Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
File: u_ZiVRjeFxdQ353R3d5c5PATUUs.mft (raw, json)
Hash identifier: QvlmvcBb4d+wkdKnBlYWho4Me2AKLNM61kxc6nhRzTg=
Subject key identifier: 1B:BD:33:9D:36:55:2A:C7:CB:EF:D8:F2:3D:89:FC:5B:91:E3:52:27
Authority key identifier: BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
Certificate issuer: /CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Certificate serial: 01A0C4B28395993D6C68D57E96235A8C5029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
Manifest number: 71
Signing time: Mon 21 Sep 2026 16:00:28 +0000
Manifest this update: Mon 21 Sep 2026 16:00:28 +0000
Manifest next update: Tue 22 Sep 2026 16:00:28 +0000
Files and hashes: 1: A26-lasbV2k5M75rwTYmuN9_3do.asa (hash: Sun6EI7e8A+FFJyQElrNlyyAYtlzT8QGKplzHnPtD4g=)
2: r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa (hash: 6XJeDwvqeUvD80Gd8Az6ZX6d/AoW+pC7ZiXXSru7U5o=)
3: u_ZiVRjeFxdQ353R3d5c5PATUUs.crl (hash: +rJt7UcTLwrscy5u38h5Aut4D44DVQEd9zDvEZosRcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:83:95:99:3d:6c:68:d5:7e:96:23:5a:8c:50:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Validity
Not Before: Sep 21 16:00:28 2026 GMT
Not After : Sep 22 16:00:28 2026 GMT
Subject: CN=1bbd339d36552ac7cbefd8f23d89fc5b91e35227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:e2:84:e2:33:09:e2:15:ba:af:0b:2a:e8:
1d:96:95:5b:27:43:13:22:74:1b:45:63:e9:0e:07:
5c:35:b6:60:e5:db:e6:30:c4:83:77:95:86:67:a3:
52:e2:72:fa:54:b1:74:05:17:fb:d4:15:19:f6:ca:
57:f3:3c:0c:fa:45:e0:b5:67:35:66:c7:06:7f:66:
86:55:d3:93:04:3f:37:64:2e:2c:b1:05:d3:88:e7:
c1:12:4b:ab:38:88:a7:63:28:27:28:8d:bb:4d:14:
79:7b:9c:5b:c0:eb:e5:c9:d1:08:8f:5c:92:37:4a:
5a:bf:c3:18:d5:59:b4:0b:56:da:7f:24:10:92:44:
d9:17:7d:fb:db:96:0e:d8:de:2b:d2:55:75:0e:ae:
60:80:50:3a:4b:90:ca:37:29:61:28:b1:55:d2:2a:
8b:81:f1:46:06:76:42:12:52:c7:8a:49:0f:3f:f4:
84:c9:68:9a:9a:ec:1a:1e:86:6a:0e:56:00:d6:01:
36:35:18:3a:14:b9:97:e7:31:04:9f:9a:cf:0f:f4:
eb:a6:4e:51:65:9f:78:94:96:43:d1:29:0e:f7:4c:
ea:01:3b:48:8f:44:b3:38:ec:af:f1:6c:b1:ab:c3:
1f:e3:c8:64:dd:99:e9:aa:72:7a:fb:0a:11:f4:86:
28:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:BD:33:9D:36:55:2A:C7:CB:EF:D8:F2:3D:89:FC:5B:91:E3:52:27
X509v3 Authority Key Identifier:
keyid:BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:1f:c6:16:97:51:11:ea:c3:35:28:f2:77:d2:ae:39:84:d9:
c3:bb:ff:b5:c9:9b:7e:9c:ff:0b:1a:35:ce:03:7f:6e:c8:a3:
0e:13:e0:bb:5d:98:ee:67:0d:c2:b3:2b:93:9b:87:b5:7c:e0:
60:ed:df:8c:ff:7f:26:62:a2:e7:70:c6:90:f0:c5:c9:3d:06:
ec:06:07:04:a8:b3:10:f5:5b:89:0b:89:e4:14:08:7d:bd:fb:
c9:0e:a0:68:d2:48:01:95:19:d6:6d:f7:26:f1:36:3c:e6:1e:
0b:0a:0c:62:0a:06:65:a1:9f:7d:69:5a:7c:0f:59:db:df:b8:
fb:72:1f:2e:73:f4:38:97:fc:e3:a2:6b:02:08:5e:9c:93:01:
98:c2:1b:e9:3d:6d:78:0b:e2:ae:0f:5c:68:c7:5a:42:a7:a3:
6d:44:57:58:95:d4:90:60:12:b7:42:60:e2:fc:3b:73:7f:bf:
7c:09:ae:de:31:dd:59:93:c0:c3:cc:d7:20:6c:8a:e3:cf:fc:
8c:b1:13:98:33:f6:2c:00:98:f1:41:fa:28:c1:97:a9:f1:be:
9f:91:b8:8c:bc:68:7f:8a:0b:3b:bc:83:da:f0:4a:71:94:4c:
7d:be:52:f1:55:52:10:06:22:f9:dc:af:e5:e7:02:64:cd:ac:
e9:f5:68:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:08 2026 by rpki-client