Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
File: u-kI6KPgpa192pXAYThTfWbqo0E.mft (raw, json)
Hash identifier: wUPv+TWcdvbsrdd30r9+0cvUoNyYJSQHoQB8ctEhm1o=
Subject key identifier: F2:F9:1B:5A:B9:C7:91:56:E3:BB:30:B0:6B:7D:F3:7A:F6:40:BB:EA
Authority key identifier: BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
Certificate issuer: /CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Certificate serial: 01A0C7EB2623C4007652173E9DF4DDA25CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
Manifest number: 017A
Signing time: Tue 22 Sep 2026 07:01:11 +0000
Manifest this update: Tue 22 Sep 2026 07:01:11 +0000
Manifest next update: Wed 23 Sep 2026 07:01:11 +0000
Files and hashes: 1: KFQ8j7TUkafguJj4zRekxSOryf4.roa (hash: ggBvTDtfRXdcds5VSU0JdMg1c40E6KC/cP8l9ugy4aM=)
2: u-kI6KPgpa192pXAYThTfWbqo0E.crl (hash: HPu6ohQ576X/qjUji7baJcUYRAfVy5QQlDVBKZ1KPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:26:23:c4:00:76:52:17:3e:9d:f4:dd:a2:5c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Validity
Not Before: Sep 22 07:01:11 2026 GMT
Not After : Sep 23 07:01:11 2026 GMT
Subject: CN=f2f91b5ab9c79156e3bb30b06b7df37af640bbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:fa:e3:ee:28:dc:6a:cb:17:b9:f9:0f:ce:
e8:98:aa:2e:56:ea:96:ea:1d:94:55:10:7e:a1:a6:
e1:5a:51:71:09:77:4d:71:e8:3f:ac:ef:48:26:cb:
b0:92:ce:fb:9f:41:4a:78:55:71:d0:c7:f5:a9:62:
61:e6:58:d0:f2:c3:03:79:6d:2c:89:d2:89:08:6b:
dd:4c:07:7c:96:f3:ed:be:11:7c:c4:01:53:fc:1a:
ef:5c:b6:50:b4:48:d4:33:6b:af:a2:80:9a:c7:4f:
7f:76:71:86:52:5c:44:b8:c8:83:ba:48:3d:bc:6c:
f1:5b:a2:76:10:8e:1d:bb:69:26:40:5b:74:f9:ca:
64:f7:c5:ad:02:5d:b2:b6:64:ca:49:f6:bf:48:1b:
16:77:20:7f:c7:c9:38:55:6e:b5:42:09:e4:86:ee:
c2:a4:2d:74:3f:c0:6e:04:62:ce:5c:76:f2:d8:20:
72:38:5c:f0:4c:9b:16:f1:2c:07:90:4d:17:8d:82:
86:3d:f4:94:1e:90:63:f3:7f:a5:d1:72:92:38:ec:
9a:ec:57:f1:b4:02:26:ba:28:f1:06:3e:ca:7c:6d:
37:0e:a7:aa:25:61:19:ed:12:0a:5a:14:3d:10:d7:
4b:13:e3:b0:fe:18:e5:47:16:7b:47:de:c5:59:d3:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:1B:5A:B9:C7:91:56:E3:BB:30:B0:6B:7D:F3:7A:F6:40:BB:EA
X509v3 Authority Key Identifier:
keyid:BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:00:2f:09:0a:78:7b:ed:1a:d9:b6:7b:1e:56:2f:7e:cf:
66:2b:9e:85:b8:eb:43:09:60:d5:ee:f6:16:e0:8d:a1:99:f2:
e0:d8:35:e6:9f:ff:a1:48:ed:fe:24:1c:25:30:22:f9:35:24:
79:e9:ae:92:c2:4c:e3:6b:22:0d:65:60:5d:d3:a9:4f:15:4b:
d3:d4:8f:f1:3f:4e:2f:56:0c:ea:c7:0a:76:5f:6a:24:f6:a1:
3c:38:c1:3f:74:53:be:4e:0a:0a:17:39:07:77:2f:84:d0:de:
68:02:a4:f8:9e:2d:9c:2d:a2:0e:f2:86:a3:55:7f:ce:bc:07:
49:6b:31:fe:92:31:ae:47:f9:22:96:4d:a3:da:3a:26:eb:b7:
d1:93:0d:a2:16:34:d8:93:96:5c:23:af:ad:5f:24:75:0c:cc:
8c:cd:17:4b:f0:dd:d6:8e:c9:e5:d2:35:52:b2:7f:6d:f8:c4:
32:66:88:f4:5a:9e:00:bb:df:00:b4:9f:92:3a:f5:2e:c9:5b:
ec:c7:86:3b:04:5f:b4:14:a9:51:07:87:04:52:12:eb:a9:d8:
33:f4:cc:e6:b6:dd:45:5b:b7:2c:d6:e8:37:54:f2:fa:0c:12:
00:ca:6b:bf:a5:2f:dc:04:ed:b0:d3:c0:69:94:b1:71:9a:40:
6d:bc:71:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6yYjxAB2Uhc+nfTdolzxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTkwOGU4YTNlMGE1YWQ3ZGRhOTVjMDYxMzg1MzdkNjZl
YWEzNDEwHhcNMjYwOTIyMDcwMTExWhcNMjYwOTIzMDcwMTExWjAzMTEwLwYDVQQD
EyhmMmY5MWI1YWI5Yzc5MTU2ZTNiYjMwYjA2YjdkZjM3YWY2NDBiYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAz64+4o3GrLF7n5D87omKouVuqW
6h2UVRB+oabhWlFxCXdNceg/rO9IJsuwks77n0FKeFVx0Mf1qWJh5ljQ8sMDeW0s
idKJCGvdTAd8lvPtvhF8xAFT/BrvXLZQtEjUM2uvooCax09/dnGGUlxEuMiDukg9
vGzxW6J2EI4du2kmQFt0+cpk98WtAl2ytmTKSfa/SBsWdyB/x8k4VW61Qgnkhu7C
pC10P8BuBGLOXHby2CByOFzwTJsW8SwHkE0XjYKGPfSUHpBj83+l0XKSOOya7Ffx
tAImuijxBj7KfG03DqeqJWEZ7RIKWhQ9ENdLE+Ow/hjlRxZ7R97FWdM3XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL5G1q5x5FW47swsGt983r2QLvqMB8GA1UdIwQY
MBaAFLvpCOij4KWtfdqVwGE4U31m6qNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNTJlZmQtNzNmZi00NjI0LTlkMjct
OWE5MDFmNWU0MjYzLzEvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mNTJlZmQtNzNmZi00NjI0LTlkMjctOWE5MDFmNWU0MjYz
LzEvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExIALwkK
eHvtGtm2ex5WL37PZiuehbjrQwlg1e72FuCNoZny4Ng15p//oUjt/iQcJTAi+TUk
eemuksJM42siDWVgXdOpTxVL09SP8T9OL1YM6scKdl9qJPahPDjBP3RTvk4KChc5
B3cvhNDeaAKk+J4tnC2iDvKGo1V/zrwHSWsx/pIxrkf5IpZNo9o6Juu30ZMNohY0
2JOWXCOvrV8kdQzMjM0XS/Dd1o7J5dI1UrJ/bfjEMmaI9FqeALvfALSfkjr1Lslb
7MeGOwRftBSpUQeHBFIS66nYM/TM5rbdRVu3LNboN1Ty+gwSAMprv6Uv3ATtsNPA
aZSxcZpAbbxxwA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:35:26 2026 by rpki-client