Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: XxZrnLzhx+d90YOx+MIeNkHRd1L8UtzyILpIJ/73FbA=
Subject key identifier: 8C:8F:07:6F:1B:83:63:98:EB:60:88:2E:65:5B:84:D9:BE:D8:68:EB
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01A0C3D730AA186A99998002223831F6866B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0C2D
Signing time: Mon 21 Sep 2026 12:00:54 +0000
Manifest this update: Mon 21 Sep 2026 12:00:54 +0000
Manifest next update: Tue 22 Sep 2026 12:00:54 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: zjSOlNhvOOAyG9haF8IzaYdDKfeZ+0deGvlZG/BRb5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d7:30:aa:18:6a:99:99:80:02:22:38:31:f6:86:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Sep 21 12:00:54 2026 GMT
Not After : Sep 22 12:00:54 2026 GMT
Subject: CN=8c8f076f1b836398eb60882e655b84d9bed868eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:29:c6:48:55:ee:2b:61:ef:c6:fe:4f:01:
88:ae:a9:be:ea:3e:2a:5f:f2:7a:d8:eb:8f:99:f9:
2c:e9:15:53:fc:5e:25:4d:eb:24:b3:8e:66:35:15:
01:5f:bd:39:53:a9:c2:06:fa:d0:67:6e:b1:c5:7d:
f7:8d:04:65:32:05:16:a3:2e:3c:0d:e8:65:8d:4d:
79:ec:c0:1f:cd:b9:20:21:54:2a:7b:15:bd:f2:5d:
29:45:94:f3:56:f0:65:e4:0f:40:73:a8:72:fb:a6:
3c:98:09:63:f8:04:77:ee:b2:ef:dd:d3:f5:26:ed:
6f:39:be:41:be:9a:9b:a1:f0:6e:d1:e3:f6:6d:fb:
f4:d4:bd:7b:cf:a8:01:5b:c5:73:ce:cf:e3:25:d4:
6c:51:08:ac:d3:9e:e3:fd:e0:85:07:e6:2a:28:1d:
7c:ed:2f:32:38:20:7a:3a:88:0e:07:73:59:6e:f1:
84:d3:4d:f9:0a:b7:c3:cb:e6:a7:e2:21:78:d0:77:
d2:f7:be:06:3d:2b:f7:04:3a:29:2c:0d:d2:66:d3:
c4:86:51:10:66:89:fe:f5:8b:c1:66:fe:5b:09:2f:
6c:49:53:d3:ea:60:44:97:b2:83:fa:2f:04:28:a9:
46:99:44:96:62:ef:f7:82:e8:40:1e:5c:1f:61:65:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:07:6F:1B:83:63:98:EB:60:88:2E:65:5B:84:D9:BE:D8:68:EB
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:46:58:ce:96:39:21:de:57:6d:d9:8b:d0:82:05:2b:c9:bc:
13:53:8b:14:6a:82:bc:41:ba:36:05:a8:ba:e0:d4:7b:b6:0c:
5a:57:41:dd:0e:53:fa:e3:1c:26:2e:ff:4b:1b:27:b5:d6:68:
dc:59:7c:95:00:a4:c9:3b:ba:58:6d:54:b6:bf:7e:0c:41:e7:
31:0b:12:64:56:4d:02:b8:19:5a:35:c4:0c:8b:d7:9a:f9:09:
ca:f4:34:20:5a:85:7d:40:f9:cd:8c:2b:1a:0d:8d:d6:c0:b1:
b4:7f:cb:f2:96:19:41:c7:e7:e7:6d:1e:21:68:73:7d:4a:94:
93:ed:19:58:00:ad:81:49:e0:0d:85:f9:7a:8b:fb:1a:cc:e8:
8f:df:c3:c4:68:e8:6f:3e:b5:e7:86:90:a4:1d:d1:02:6a:80:
fc:4d:cb:5f:d0:4b:3b:1b:40:12:6f:43:21:56:4e:d2:c1:1c:
de:93:9a:5b:2c:d2:0a:d3:75:d5:8a:59:e9:56:aa:e4:28:d0:
5b:28:1c:2c:36:83:2a:55:72:d1:62:de:12:74:e5:22:18:fc:
a5:2b:90:70:33:46:a7:58:05:c4:aa:4f:47:17:b7:f0:06:47:
16:b2:45:34:84:9b:a6:fb:27:c9:d5:f0:25:11:58:eb:1e:9f:
e7:5b:9b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:12:50 2026 by rpki-client