Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: gHIz3On3EvhJLR9TcW6fbTvbnq4NxFwK5WdhlijqdSE=
Subject key identifier: 54:0C:03:5C:1A:4A:3E:2F:88:6B:B0:D2:39:77:79:18:9B:66:84:99
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01A0BEE76ABEB057FB6F673925C8D277F3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 13:00:32 +0000
Manifest this update: Sun 20 Sep 2026 13:00:32 +0000
Manifest next update: Mon 21 Sep 2026 13:00:32 +0000
Files and hashes: 1: aVA1AKv4zyiYGjxlH-mPLS_YW_U.roa (hash: SWC8hkYko2ZloQTKC6mTiTzHPA/u0KsHmhT+8vSmcgE=)
2: s3V4ezzVbMG6kQnOebdOqCb73pg.asa (hash: ow5lvZsoSYdTbZy9dKSWmykf5vPlazyuhSsgiGfpw40=)
3: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: +n9sZjaixcz/KpW6d0PFNRi5Fz+94tfW982C2yAczWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:6a:be:b0:57:fb:6f:67:39:25:c8:d2:77:f3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Sep 20 13:00:32 2026 GMT
Not After : Sep 21 13:00:32 2026 GMT
Subject: CN=540c035c1a4a3e2f886bb0d2397779189b668499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:f6:40:40:8b:fe:70:c0:15:65:af:34:0e:
33:e4:e0:37:32:7f:90:44:0b:80:85:d6:e8:c8:00:
61:92:37:7b:a8:28:93:68:bf:f4:88:19:12:b7:48:
0a:db:12:3e:2a:17:37:f1:d3:6f:4e:a3:88:cf:5b:
50:d6:e6:7e:16:e7:33:45:f9:d8:21:aa:a9:66:7f:
5d:d2:46:fe:5d:f0:17:a4:72:23:b0:12:0e:1f:b3:
ea:f0:b1:92:01:3e:45:6e:2b:9b:ca:7a:16:40:c9:
f2:1a:bc:7e:22:d1:2e:54:4c:70:28:ee:5e:17:e4:
58:9a:b8:de:0c:b6:05:64:79:17:09:cf:8b:62:be:
ac:05:64:c1:0a:a3:9c:9d:57:4d:d7:79:2b:1f:f9:
7f:47:b0:22:4b:3d:57:69:c0:74:6a:58:f2:16:d3:
47:c0:a5:a7:f5:02:44:32:ce:26:6d:3b:98:42:ae:
6d:a8:90:3a:d9:d6:9f:13:01:22:e5:a0:3e:bc:23:
f7:03:f8:00:36:ff:de:0d:e5:35:d1:7f:d4:24:8c:
c8:92:65:c2:9d:f4:e3:69:f8:8f:30:c5:d8:09:7f:
7a:8f:f4:93:46:14:24:bb:9d:bc:25:27:f2:52:41:
b0:5a:c1:59:e2:f3:3d:38:6e:52:93:a8:d6:d6:c8:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0C:03:5C:1A:4A:3E:2F:88:6B:B0:D2:39:77:79:18:9B:66:84:99
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c0:c9:4a:c5:1c:5e:57:32:30:f2:a0:44:d3:5e:c2:14:28:
a7:36:aa:eb:36:49:91:e4:09:4b:47:80:5c:ea:71:7d:20:af:
84:e4:58:b7:4f:ad:a8:04:d7:de:5b:29:77:a9:54:2c:73:05:
e2:89:bc:ba:19:81:80:63:6b:f4:9c:ae:2e:cc:bd:4a:1a:a3:
a6:dd:42:2a:0e:ee:17:47:d9:5e:81:18:65:70:14:4f:f2:57:
24:f2:cf:e6:ac:c7:f9:db:06:b6:c8:c2:e4:03:f7:5f:d4:c8:
0f:07:51:5e:d5:cb:3a:24:bf:ef:38:6c:41:a8:61:88:bd:f3:
50:f2:4d:b8:b2:7f:cb:b3:9d:8c:c2:17:9c:d3:91:ab:1f:52:
8d:d7:bc:14:4d:6e:08:09:58:48:fc:29:0d:d9:ad:34:e8:6f:
c2:77:00:89:42:77:bf:d4:fb:08:22:c3:c6:8d:9d:82:01:7c:
3b:9e:61:75:03:98:a5:6f:dc:79:14:62:3f:e2:f6:5d:f6:57:
3a:41:82:4b:a8:37:3c:de:fe:52:90:ae:9f:11:b4:bf:b8:0a:
9d:78:a4:9f:6a:10:6d:0a:a9:38:c9:3a:9c:11:6f:fd:f6:84:
4a:d2:4c:12:36:c8:9b:40:75:4f:2a:42:08:2b:8f:65:84:2f:
0a:74:3e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:39:06 2026 by rpki-client