Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 47JJkmpzgf8SVdACgMwkr20PCQgbekDu38YXlwMe1sk=
Subject key identifier: DD:49:3E:8F:4D:36:7C:BF:61:DF:1C:4D:B5:0D:36:62:D0:91:0E:25
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01A0BCF8EE9005F5989915A8285B370E62F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1A66
Signing time: Sun 20 Sep 2026 04:00:25 +0000
Manifest this update: Sun 20 Sep 2026 04:00:25 +0000
Manifest next update: Mon 21 Sep 2026 04:00:25 +0000
Files and hashes: 1: aVA1AKv4zyiYGjxlH-mPLS_YW_U.roa (hash: SWC8hkYko2ZloQTKC6mTiTzHPA/u0KsHmhT+8vSmcgE=)
2: s3V4ezzVbMG6kQnOebdOqCb73pg.asa (hash: ow5lvZsoSYdTbZy9dKSWmykf5vPlazyuhSsgiGfpw40=)
3: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: t6VQePZdsDc58q8OvC8J+bfJraPJz0JlCtU1ok+Joy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f8:ee:90:05:f5:98:99:15:a8:28:5b:37:0e:62:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Sep 20 04:00:25 2026 GMT
Not After : Sep 21 04:00:25 2026 GMT
Subject: CN=dd493e8f4d367cbf61df1c4db50d3662d0910e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:04:d8:92:e4:95:cc:df:6b:b2:68:6c:6c:
8a:09:a7:f3:37:e9:38:ab:e1:42:11:19:23:cc:b6:
a7:cb:15:94:ac:79:9d:2f:1f:70:87:22:9c:57:24:
2b:2b:08:32:18:c1:4c:43:a3:db:43:a9:f9:c9:e6:
f1:c3:57:31:58:00:cd:45:bc:17:21:da:1d:b7:4b:
b0:bc:28:75:89:83:62:28:f1:72:15:a7:22:ef:4d:
83:ae:d7:70:59:4c:82:8f:c7:ee:17:d2:f6:9e:08:
14:03:c4:4c:d0:82:91:20:7c:e7:c9:99:cb:b2:4c:
e0:17:9e:8d:70:42:4b:cf:2c:80:c8:87:9f:3d:14:
da:89:b5:63:bd:8d:ea:4b:06:2f:36:c1:c7:1f:5b:
9a:78:22:b2:99:b3:f9:ae:d2:06:bc:be:dd:61:06:
15:6e:c7:7d:1f:1d:ae:29:36:39:d7:8c:b2:50:44:
37:db:a0:8a:a1:92:f5:ce:3a:67:57:57:53:9d:ce:
9f:a3:29:5d:24:50:3d:bd:79:84:5d:8d:d2:04:eb:
94:af:19:12:1b:e0:99:72:7c:7a:16:99:a7:ec:c4:
9a:c4:ff:9f:b8:6f:93:28:14:6d:74:36:44:0a:73:
82:18:a1:55:ba:e6:24:16:4e:e5:e8:be:ac:0b:bb:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:3E:8F:4D:36:7C:BF:61:DF:1C:4D:B5:0D:36:62:D0:91:0E:25
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d7:f3:f4:0d:01:1d:48:85:08:13:db:5d:a4:14:c2:c0:8f:
fa:89:87:53:07:d7:6b:a9:1b:01:6c:27:e8:b2:dd:fa:4a:9b:
06:3e:11:44:69:7c:12:f6:8b:a9:99:9e:4b:a6:ab:87:e6:6e:
f7:64:9b:e8:95:1c:eb:b3:8c:1c:7c:d8:86:fe:4a:03:da:55:
6f:04:3e:01:68:51:56:e2:16:0c:2b:29:48:7e:33:5e:b3:bf:
78:22:e9:df:44:58:72:3e:9a:81:9e:8d:48:63:33:d3:a0:77:
b8:58:71:ff:b6:6b:d4:78:88:0f:83:d2:12:41:3a:bd:93:5b:
99:29:4e:ce:08:d2:cf:50:c9:6d:5f:6a:d0:4d:dd:b1:c8:f1:
1d:44:92:5f:c5:dd:80:87:aa:d0:05:74:27:97:37:28:73:26:
e2:7b:5b:db:02:8f:20:4c:2a:a8:42:b9:00:04:d8:8d:53:2e:
d9:12:85:7c:f8:55:3f:7d:33:d9:34:45:8b:11:72:21:3c:95:
0b:8e:d8:c6:f5:a8:dd:e1:01:e3:82:5e:88:04:a1:7f:fc:b3:
4e:51:03:45:d2:b9:03:a6:78:1e:d5:0b:09:df:f3:4d:ba:57:
f5:e0:8e:c8:6d:39:89:2e:8f:b0:f2:5f:0a:97:22:45:fa:5c:
27:20:e8:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+O6QBfWYmRWoKFs3DmLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjYwOTIwMDQwMDI1WhcNMjYwOTIxMDQwMDI1WjAzMTEwLwYDVQQD
EyhkZDQ5M2U4ZjRkMzY3Y2JmNjFkZjFjNGRiNTBkMzY2MmQwOTEwZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncYE2JLklczfa7JobGyKCafzN+k4
q+FCERkjzLanyxWUrHmdLx9whyKcVyQrKwgyGMFMQ6PbQ6n5yebxw1cxWADNRbwX
Idodt0uwvCh1iYNiKPFyFaci702DrtdwWUyCj8fuF9L2nggUA8RM0IKRIHznyZnL
skzgF56NcEJLzyyAyIefPRTaibVjvY3qSwYvNsHHH1uaeCKymbP5rtIGvL7dYQYV
bsd9Hx2uKTY514yyUEQ326CKoZL1zjpnV1dTnc6foyldJFA9vXmEXY3SBOuUrxkS
G+CZcnx6Fpmn7MSaxP+fuG+TKBRtdDZECnOCGKFVuuYkFk7l6L6sC7snOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1JPo9NNny/Yd8cTbUNNmLQkQ4lMB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9fz9A0B
HUiFCBPbXaQUwsCP+omHUwfXa6kbAWwn6LLd+kqbBj4RRGl8EvaLqZmeS6arh+Zu
92Sb6JUc67OMHHzYhv5KA9pVbwQ+AWhRVuIWDCspSH4zXrO/eCLp30RYcj6agZ6N
SGMz06B3uFhx/7Zr1HiID4PSEkE6vZNbmSlOzgjSz1DJbV9q0E3dscjxHUSSX8Xd
gIeq0AV0J5c3KHMm4ntb2wKPIEwqqEK5AATYjVMu2RKFfPhVP30z2TRFixFyITyV
C47YxvWo3eEB44JeiAShf/yzTlEDRdK5A6Z4HtULCd/zTbpX9eCOyG05iS6PsPJf
CpciRfpcJyDoKQ==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:38 2026 by rpki-client