Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: HTpcsPk4+JoCoDX3xm4v/kjYpuvFwDoCKKomJjo5sUw=
Subject key identifier: D7:97:29:4F:4C:C5:61:62:CD:14:B8:AA:AA:F7:47:7C:F1:D5:A0:BB
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01A0C7EAEC3EE96FF23A1BA1F12CDC9A6CBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1A66
Signing time: Tue 22 Sep 2026 07:00:56 +0000
Manifest this update: Tue 22 Sep 2026 07:00:56 +0000
Manifest next update: Wed 23 Sep 2026 07:00:56 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: 9cHWJ2egmUmq1s+1n6a8RUxTSWBztFkQTCIZ1FuCRBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:ec:3e:e9:6f:f2:3a:1b:a1:f1:2c:dc:9a:6c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Sep 22 07:00:56 2026 GMT
Not After : Sep 23 07:00:56 2026 GMT
Subject: CN=d797294f4cc56162cd14b8aaaaf7477cf1d5a0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:09:17:ac:b4:9c:bb:ba:24:e4:53:05:dd:
ad:03:5c:6b:2a:a8:5a:94:9a:ef:1f:5b:b6:dc:f5:
41:33:ca:29:ee:6e:41:4c:e1:e4:e0:97:81:1f:a3:
09:b1:91:8d:fc:37:b2:8a:a5:77:b2:53:79:e4:78:
15:4e:f3:74:81:f3:a2:3e:4d:dc:bf:ec:44:41:eb:
b1:af:59:ce:84:ed:b7:24:e8:2f:17:b9:f3:44:62:
66:bc:64:d1:a9:e7:3c:78:9d:b4:61:98:7f:01:0b:
70:29:0e:65:1b:6b:7f:32:a9:c1:1f:25:47:ef:aa:
f4:20:4d:0f:27:0f:32:d4:0f:55:e3:49:80:a9:25:
f2:48:3b:56:42:cd:52:22:cf:f6:e9:3a:30:70:d9:
b7:45:31:ca:12:50:49:84:fc:26:37:dc:c3:b2:b9:
6d:f8:65:ac:7c:3e:26:75:e2:32:a4:1f:8d:30:bf:
ba:95:d2:10:0c:9e:c8:8f:4d:4e:88:a5:90:93:74:
40:9c:64:6b:6b:24:41:28:69:8a:38:40:3d:46:bc:
20:0f:10:0f:80:a0:9c:2b:c6:af:13:b0:af:8f:3e:
09:fc:bb:f7:80:35:7e:a3:9f:e7:0d:5d:a6:f9:c3:
8c:2e:f9:41:9c:44:90:cb:a1:cf:a1:87:0e:7c:5d:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:97:29:4F:4C:C5:61:62:CD:14:B8:AA:AA:F7:47:7C:F1:D5:A0:BB
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:13:a6:5b:c5:2f:e8:78:f7:4d:9d:38:82:f5:db:b4:c0:fc:
d2:8e:67:93:09:e4:72:1a:39:3f:bc:44:8c:b0:77:12:ef:60:
57:24:ae:40:ab:cd:a8:fe:8b:6c:47:19:6d:1c:dc:5b:39:e4:
2f:73:b1:44:72:fd:11:fe:5a:04:ba:dd:7b:a8:10:cc:6a:36:
9e:fc:19:65:0e:d9:78:cb:4f:92:70:02:29:56:f9:03:ca:b2:
d8:4f:da:33:25:e8:a8:15:4a:8c:e4:66:29:3e:e4:72:a7:bc:
99:ae:5f:69:4f:9b:7b:f3:24:ec:25:f5:2c:3f:fb:70:ac:1a:
cf:46:f0:43:16:08:74:19:96:9b:d3:5e:c8:82:f3:f6:7a:40:
77:35:b5:1c:5c:3e:63:c3:74:41:1a:51:cc:a4:db:28:de:96:
24:71:e9:ac:6a:89:cd:67:c6:cd:d7:fb:27:98:ea:5c:d5:b2:
27:6c:87:49:61:75:7b:6e:32:a4:1b:7a:32:76:c7:f6:b4:25:
d0:16:bb:dd:58:ec:ca:ec:b3:74:9e:99:ac:55:d6:bc:5a:cc:
97:00:66:f2:bf:1a:65:0d:14:ca:4c:d0:54:f3:ed:61:09:5a:
c7:f5:2d:ab:ca:5d:de:c2:9e:1a:74:ef:27:c1:2c:e8:e3:c2:
72:f1:3d:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6uw+6W/yOhuh8Szcmmy8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTFjN2VkYmYxZDNjYzRmYjA3NTM4MWEzN2Y3NjI1NmI4
NzI4NWQwHhcNMjYwOTIyMDcwMDU2WhcNMjYwOTIzMDcwMDU2WjAzMTEwLwYDVQQD
EyhkNzk3Mjk0ZjRjYzU2MTYyY2QxNGI4YWFhYWY3NDc3Y2YxZDVhMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvwJF6y0nLu6JORTBd2tA1xrKqha
lJrvH1u23PVBM8op7m5BTOHk4JeBH6MJsZGN/DeyiqV3slN55HgVTvN0gfOiPk3c
v+xEQeuxr1nOhO23JOgvF7nzRGJmvGTRqec8eJ20YZh/AQtwKQ5lG2t/MqnBHyVH
76r0IE0PJw8y1A9V40mAqSXySDtWQs1SIs/26TowcNm3RTHKElBJhPwmN9zDsrlt
+GWsfD4mdeIypB+NML+6ldIQDJ7Ij01OiKWQk3RAnGRrayRBKGmKOEA9RrwgDxAP
gKCcK8avE7Cvjz4J/Lv3gDV+o5/nDV2m+cOMLvlBnESQy6HPoYcOfF2EUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeXKU9MxWFizRS4qqr3R3zx1aC7MB8GA1UdIwQY
MBaAFLkRx+2/HTzE+wdTgaN/diVrhyhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQt
NjEzMDE3ODg2ZThiLzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8yM2IxNDgtZTBkZC00ZmE2LWFmNDQtNjEzMDE3ODg2ZThi
LzEvdVJISDdiOGRQTVQ3QjFPQm8zOTJKV3VIS0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeROmW8Uv
6Hj3TZ04gvXbtMD80o5nkwnkcho5P7xEjLB3Eu9gVySuQKvNqP6LbEcZbRzcWznk
L3OxRHL9Ef5aBLrde6gQzGo2nvwZZQ7ZeMtPknACKVb5A8qy2E/aMyXoqBVKjORm
KT7kcqe8ma5faU+be/Mk7CX1LD/7cKwaz0bwQxYIdBmWm9NeyILz9npAdzW1HFw+
Y8N0QRpRzKTbKN6WJHHprGqJzWfGzdf7J5jqXNWyJ2yHSWF1e24ypBt6MnbH9rQl
0Ba73VjsyuyzdJ6ZrFXWvFrMlwBm8r8aZQ0UykzQVPPtYQlax/Utq8pd3sKeGnTv
J8Es6OPCcvE9bw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:37:39 2026 by rpki-client