Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: Mv6g7XrOKhmcLNfv43Jr6bBUj8YQSpK95MguMF0mZfc=
Subject key identifier: 1A:18:FC:05:F7:98:D1:A5:C2:B3:E7:C0:71:E7:9E:BD:FA:A2:C6:79
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 01A0E32BD98629FF16B23CD28259F408AF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0D33
Signing time: Sun 27 Sep 2026 14:01:36 +0000
Manifest this update: Sun 27 Sep 2026 14:01:36 +0000
Manifest next update: Mon 28 Sep 2026 14:01:36 +0000
Files and hashes: 1: pdv29nkeNVZwnAAeJaWdQW_1VL4.roa (hash: fB/JSAQUaZyElsKjF4i3d/FqzocJgaIjhcdv4wB8pG4=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: GbgoLXYYCmo6uVCNTy19+pCdaSVFmX0QqmNV/vBuWzI=)
3: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:d9:86:29:ff:16:b2:3c:d2:82:59:f4:08:af:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Sep 27 14:01:36 2026 GMT
Not After : Sep 28 14:01:36 2026 GMT
Subject: CN=1a18fc05f798d1a5c2b3e7c071e79ebdfaa2c679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:94:6d:8a:91:5d:a7:de:e2:55:17:17:85:
51:4c:fd:34:1c:bb:24:c9:75:10:85:6d:e9:1d:d5:
a1:94:22:df:3a:dc:cd:90:73:cb:ce:84:b0:73:6c:
f9:51:06:a6:ec:b3:0a:41:0d:76:0a:09:6f:8b:b6:
70:68:99:4d:56:cf:e1:1a:a5:32:68:5c:b6:fe:fc:
41:fb:f7:79:5a:94:14:11:e1:d4:c8:bc:f6:cd:10:
99:e5:f4:8d:b6:a3:a9:1d:3f:eb:37:ef:d3:12:ec:
7b:bc:66:a7:1b:e7:78:46:4b:b9:9c:da:e1:37:c1:
cd:3b:83:85:5a:8a:ba:74:9b:dd:d0:89:8c:79:01:
56:22:2d:65:41:d8:1b:81:65:8a:70:9f:25:1e:fd:
1c:df:24:03:9f:fd:89:85:35:d2:8d:33:16:33:f4:
11:1c:0c:70:06:07:05:97:be:c8:ae:da:eb:d9:7a:
e0:9e:d1:69:61:f8:f8:a8:50:c5:fe:28:fc:7e:22:
de:53:13:82:32:33:af:b1:78:57:95:53:c4:97:01:
08:61:dc:81:6c:83:f7:ff:84:2c:1a:d6:72:ae:02:
43:00:03:8e:60:4f:1e:65:c4:4f:94:1c:76:9c:2f:
ee:7e:0a:b1:b5:d9:5e:e0:1b:c9:7a:5a:76:be:52:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:18:FC:05:F7:98:D1:A5:C2:B3:E7:C0:71:E7:9E:BD:FA:A2:C6:79
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d9:cd:cc:8c:44:5b:92:b4:15:64:33:04:78:86:6c:d5:19:
b4:89:20:4c:58:ea:9c:2c:27:db:7a:36:5e:be:a9:79:56:46:
9b:0d:bb:ed:f9:21:cf:a6:45:52:aa:f4:7a:fd:5b:1c:65:e1:
b1:7c:12:e1:ed:39:ee:49:a6:04:47:be:69:e5:e8:cc:de:96:
d0:45:76:98:5f:9e:e4:da:a9:37:d4:e3:09:49:ba:da:5f:25:
c3:68:83:8b:14:a3:6c:31:56:9f:41:58:77:8a:66:8d:ef:0d:
b0:4a:b2:5e:6b:24:0d:74:b6:37:79:c0:57:51:76:b7:db:8d:
6e:d7:18:d7:ed:12:2b:ff:30:30:ea:93:1d:17:de:49:be:12:
d6:69:a7:3d:7e:39:f6:fa:b5:b1:6c:ad:03:4c:3b:1e:77:01:
7d:ce:8b:5a:6a:d3:f1:d3:fd:f1:10:92:2a:53:79:19:18:01:
ab:32:ca:67:0b:22:9c:13:78:5e:13:b7:c9:c1:37:cd:0c:11:
ab:c3:69:fe:29:ce:a4:f9:77:50:2a:20:53:dc:c9:dd:9f:2f:
3a:ee:27:f6:2f:0a:f6:fc:90:1b:d1:dc:11:57:fd:35:24:a0:
7d:f1:64:cb:c2:8e:ae:f2:42:97:a2:7b:36:0d:2d:5a:ce:7f:
d7:94:d2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDjK9mGKf8WsjzSgln0CK8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5
M2Q3NTEwHhcNMjYwOTI3MTQwMTM2WhcNMjYwOTI4MTQwMTM2WjAzMTEwLwYDVQQD
EygxYTE4ZmMwNWY3OThkMWE1YzJiM2U3YzA3MWU3OWViZGZhYTJjNjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLiUbYqRXafe4lUXF4VRTP00HLsk
yXUQhW3pHdWhlCLfOtzNkHPLzoSwc2z5UQam7LMKQQ12Cglvi7ZwaJlNVs/hGqUy
aFy2/vxB+/d5WpQUEeHUyLz2zRCZ5fSNtqOpHT/rN+/TEux7vGanG+d4Rku5nNrh
N8HNO4OFWoq6dJvd0ImMeQFWIi1lQdgbgWWKcJ8lHv0c3yQDn/2JhTXSjTMWM/QR
HAxwBgcFl77Irtrr2XrgntFpYfj4qFDF/ij8fiLeUxOCMjOvsXhXlVPElwEIYdyB
bIP3/4QsGtZyrgJDAAOOYE8eZcRPlBx2nC/ufgqxtdle4BvJelp2vlKxeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoY/AX3mNGlwrPnwHHnnr36osZ5MB8GA1UdIwQY
MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt
NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli
LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9nNzIxE
W5K0FWQzBHiGbNUZtIkgTFjqnCwn23o2Xr6peVZGmw277fkhz6ZFUqr0ev1bHGXh
sXwS4e057kmmBEe+aeXozN6W0EV2mF+e5NqpN9TjCUm62l8lw2iDixSjbDFWn0FY
d4pmje8NsEqyXmskDXS2N3nAV1F2t9uNbtcY1+0SK/8wMOqTHRfeSb4S1mmnPX45
9vq1sWytA0w7HncBfc6LWmrT8dP98RCSKlN5GRgBqzLKZwsinBN4XhO3ycE3zQwR
q8Np/inOpPl3UCogU9zJ3Z8vOu4n9i8K9vyQG9HcEVf9NSSgffFky8KOrvJCl6J7
Ng0tWs5/15TS5g==
-----END CERTIFICATE-----
Generated at Sun Sep 27 19:02:25 2026 by rpki-client