Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: bSAQnLYes2iHC0HVSoH0HE3FHqX/8v/gbVWjEr0p5uo=
Subject key identifier: 74:6A:DB:B9:67:E0:EC:80:F8:0B:F1:F3:42:8D:CF:8D:50:5A:F2:CE
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01A117BD38F8F3354293D41F5E389EF3AE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1AA9
Signing time: Wed 07 Oct 2026 19:00:39 +0000
Manifest this update: Wed 07 Oct 2026 19:00:39 +0000
Manifest next update: Thu 08 Oct 2026 19:00:39 +0000
Files and hashes: 1: Gl6nscEbuwxlhw6IyHzvgXxRljA.roa (hash: AA68brDB6Rz3mYLHYI9epwbmVOwfLXw3fS9hyfIcyJM=)
2: pAa4twbgch_NoibL7fcENGRZDqc.roa (hash: bT577lKWRgaDRixbmeW8XPo7ur0o3DBiy64cY6iV2LU=)
3: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: qOR97fv/eH+ZrQQ06cJLH+EOnWnUf3x/CLXhQ5ZQ5eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:bd:38:f8:f3:35:42:93:d4:1f:5e:38:9e:f3:ae:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Oct 7 19:00:39 2026 GMT
Not After : Oct 8 19:00:39 2026 GMT
Subject: CN=746adbb967e0ec80f80bf1f3428dcf8d505af2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:e2:f5:5c:cd:26:2b:70:58:48:c2:ea:b7:
d9:b8:09:c8:5e:be:91:48:68:d7:5f:b6:31:b8:54:
f2:c5:d3:e0:3b:29:a2:f2:8e:85:1b:18:90:2c:7a:
94:3a:60:15:6a:e5:85:f7:17:ab:69:61:2f:bc:2b:
80:b7:99:3a:6a:97:cb:ce:b0:8d:27:e2:af:33:93:
dc:e9:51:06:5d:08:ec:78:c8:8b:5f:d3:c2:ee:5b:
b3:64:a2:6f:c0:70:38:ae:dc:68:e4:b9:bd:ae:8a:
3b:1a:a3:f4:60:c9:19:da:bc:63:87:67:b6:19:ee:
93:5c:1e:bf:e1:18:26:ba:0b:38:08:b8:b0:43:4e:
c0:b8:13:fe:41:bd:35:b6:1d:83:72:6d:a9:84:e7:
29:47:c9:c6:6d:ae:87:97:83:ef:ad:41:a7:cf:34:
dc:88:47:cf:0a:4f:d6:b0:aa:e9:d6:9c:ae:45:f0:
b7:8e:c2:7e:dd:9a:c4:ef:ee:bc:58:53:2f:32:08:
83:d8:f3:16:75:50:fe:18:50:6b:60:f2:9d:c0:20:
04:78:e2:88:7c:1a:e1:33:b9:5f:4f:31:b1:e7:28:
45:04:5c:32:28:4c:0d:09:8e:10:ec:48:f4:e0:8b:
c1:b2:22:ee:09:53:ae:3a:46:7d:62:65:c6:1d:da:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:DB:B9:67:E0:EC:80:F8:0B:F1:F3:42:8D:CF:8D:50:5A:F2:CE
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e9:38:bb:7c:97:a7:41:0b:f7:59:f9:f1:c9:0d:c5:29:f2:
15:a3:d2:45:95:d3:8d:60:fb:85:5e:50:19:b1:12:8b:e2:50:
5e:1b:fb:db:a8:6d:d3:81:d5:77:31:a1:32:fa:06:cb:bc:d1:
c9:d2:48:7d:8f:b7:65:83:5a:2a:f0:c7:97:72:80:10:4a:c4:
d0:1f:0d:87:b6:c9:1d:36:f1:36:18:34:d6:f8:5b:ac:04:89:
23:1c:01:a0:ed:e8:71:d0:83:b2:d9:8c:63:59:03:bb:5e:e1:
f6:0e:24:2d:45:90:1e:56:cb:19:f3:7b:51:2e:99:df:2c:dd:
61:92:5b:94:74:3d:cc:95:d3:e4:92:d6:2b:2c:b6:35:2c:c7:
2a:58:ad:9d:8b:33:7c:9e:73:6a:bd:d7:8f:c8:94:39:6c:99:
01:5a:94:2d:15:26:f1:f4:b8:e6:ee:2d:a8:da:b0:4a:9f:c4:
8d:9c:b6:f6:f8:21:31:df:7a:ea:d0:0a:33:cb:5f:fa:db:88:
25:23:99:9d:ff:b0:fc:40:4b:6d:48:a3:a9:bb:eb:1d:fb:3d:
17:13:c3:76:30:0c:f9:43:dd:e0:56:10:de:cf:ec:d3:b4:7d:
65:22:f2:b4:25:db:9f:a9:f4:b9:c1:62:5b:9e:86:32:e7:51:
18:77:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:17:25 2026 by rpki-client