Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: HQOJ/H/TY7GSHcKrS3dDafZzRq5woi2K9T4vM1sKImE=
Subject key identifier: 48:E2:34:E3:13:70:4D:8E:B4:7F:03:FB:7C:25:69:EB:0E:FC:86:81
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01A0ECD3DA418171CED58EBF9639EED38F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0D38
Signing time: Tue 29 Sep 2026 11:01:41 +0000
Manifest this update: Tue 29 Sep 2026 11:01:41 +0000
Manifest next update: Wed 30 Sep 2026 11:01:41 +0000
Files and hashes: 1: pdv29nkeNVZwnAAeJaWdQW_1VL4.roa (hash: fB/JSAQUaZyElsKjF4i3d/FqzocJgaIjhcdv4wB8pG4=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: 9K1ZbWRjAKDhR5jUfLUSkHld6k4tmpByWgLllDueftg=)
3: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:da:41:81:71:ce:d5:8e:bf:96:39:ee:d3:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Sep 29 11:01:41 2026 GMT
Not After : Sep 30 11:01:41 2026 GMT
Subject: CN=48e234e313704d8eb47f03fb7c2569eb0efc8681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f5:f9:13:bc:0a:65:e8:84:ba:1e:72:53:f7:
e5:da:83:5d:74:a7:92:23:71:0e:d2:07:1f:89:9e:
35:ed:01:28:38:61:ed:04:2d:e7:77:1d:9c:ae:00:
ce:17:35:d7:25:9f:06:4b:94:42:d5:ae:77:dc:e9:
19:15:9d:c3:d9:70:2e:4e:e7:6b:8d:c8:2e:d5:2a:
ed:c7:de:ac:87:c3:0b:b7:05:0f:50:27:b6:70:75:
0c:e2:d5:73:57:1d:8b:7d:08:ae:7c:3c:22:ef:51:
cb:f8:55:e0:e8:57:37:7b:c0:aa:4c:7b:b2:fc:4a:
cd:e6:0f:3b:5b:95:22:bd:f5:2d:95:d0:e8:9b:42:
8a:a1:f5:63:48:15:bf:e3:99:4f:e0:9b:ac:27:e2:
04:0f:a3:3c:ba:05:89:4a:df:16:a3:57:3d:ed:7f:
5c:98:2f:23:61:10:20:06:f6:62:31:e5:ae:72:91:
75:56:02:ad:9c:16:8f:84:12:fa:02:ad:ee:fa:e1:
cb:d8:61:2b:06:ab:48:f9:5a:35:18:51:aa:e7:58:
8c:a1:37:64:44:6c:37:94:e6:1f:30:84:54:b6:74:
ac:f2:8f:0f:1d:0b:64:1b:73:74:44:68:70:4c:c4:
a1:ca:43:2b:43:79:e3:e1:2f:f6:64:5f:2c:2f:fa:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E2:34:E3:13:70:4D:8E:B4:7F:03:FB:7C:25:69:EB:0E:FC:86:81
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:30:c4:c9:67:1a:3b:28:43:37:b4:3e:7f:53:7e:1c:ea:5a:
13:d9:58:fd:32:b8:8d:10:39:76:cd:83:89:78:d1:7f:5c:2b:
e0:d6:84:a7:33:41:95:bd:96:89:45:3f:84:7a:b1:e4:bb:ae:
f9:d2:90:b9:aa:bb:e8:10:95:17:4a:4e:c6:e8:2b:47:d1:d5:
88:e8:e7:0d:40:ec:53:57:5d:0b:98:db:53:72:60:9b:49:84:
51:1f:3f:a8:2d:66:12:4b:e5:e4:0b:31:40:d6:44:b6:96:6a:
bb:58:fd:18:98:61:34:01:86:df:ba:54:ee:cf:d1:f0:c9:3d:
d4:a7:18:ed:77:8d:e7:c1:f6:06:16:cc:3e:3c:ac:46:00:f4:
21:46:56:22:3d:8c:63:01:47:f9:6f:d1:82:88:ce:a2:38:03:
2e:27:18:08:ba:da:a5:5e:e2:46:4e:c6:e1:7c:28:cb:84:32:
21:d3:7c:5b:cf:bc:0e:c7:67:73:cb:2f:a7:5e:ef:49:a2:f9:
43:36:58:11:0f:f1:99:21:44:5f:66:17:23:46:7c:7e:d0:26:
74:b7:7c:f1:41:d2:4a:78:d7:38:69:25:12:0c:6e:9e:bb:43:
11:60:4e:14:ab:cb:c2:fc:81:83:77:41:4a:3c:5a:cc:20:4e:
87:ba:ad:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDs09pBgXHO1Y6/ljnu049vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5
M2Q3NTEwHhcNMjYwOTI5MTEwMTQxWhcNMjYwOTMwMTEwMTQxWjAzMTEwLwYDVQQD
Eyg0OGUyMzRlMzEzNzA0ZDhlYjQ3ZjAzZmI3YzI1NjllYjBlZmM4NjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PX5E7wKZeiEuh5yU/fl2oNddKeS
I3EO0gcfiZ417QEoOGHtBC3ndx2crgDOFzXXJZ8GS5RC1a533OkZFZ3D2XAuTudr
jcgu1Srtx96sh8MLtwUPUCe2cHUM4tVzVx2LfQiufDwi71HL+FXg6Fc3e8CqTHuy
/ErN5g87W5UivfUtldDom0KKofVjSBW/45lP4JusJ+IED6M8ugWJSt8Wo1c97X9c
mC8jYRAgBvZiMeWucpF1VgKtnBaPhBL6Aq3u+uHL2GErBqtI+Vo1GFGq51iMoTdk
RGw3lOYfMIRUtnSs8o8PHQtkG3N0RGhwTMShykMrQ3nj4S/2ZF8sL/qe9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjiNOMTcE2OtH8D+3wlaesO/IaBMB8GA1UdIwQY
MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt
NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli
LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojDEyWca
OyhDN7Q+f1N+HOpaE9lY/TK4jRA5ds2DiXjRf1wr4NaEpzNBlb2WiUU/hHqx5Luu
+dKQuaq76BCVF0pOxugrR9HViOjnDUDsU1ddC5jbU3Jgm0mEUR8/qC1mEkvl5Asx
QNZEtpZqu1j9GJhhNAGG37pU7s/R8Mk91KcY7XeN58H2BhbMPjysRgD0IUZWIj2M
YwFH+W/RgojOojgDLicYCLrapV7iRk7G4Xwoy4QyIdN8W8+8Dsdnc8svp17vSaL5
QzZYEQ/xmSFEX2YXI0Z8ftAmdLd88UHSSnjXOGklEgxunrtDEWBOFKvLwvyBg3dB
SjxazCBOh7qtiQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:15:32 2026 by rpki-client