Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: uzYDbOOVkoR6xGGkWkkGxOH9PnwEAz5EGZZ+D5fV4rQ=
Subject key identifier: 2E:BE:44:F0:76:43:60:55:6E:FF:18:B1:FE:C8:4C:A9:74:D1:9E:2A
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01A0C96B8B7D11E0E52A8A26CDFB2C666B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 1745
Signing time: Tue 22 Sep 2026 14:01:03 +0000
Manifest this update: Tue 22 Sep 2026 14:01:03 +0000
Manifest next update: Wed 23 Sep 2026 14:01:03 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: Vd8GD6c3j7oOiao+8YJqpYV83FVJuJeGxZdg1NgAkoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:8b:7d:11:e0:e5:2a:8a:26:cd:fb:2c:66:6b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Sep 22 14:01:03 2026 GMT
Not After : Sep 23 14:01:03 2026 GMT
Subject: CN=2ebe44f0764360556eff18b1fec84ca974d19e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c0:8f:a8:8d:8f:f9:6a:22:73:c7:0a:ee:ba:
ac:81:dd:c6:e4:e5:31:c1:b9:f9:0f:83:d4:27:79:
5f:61:db:d8:b1:18:b0:6c:7e:f9:3f:a9:66:ec:e8:
3c:75:eb:fb:cb:a0:f2:46:38:da:83:3f:bd:c8:c1:
44:96:dd:c9:c4:68:7b:be:bd:9c:b0:4e:29:9d:68:
c2:2a:3c:b1:f9:7c:98:66:75:b3:80:17:fd:a1:51:
e8:e5:e9:c0:2e:da:f4:70:5a:07:b3:d2:7f:03:8e:
15:d0:fb:dd:3f:f4:0a:e6:2d:f8:9c:b7:d6:d0:e2:
82:cc:ee:f3:ff:77:92:a1:33:72:ae:3e:32:54:c0:
f5:38:30:19:47:7b:6f:ee:7d:1c:58:f9:05:fd:6d:
24:37:66:b8:4f:20:65:f5:03:04:cb:76:f2:39:80:
4a:d2:2b:b5:c3:93:41:fe:0f:ea:8e:e5:2b:19:69:
ad:e3:9e:d1:1b:c4:30:d7:5e:bf:c9:ff:e6:6f:83:
8f:f3:15:09:36:6c:ba:be:ff:4d:1a:9e:45:01:28:
42:d5:ff:09:37:18:8a:e2:fd:20:19:6d:2b:d1:25:
78:35:19:54:25:30:d0:63:e7:38:ee:30:ea:f8:ca:
77:ba:d9:c5:21:e4:47:9f:61:e1:cd:09:54:a2:79:
83:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BE:44:F0:76:43:60:55:6E:FF:18:B1:FE:C8:4C:A9:74:D1:9E:2A
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:d6:ed:2d:a4:ff:09:ef:0e:f6:ca:0c:01:f7:f6:fc:d8:
ef:2f:c1:41:44:90:46:88:68:a0:7e:1c:02:94:9e:d5:9b:00:
09:71:35:78:2e:1a:63:dd:63:e8:76:b5:d5:1e:1c:3f:9b:e3:
66:1c:0c:52:65:21:16:47:32:04:cd:8d:e0:5a:2e:be:d1:3a:
7c:1b:7c:d9:c5:04:07:48:12:e4:48:fa:32:18:ac:86:4b:d4:
6d:c6:58:92:39:ba:f2:d2:4f:9f:db:b8:08:e3:4c:83:fe:1e:
70:33:c1:6e:1d:ec:bf:c7:2c:43:98:72:0b:8a:8e:21:dd:10:
54:35:c4:4e:19:c1:05:9d:d6:d6:87:49:8a:d0:dc:d1:ba:13:
a4:aa:90:9f:3f:f6:95:07:4c:ef:b7:6d:50:02:ac:c3:51:20:
0d:d7:50:14:17:e5:a7:5c:c5:c2:d6:1f:08:31:e0:39:a2:cf:
80:66:99:7f:b2:74:35:ba:2b:08:9d:35:57:3c:b0:55:15:76:
56:cf:16:36:d5:25:f7:3e:7d:41:10:22:1f:d5:6e:1c:ec:fb:
0f:60:f6:39:39:4b:03:05:03:d9:71:ed:7f:4f:87:11:2e:43:
b7:ac:de:8e:a7:49:d3:8f:be:93:12:bf:cb:b5:d3:aa:24:ee:
80:35:c5:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJa4t9EeDlKoomzfssZmsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYzU1ZmIyNGFkNTU2ZTA0MjAyNjUxZjZkNWE4YjI3ZDVi
ZWRmOTcwHhcNMjYwOTIyMTQwMTAzWhcNMjYwOTIzMTQwMTAzWjAzMTEwLwYDVQQD
EygyZWJlNDRmMDc2NDM2MDU1NmVmZjE4YjFmZWM4NGNhOTc0ZDE5ZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMCPqI2P+Woic8cK7rqsgd3G5OUx
wbn5D4PUJ3lfYdvYsRiwbH75P6lm7Og8dev7y6DyRjjagz+9yMFElt3JxGh7vr2c
sE4pnWjCKjyx+XyYZnWzgBf9oVHo5enALtr0cFoHs9J/A44V0PvdP/QK5i34nLfW
0OKCzO7z/3eSoTNyrj4yVMD1ODAZR3tv7n0cWPkF/W0kN2a4TyBl9QMEy3byOYBK
0iu1w5NB/g/qjuUrGWmt457RG8Qw116/yf/mb4OP8xUJNmy6vv9NGp5FAShC1f8J
NxiK4v0gGW0r0SV4NRlUJTDQY+c47jDq+Mp3utnFIeRHn2HhzQlUonmDKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6+RPB2Q2BVbv8Ysf7ITKl00Z4qMB8GA1UdIwQY
MBaAFLvFX7JK1VbgQgJlH21aiyfVvt+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMt
OTNiZDVlNDA4ZjkxLzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80NjkyMmYtNWNiNi00ZDk4LWI0ZmMtOTNiZDVlNDA4Zjkx
LzEvdThWZnNrclZWdUJDQW1VZmJWcUxKOVctMzVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjzW7S2k
/wnvDvbKDAH39vzY7y/BQUSQRohooH4cApSe1ZsACXE1eC4aY91j6Ha11R4cP5vj
ZhwMUmUhFkcyBM2N4FouvtE6fBt82cUEB0gS5Ej6MhishkvUbcZYkjm68tJPn9u4
CONMg/4ecDPBbh3sv8csQ5hyC4qOId0QVDXEThnBBZ3W1odJitDc0boTpKqQnz/2
lQdM77dtUAKsw1EgDddQFBflp1zFwtYfCDHgOaLPgGaZf7J0NborCJ01VzywVRV2
Vs8WNtUl9z59QRAiH9VuHOz7D2D2OTlLAwUD2XHtf0+HES5Dt6zejqdJ04++kxK/
y7XTqiTugDXF6w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:57:34 2026 by rpki-client