Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: fgNr4zksVpfpFWnRSX2aUurFOtUXbls2JBx1ZsGa5k4=
Subject key identifier: 3A:8E:69:17:5E:08:0F:A8:F6:BE:26:50:6D:71:9F:2D:2E:F2:99:95
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 01A0C10CD3003E1E01171A2C460F476EAD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 11EA
Signing time: Sun 20 Sep 2026 23:00:38 +0000
Manifest this update: Sun 20 Sep 2026 23:00:38 +0000
Manifest next update: Mon 21 Sep 2026 23:00:38 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: p2yo44cbO9tqL3kH22dEw1fZNiXKKrIWfYyHXE7T09A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0c:d3:00:3e:1e:01:17:1a:2c:46:0f:47:6e:ad:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Sep 20 23:00:38 2026 GMT
Not After : Sep 21 23:00:38 2026 GMT
Subject: CN=3a8e69175e080fa8f6be26506d719f2d2ef29995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:27:0d:1a:ef:12:5d:e0:b9:a1:45:61:5b:
f8:d1:57:47:d0:2c:26:55:18:ba:92:28:92:ad:88:
af:4a:3e:bf:d4:90:2a:ed:af:7a:a7:16:9d:e1:f9:
d6:b1:6c:66:1b:37:27:d6:c2:df:43:8c:80:c7:54:
24:fc:13:b5:c2:71:d1:fc:6b:a9:d4:e0:01:01:c1:
9c:6c:0b:bc:ee:e5:53:9f:c2:bc:c0:b5:c0:72:21:
0a:32:13:38:25:97:98:35:ea:f7:cb:4d:e0:33:8e:
13:e2:f5:44:39:f9:a4:55:45:22:26:3e:44:99:f2:
c1:83:b0:a3:7b:0e:8e:d4:6b:e0:17:a8:e6:c1:3c:
d0:12:2d:92:80:a5:43:75:09:77:b2:ff:a7:e3:4d:
14:1f:dd:f2:4d:7e:c3:7c:41:30:0b:1d:89:1e:eb:
c4:7e:c2:bf:b9:1f:46:d7:d0:79:10:18:6d:46:da:
e0:71:18:5f:e9:5c:e8:9f:57:b4:22:6a:94:e6:9f:
03:39:65:6f:b0:92:26:3f:63:f9:d1:3b:23:fd:e5:
7c:25:3b:84:01:35:ee:dc:2c:2a:0c:51:71:7e:88:
ec:9c:fa:0b:a6:5c:8d:71:f0:c6:82:0d:e7:d9:90:
a3:39:c3:c4:ba:e0:3b:0a:24:25:f1:b2:12:bb:4a:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8E:69:17:5E:08:0F:A8:F6:BE:26:50:6D:71:9F:2D:2E:F2:99:95
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:bd:0a:79:e7:25:65:31:41:a5:d7:5e:61:1d:99:fc:5c:25:
e6:db:a3:86:e0:e8:56:82:12:7f:24:cd:ed:4a:70:ee:6a:45:
f5:17:67:fe:1d:da:4e:4b:36:9d:40:28:26:c6:d5:14:60:26:
b3:a3:7e:d2:b4:8a:d2:cd:5a:1f:e3:69:65:e6:19:a3:8a:12:
61:fe:64:15:c4:13:44:93:30:c4:c9:6c:1f:9f:8b:dc:be:3f:
0a:9f:6a:50:24:3c:d4:e6:5f:e3:3d:48:e9:79:ac:b1:c0:ae:
bd:6d:c4:e5:4a:c4:0c:77:46:62:d6:0e:99:cc:2f:71:18:85:
48:0b:96:91:aa:91:8e:cf:97:81:50:53:3a:fa:37:90:18:fd:
cc:36:5c:ce:c4:54:c4:d9:89:b2:4f:7b:62:a7:4c:6e:22:79:
29:53:be:a1:3e:b9:1d:f1:85:06:0a:10:66:b5:1b:24:c7:e8:
83:72:7f:75:3e:5a:5f:5f:81:d3:f7:78:46:8f:ca:2e:38:d7:
35:1a:2e:a9:45:b6:13:41:8b:1c:83:3c:f3:cd:bd:a8:e1:2b:
33:57:c6:7e:af:a1:18:6d:2e:0a:c8:46:f5:0f:0e:8d:2c:57:
79:c6:31:0c:85:87:52:55:a4:55:e5:12:92:0d:3c:0f:95:90:
f0:ad:3c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBDNMAPh4BFxosRg9Hbq2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjYwOTIwMjMwMDM4WhcNMjYwOTIxMjMwMDM4WjAzMTEwLwYDVQQD
EygzYThlNjkxNzVlMDgwZmE4ZjZiZTI2NTA2ZDcxOWYyZDJlZjI5OTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2QnDRrvEl3guaFFYVv40VdH0Cwm
VRi6kiiSrYivSj6/1JAq7a96pxad4fnWsWxmGzcn1sLfQ4yAx1Qk/BO1wnHR/Gup
1OABAcGcbAu87uVTn8K8wLXAciEKMhM4JZeYNer3y03gM44T4vVEOfmkVUUiJj5E
mfLBg7Cjew6O1GvgF6jmwTzQEi2SgKVDdQl3sv+n400UH93yTX7DfEEwCx2JHuvE
fsK/uR9G19B5EBhtRtrgcRhf6Vzon1e0ImqU5p8DOWVvsJImP2P50Tsj/eV8JTuE
ATXu3CwqDFFxfojsnPoLplyNcfDGgg3n2ZCjOcPEuuA7CiQl8bISu0qgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqOaRdeCA+o9r4mUG1xny0u8pmVMB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACL0Keecl
ZTFBpddeYR2Z/Fwl5tujhuDoVoISfyTN7Upw7mpF9Rdn/h3aTks2nUAoJsbVFGAm
s6N+0rSK0s1aH+NpZeYZo4oSYf5kFcQTRJMwxMlsH5+L3L4/Cp9qUCQ81OZf4z1I
6XmsscCuvW3E5UrEDHdGYtYOmcwvcRiFSAuWkaqRjs+XgVBTOvo3kBj9zDZczsRU
xNmJsk97YqdMbiJ5KVO+oT65HfGFBgoQZrUbJMfog3J/dT5aX1+B0/d4Ro/KLjjX
NRouqUW2E0GLHIM88829qOErM1fGfq+hGG0uCshG9Q8OjSxXecYxDIWHUlWkVeUS
kg08D5WQ8K08QQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:04:43 2026 by rpki-client