 2026 20:01:34 +0000
Files and hashes: 1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: YIR6MI3bofO2jL9Uq65WAaObYRjd6ebxQd73OenkAWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:53:12:f8:96:ab:2b:b9:4c:d2:fe:6c:76:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Sep 24 20:01:34 2026 GMT
Not After : Sep 25 20:01:34 2026 GMT
Subject: CN=85a907cbf37d119121394541d87e245f196b0970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:d9:e5:26:5c:9f:5c:6d:54:f4:20:22:ee:
63:13:e1:12:8c:2e:a0:19:2a:62:1b:30:f1:24:df:
f9:a5:fa:75:73:de:ca:82:fb:09:78:06:6f:b7:86:
a6:87:d7:76:0c:97:d6:a7:8b:ab:d6:72:7b:76:d6:
32:4a:a2:c3:2b:94:63:60:67:ed:ea:f0:9c:00:65:
f5:c0:e5:c6:bc:b4:7a:cf:96:25:e4:dc:87:71:68:
2b:37:69:5d:ff:79:90:bf:33:69:c6:a5:ab:54:3f:
20:12:1b:78:3f:4d:ce:2e:a5:f0:bf:c4:36:74:01:
69:ca:14:c1:02:b2:dd:aa:a0:92:71:5c:4e:6d:01:
c8:52:f0:95:15:77:17:c4:7b:0e:aa:f4:a7:c5:79:
97:7f:af:77:a4:4a:6e:c1:ac:33:18:e8:f3:28:73:
f3:9a:3e:d9:06:91:c8:4a:33:c4:f8:a9:d9:f8:fc:
f7:60:57:bc:89:4a:51:db:c4:7a:2a:43:8f:d6:2f:
91:e9:87:5a:a7:1e:48:3c:40:78:bc:2b:e9:06:54:
46:57:cd:68:d3:b4:2c:6c:f5:42:6c:c7:94:a4:d3:
6c:a3:51:b7:97:2e:48:e7:f2:f0:b7:76:b1:65:b4:
fa:d3:db:e0:75:2c:98:1f:49:8d:cb:78:f5:f4:9b:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A9:07:CB:F3:7D:11:91:21:39:45:41:D8:7E:24:5F:19:6B:09:70
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:d6:34:77:29:ef:c0:3a:9c:da:35:af:ea:c5:bb:ff:62:
59:c7:77:03:7a:a6:35:09:54:f8:1c:75:0a:62:20:93:eb:7b:
48:65:87:5b:7e:16:c6:d0:50:5b:e5:48:6a:c1:83:fe:57:d9:
16:36:e7:0a:c6:96:a1:9a:28:61:e0:66:76:ef:ff:9c:2c:16:
ab:31:1b:6a:80:9b:88:d0:9a:87:8c:35:ca:b0:b1:2c:1d:d9:
89:74:ed:31:39:3c:52:21:f5:0b:23:fa:06:8e:9f:0f:1d:49:
9c:31:7d:79:4a:b6:4a:52:2f:a6:59:dd:f6:92:3c:8a:75:95:
dc:a1:05:0e:e0:aa:e0:af:09:a3:9b:53:f3:78:b1:fe:23:96:
4b:88:85:fb:30:6d:fe:e4:56:3c:79:5e:da:e3:9c:4d:f0:89:
43:38:1e:2c:74:44:61:cf:57:e1:9e:5a:02:8b:79:92:8d:16:
af:c9:98:75:06:c9:91:69:f5:c1:52:96:f9:50:ed:3b:96:fa:
4c:b4:09:d8:a2:06:a6:74:68:76:e2:00:b8:0d:16:0f:0c:bf:
6d:a0:0e:40:88:4f:62:e2:db:39:58:13:77:15:79:c4:27:64:
53:2a:95:ef:41:d5:54:a8:15:3e:9e:ec:ce:0a:c3:9c:04:37:
2b:dc:17:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:59:20 2026 by rpki-client