Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: pPPx2fFU8JU1VSrLO5t5vIQiohlQMi+XoZ1X0c0Wh2g=
Subject key identifier: 6C:3F:0B:51:BE:CD:DD:37:04:9B:21:5A:B0:FD:EE:87:AC:94:AB:AA
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 01A1039236CF1779CD7CE2DC6840E1DD8B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0F27
Signing time: Sat 03 Oct 2026 21:01:16 +0000
Manifest this update: Sat 03 Oct 2026 21:01:16 +0000
Manifest next update: Sun 04 Oct 2026 21:01:16 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: 59cap1dNyX5mz9gNkVtHOjbD+BBUn68tfhKWkwU3Y2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:36:cf:17:79:cd:7c:e2:dc:68:40:e1:dd:8b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Oct 3 21:01:16 2026 GMT
Not After : Oct 4 21:01:16 2026 GMT
Subject: CN=6c3f0b51becddd37049b215ab0fdee87ac94abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bd:c8:46:01:96:84:16:39:75:e0:da:53:5f:
d3:3d:6b:ad:45:ea:b0:c5:0e:1c:67:2b:5c:29:d4:
e4:c1:c7:fa:ab:06:d2:51:9a:31:53:81:50:de:bc:
87:3a:0e:1c:fe:5c:1b:85:64:e7:43:50:bf:c0:ad:
6d:2d:37:19:35:fb:fb:ef:06:1d:65:e6:f8:74:65:
41:07:e5:61:ad:c7:45:27:ea:0d:e6:0c:37:f7:40:
2d:7f:d1:28:03:56:c9:f6:b2:3d:5e:94:62:1b:aa:
8d:9d:93:95:66:f8:a7:e1:ff:f7:da:20:6d:2f:2a:
cf:10:c3:a1:5a:66:11:0d:5c:74:0b:43:a5:d0:05:
c2:11:74:26:5c:4d:a3:ec:83:a1:f7:34:3b:57:75:
a0:62:f3:02:60:b2:3b:a0:15:b8:44:bf:55:6c:00:
47:7e:9f:ed:47:d6:b0:18:2a:a2:82:34:2d:69:1e:
d9:88:89:0f:9b:9e:e4:fa:51:b2:5a:fe:4a:04:d9:
73:41:38:cd:f7:f5:18:06:1c:20:c4:73:c0:98:0c:
97:5b:69:c5:b4:f1:fd:c6:3c:4a:f2:52:67:c6:ac:
46:c9:e9:4b:9e:08:0c:5e:9d:29:fb:12:50:09:fd:
40:71:9c:78:39:1c:92:63:bd:8c:0b:6c:57:7e:05:
68:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:3F:0B:51:BE:CD:DD:37:04:9B:21:5A:B0:FD:EE:87:AC:94:AB:AA
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:98:d4:40:2f:2b:63:18:bc:ef:5d:f0:5c:95:d6:ca:41:f7:
49:de:ee:0e:2a:57:99:9a:01:d5:53:6a:33:92:a9:0d:a6:4e:
ea:c2:38:11:84:99:31:3d:3e:a6:f8:52:12:bf:c7:78:0a:17:
03:83:0d:1d:d4:38:ea:e1:ce:3e:7c:e5:1b:ca:ad:8c:52:fa:
30:35:78:2a:78:a3:03:f7:9a:07:94:ac:86:92:37:92:3d:8a:
50:86:a7:0e:8c:a2:7b:9d:11:ed:c1:02:b9:8a:03:ee:8a:71:
48:9b:f6:ea:65:24:f4:c3:16:00:a7:90:00:19:c3:aa:f2:18:
9a:51:dd:fb:d2:23:64:c7:86:a4:9e:be:05:c7:06:cd:e5:a9:
cf:fb:2e:d8:30:19:9d:82:e1:49:af:fc:da:c1:a1:76:41:03:
4f:51:a3:b1:98:d4:52:8d:bd:05:cb:15:65:a9:be:13:ba:9e:
23:89:07:95:f6:2e:88:e5:f9:09:c1:46:56:56:aa:71:38:35:
c1:51:63:f2:71:7e:fd:8f:d0:cc:d8:9c:62:d9:6b:f3:bf:6a:
0d:55:b9:ff:67:c2:40:a2:f5:22:58:d2:50:82:2c:1b:44:d5:
b1:bb:f2:48:b9:ed:1e:87:35:55:59:09:89:10:e7:fb:d5:2c:
e9:dc:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:58:58 2026 by rpki-client