Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
File: B_U9OUYncp8GiDprXg8JnzHMke4.mft (raw, json)
Hash identifier: iQg76MH5ssDHJ+fSgofFLOShaDS5bLYnPJkKvT4FBvE=
Subject key identifier: 66:CC:6F:19:D8:A5:BD:52:E4:57:31:09:61:BD:91:9D:D9:DE:D2:37
Authority key identifier: 07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
Certificate issuer: /CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Certificate serial: 01A0C746912B27EEF9F57FDEDF10C692AAD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
Manifest number: 34
Signing time: Tue 22 Sep 2026 04:01:25 +0000
Manifest this update: Tue 22 Sep 2026 04:01:25 +0000
Manifest next update: Wed 23 Sep 2026 04:01:25 +0000
Files and hashes: 1: 7WOSlFPLYKbaSc0AywlRaUbStyY.roa (hash: uO8CfwrbWZwCpJPs/hwdVR7Fs/7M1x6qs0VxV8ncyjU=)
2: B_U9OUYncp8GiDprXg8JnzHMke4.crl (hash: wVhqkzI1r8zSNR3fPhR6pdIck72f1cT+8XTqC+YbGCE=)
3: s_LGdjThiFcrMxcJkmwRhZvzZNk.roa (hash: E33m6eSC8t6LmYaovZYmAszctVcFzgqvduI9yyCSdCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:91:2b:27:ee:f9:f5:7f:de:df:10:c6:92:aa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f53d394627729f06883a6b5e0f099f31cc91ee
Validity
Not Before: Sep 22 04:01:25 2026 GMT
Not After : Sep 23 04:01:25 2026 GMT
Subject: CN=66cc6f19d8a5bd52e457310961bd919dd9ded237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:02:b6:33:d4:0e:69:5d:2a:05:e8:fc:96:77:
b6:a9:8d:43:79:aa:88:d8:29:71:61:8f:37:ad:f7:
0d:10:91:7d:ca:96:04:22:1e:e1:cf:cb:1a:5a:d4:
36:de:2a:f2:0c:0d:4c:1a:17:97:d1:79:49:92:97:
c6:10:ec:2a:7a:4e:05:f3:bb:b3:71:97:53:b6:37:
ea:2f:fd:41:fd:86:4c:db:6a:47:e5:88:23:04:c6:
c3:c3:aa:dc:a6:ac:6c:51:06:62:ab:53:05:34:74:
ad:44:62:5d:72:ce:2a:c3:c6:42:01:73:94:06:95:
09:12:c2:d3:35:ba:e4:61:af:a7:57:d4:63:68:a3:
db:54:99:ca:a1:74:c0:75:b0:16:d9:e2:61:ff:ed:
90:84:f7:47:21:57:d2:35:a4:30:be:1f:f6:90:1b:
38:3f:44:f4:f8:37:0f:15:ee:f4:e6:3e:97:f6:af:
3f:9e:0d:0d:41:21:f0:31:ff:80:00:66:40:bf:05:
92:c7:2c:a0:5e:a2:f1:6c:28:5f:af:2a:99:e1:5f:
3d:e5:ae:51:9f:19:cc:3a:03:d8:e0:15:f0:b9:63:
17:63:e5:bc:83:69:e5:61:12:7a:c9:1a:ca:03:c0:
25:9c:87:8b:06:7f:88:3b:75:43:6b:8b:57:c1:e6:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:6F:19:D8:A5:BD:52:E4:57:31:09:61:BD:91:9D:D9:DE:D2:37
X509v3 Authority Key Identifier:
keyid:07:F5:3D:39:46:27:72:9F:06:88:3A:6B:5E:0F:09:9F:31:CC:91:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_U9OUYncp8GiDprXg8JnzHMke4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/433458-90b1-413d-ae8d-cf27c6d8ab5e/1/B_U9OUYncp8GiDprXg8JnzHMke4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:cc:0c:41:a0:73:2b:37:59:45:ef:75:32:c8:bb:7e:5a:74:
bf:66:5a:82:6a:97:67:20:11:c4:9f:5a:6b:81:0d:33:03:ee:
39:51:40:c4:05:3e:bb:7f:9f:c9:0c:ab:d2:3d:6e:d5:23:0f:
a9:ed:67:e8:36:f7:fc:ed:38:c4:26:f9:17:a2:e2:21:94:db:
ad:68:29:b6:da:ef:a5:ef:ac:19:9e:ba:6a:1e:c2:c6:43:0d:
62:74:b4:e0:33:3c:cc:b0:b3:00:87:5c:fc:1c:46:46:88:1c:
87:6b:96:05:2c:4f:ab:40:4c:e1:95:fd:95:30:d7:b5:2b:a4:
e3:07:61:69:69:ef:d1:36:7c:15:e2:15:21:b1:e7:4c:da:2c:
84:71:59:7f:bd:21:eb:57:88:c5:1d:95:93:d8:2c:ac:d1:06:
d8:07:5e:09:ba:fd:f6:cb:d6:cb:0b:7e:91:e6:1c:9c:5f:55:
76:1a:77:46:34:44:f2:ae:17:a1:4a:a7:b2:8b:3f:d2:1f:f1:
d2:dc:d8:b0:a7:ec:7f:57:14:89:de:7a:f9:1f:ab:5f:93:1d:
a6:e6:26:21:95:17:72:f8:bf:d1:2a:65:fb:63:93:10:94:d3:
3e:9f:96:86:44:03:0a:ca:57:08:5f:4c:7a:35:68:c8:b4:d9:
48:e6:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:22:33 2026 by rpki-client