Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: 0YRkj+Ot75LdfvySkxdcQDaJ28BYkkv0XfA0efffYpY=
Subject key identifier: BA:78:89:3F:74:4A:43:B3:6C:E0:B0:98:FB:D4:B9:CD:7D:37:D2:76
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 01A0E32BA67B322770298ECD73D8B43095FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 14:01:23 +0000
Manifest this update: Sun 27 Sep 2026 14:01:23 +0000
Manifest next update: Mon 28 Sep 2026 14:01:23 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: hc3gxDQLjDncL+Mv9VFnTM7aPB4JqOG7Xcq0wLmynWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:2b:a6:7b:32:27:70:29:8e:cd:73:d8:b4:30:95:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Sep 27 14:01:23 2026 GMT
Not After : Sep 28 14:01:23 2026 GMT
Subject: CN=ba78893f744a43b36ce0b098fbd4b9cd7d37d276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:13:82:97:2a:8f:cb:28:3c:2a:2f:35:6a:6d:
9a:36:62:2d:f3:df:fb:86:e6:f5:e9:c5:0b:d5:69:
bc:29:e4:be:56:4b:b1:9b:14:5a:94:9b:f0:a9:47:
af:4a:29:d5:66:57:94:57:83:27:8c:1c:ea:b2:8e:
63:d3:d9:3e:29:08:61:b0:56:4d:7e:ff:51:53:91:
5f:d5:55:54:22:79:46:73:6c:57:d5:f8:1b:f8:79:
a7:f1:97:c9:64:3a:4d:44:2c:6c:6c:00:71:3f:58:
79:2a:7f:97:ac:9a:11:99:5d:cd:93:95:33:e0:51:
c6:8f:2b:54:00:d7:0a:ff:88:0d:39:68:16:c4:e7:
05:90:c7:66:5f:74:f1:53:57:44:f4:28:a3:b2:84:
94:c6:b4:ed:40:f4:de:18:d5:7c:f4:a6:2e:a6:93:
e2:54:d9:e5:6e:79:bb:36:f1:c4:bc:ab:77:cd:a8:
3a:a8:0f:f8:3a:c6:83:61:74:8d:ac:45:14:3d:dc:
60:7f:47:7e:55:cb:33:4c:1c:5b:92:a6:98:11:79:
bd:55:dd:cb:a4:25:fe:08:c1:f6:5a:89:13:5f:42:
f4:45:dd:8b:9f:5e:8f:23:ed:15:12:1e:f5:c8:e8:
d9:a8:df:91:b4:e9:52:a2:b0:af:9e:1d:19:c8:fd:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:89:3F:74:4A:43:B3:6C:E0:B0:98:FB:D4:B9:CD:7D:37:D2:76
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:20:39:4b:fc:8e:a0:69:c7:73:db:ec:76:56:5d:6a:ca:a0:
bb:d8:eb:e7:fd:b5:29:a7:fb:b8:67:69:e2:5c:31:cd:cb:62:
d6:e5:71:8a:44:2d:1a:77:cc:c4:fa:4e:d3:06:43:e9:f0:03:
ad:b7:7c:56:78:aa:03:c6:1b:fd:3a:49:da:ef:60:ac:60:27:
e5:7b:fc:3f:6b:95:40:52:62:07:1e:54:78:32:fd:6a:bb:5e:
7d:e3:b2:1d:b5:9b:4f:12:9f:7e:96:ce:c4:26:ff:10:2d:a0:
e0:02:77:30:1d:4e:2d:a3:69:6a:c3:13:a1:37:17:b1:4f:1c:
a4:72:98:c5:c3:0a:b8:e7:11:7e:c6:59:5a:9b:2e:00:ef:fc:
a0:86:4c:fb:7e:a1:d6:cb:08:5e:bf:31:9c:43:b6:e1:99:b0:
f0:05:1d:8f:ab:04:f8:a8:48:8b:15:1d:78:e7:a8:4e:4a:49:
bc:b5:f6:f3:12:04:9c:17:e8:ee:71:73:9a:47:49:55:8d:23:
34:5f:8f:45:5b:17:d3:e0:c7:19:0a:b7:b8:bf:8a:9d:c4:7e:
a2:98:a0:6c:3d:6c:f0:80:62:79:ad:29:e9:df:d7:00:30:7e:
fb:4b:3a:65:7a:e9:4d:0b:3e:70:9e:e3:cd:92:08:f1:4a:3d:
74:94:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:58:37 2026 by rpki-client