Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: 2iXQxtRNZ0fOt2j4etmM1ftA6ICVK4vHaS/PjYkjCFw=
Subject key identifier: BA:AD:29:B3:CB:C4:6F:0A:33:42:CD:BA:08:7B:87:05:CE:49:5B:51
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A0C9A1A50B6EB1BF9E89823AAE99864E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: E3
Signing time: Tue 22 Sep 2026 15:00:08 +0000
Manifest this update: Tue 22 Sep 2026 15:00:08 +0000
Manifest next update: Wed 23 Sep 2026 15:00:08 +0000
Files and hashes: 1: PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa (hash: ftUQrFR+3ehEYLFohxpomme6EwAaFtgPBICTDxCfk6I=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: qCGcz7xD1sJscMHeg5xcxoVBaOCFNTmlwVamcZ8RK9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a1:a5:0b:6e:b1:bf:9e:89:82:3a:ae:99:86:4e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Sep 22 15:00:08 2026 GMT
Not After : Sep 23 15:00:08 2026 GMT
Subject: CN=baad29b3cbc46f0a3342cdba087b8705ce495b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:af:1c:2a:4f:90:2f:2f:59:dd:15:12:eb:
e1:35:87:07:70:fe:b0:b3:7d:dd:9c:b3:17:9a:40:
68:de:92:a2:3d:1b:fa:30:44:2a:a1:04:d5:9a:9e:
5a:1b:48:e0:98:f4:14:30:95:06:4c:cb:96:8c:c3:
47:5e:21:ba:17:61:9a:b2:3a:5a:75:a9:ed:92:a0:
08:9d:7a:f3:8b:db:35:88:b7:c2:69:d9:8e:ba:dd:
c0:ab:89:79:58:82:db:c3:3e:77:9e:97:fb:be:a3:
55:7b:70:ac:63:59:c3:b8:6e:c0:5f:3e:de:05:89:
a8:bf:82:75:1a:2b:7c:71:f8:75:38:c9:9e:13:ba:
6f:1e:8e:8e:10:2f:d6:19:6f:f4:ff:d7:cd:53:8c:
3d:60:f9:0d:db:65:b0:3e:8b:01:f7:29:8f:bc:ab:
6f:d5:70:87:4c:4b:19:cc:48:6e:53:3c:b3:27:46:
28:af:49:e5:43:61:9a:1d:fd:a8:7e:2c:c2:a5:a8:
65:8e:5b:58:f7:d2:7e:1a:28:7e:b9:09:08:17:f8:
ac:29:20:17:99:98:c3:7e:0e:67:ce:dc:0d:90:d8:
17:9a:6c:81:61:2b:ea:70:61:c4:58:ed:2f:b5:b2:
83:80:93:a1:a7:d2:0b:ea:70:f9:d3:99:4b:09:4a:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AD:29:B3:CB:C4:6F:0A:33:42:CD:BA:08:7B:87:05:CE:49:5B:51
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3b:2d:78:06:dd:93:bc:37:3f:ba:b2:83:91:e3:0c:29:8c:
56:a7:b0:95:ae:3c:87:dd:0d:ee:59:2c:96:73:f2:b7:4e:dc:
ef:8e:b7:c9:7d:f2:ba:ed:c7:4f:67:ce:fb:f9:9a:03:6d:70:
f4:f7:0a:0f:36:00:e0:f2:a4:46:7b:3b:1b:f3:b8:ea:53:81:
d9:b8:40:f2:c4:67:7e:35:9d:bd:18:fd:bb:07:eb:05:33:b1:
ba:b7:52:19:2f:d3:2d:dd:1a:62:4a:0d:60:a0:fc:94:d0:ba:
65:4b:ba:06:85:58:63:7f:9e:3f:df:05:26:31:30:ba:81:61:
be:a5:d4:ba:0b:31:6e:6e:16:ff:a4:15:ff:c8:1a:1c:c7:9d:
11:cc:8e:b1:d0:16:6d:d0:e3:5f:cb:44:ab:a4:63:51:4c:c0:
0c:3a:55:14:4f:f5:81:05:51:dc:6d:d7:3e:a1:86:06:89:f2:
62:e5:a5:71:29:15:60:60:0a:e7:01:75:6a:98:4f:a9:f9:61:
78:41:96:b9:5d:1b:49:ab:39:92:d9:6a:3f:c0:fa:e9:8d:e3:
8f:30:cb:f3:d3:f8:46:7a:b0:5a:00:2e:1b:a6:95:b3:58:64:
00:e7:94:61:de:cd:06:29:f9:b3:03:3b:4b:c5:38:0b:28:c0:
68:72:9a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:12:51 2026 by rpki-client