Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: fgNzcqFpgwrAd/5lcGDoFVbDD7dYZc7LUdc+2jjKfFY=
Subject key identifier: AD:F8:FF:D9:B0:F9:B4:FD:5C:ED:C5:92:24:7D:3B:67:3F:A4:B1:51
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01A0EA0942C5701CC70EC18AE00A7BC802BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1132
Signing time: Mon 28 Sep 2026 22:01:10 +0000
Manifest this update: Mon 28 Sep 2026 22:01:10 +0000
Manifest next update: Tue 29 Sep 2026 22:01:10 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: cVtAUFvRklCKf80rwXbiyVfilGfvZ1F96fKEX5LjfJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:09:42:c5:70:1c:c7:0e:c1:8a:e0:0a:7b:c8:02:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Sep 28 22:01:10 2026 GMT
Not After : Sep 29 22:01:10 2026 GMT
Subject: CN=adf8ffd9b0f9b4fd5cedc592247d3b673fa4b151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:8a:a1:84:69:13:45:21:38:5a:76:74:4a:
8e:82:2d:1b:ba:f5:95:16:cb:50:00:58:09:53:08:
98:fa:2b:e4:3f:e3:0f:6a:06:80:ae:0d:58:ae:0b:
54:dc:51:c8:f1:76:f2:d2:5d:e8:14:34:71:d4:6d:
87:ad:e5:ce:58:4b:d2:0d:37:69:5f:28:c2:67:ae:
e9:85:7c:fc:52:51:88:ed:8b:be:f4:71:e3:fa:88:
f0:9e:82:9b:ec:32:48:0d:f1:68:c2:a9:9b:80:7d:
bd:1a:3c:f8:a8:39:d5:fd:91:82:b4:c2:c8:63:b0:
19:2f:bd:ba:bb:5a:90:9d:73:b3:0c:3a:b4:e6:8b:
ed:fd:37:90:34:39:e0:3f:b9:2b:bb:86:de:c9:90:
85:33:d4:78:7f:38:48:e1:8d:50:f8:b6:90:d3:da:
89:41:5d:ce:98:2d:ad:53:15:c9:cc:2a:9e:2e:0e:
08:ad:b4:e1:4d:82:87:08:0e:4e:57:14:51:9d:85:
0d:25:51:59:e5:2a:99:3f:19:04:a3:0e:18:79:44:
73:1a:55:11:44:f9:86:09:4f:bc:a1:54:96:2d:86:
1f:81:9f:44:07:77:d3:85:91:a3:50:bd:4b:58:4c:
ef:0d:18:9d:a2:72:2c:84:5d:52:e3:76:57:75:5e:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:FF:D9:B0:F9:B4:FD:5C:ED:C5:92:24:7D:3B:67:3F:A4:B1:51
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:77:c8:7f:8a:f1:77:cf:e9:4a:8c:e8:ef:ef:1c:e8:83:bb:
d3:18:cb:a6:58:22:88:bf:3d:b5:15:13:0b:6f:83:e2:51:fe:
fd:34:58:7a:10:bb:a0:2f:50:6d:8b:e3:07:77:81:58:24:70:
1d:a4:0c:bc:64:ff:e3:81:a6:cc:6f:8c:c9:18:fc:04:a6:c9:
65:f5:98:fb:c6:62:a6:6c:7a:dd:a3:ed:33:b7:60:63:fa:11:
e8:de:10:ae:d1:e4:a7:70:95:b8:20:2d:e1:e2:3a:85:30:88:
b7:a6:5d:2d:30:b1:e5:90:57:9e:f1:d8:c8:f8:21:59:6c:ac:
a3:7d:f3:9e:6b:ec:2e:76:8d:a4:e7:82:c5:e7:0d:12:6d:ed:
2b:72:43:5f:e9:e9:97:f8:db:fd:d6:06:c7:5d:80:ba:fe:83:
05:9f:16:23:6a:97:ae:34:7b:76:7b:ff:85:0a:d5:07:4d:1c:
27:2c:92:4f:0b:08:0d:33:57:aa:00:ee:e4:38:9d:d0:c6:8d:
a6:69:fd:ea:ee:a2:4b:78:b5:79:df:db:37:b1:57:e3:fa:ef:
c8:d8:df:5a:97:42:bd:02:1e:c5:56:57:5f:3c:dd:eb:6e:75:
2a:c2:97:11:06:6e:5b:fb:f1:75:d9:f2:da:14:01:f0:00:85:
2e:4a:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:36:48 2026 by rpki-client