Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: Ykq32j8vrvoK9sSnrLa9qYClqBfBHTgd2DQ4Ctdh+UU=
Subject key identifier: CB:AB:C6:38:DE:D0:0C:D0:B3:CB:19:4F:E4:DE:7D:81:48:0C:22:FD
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 01A0BF1EF6B2B46DF5DB07A6C7884D493B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 14:01:12 +0000
Manifest this update: Sun 20 Sep 2026 14:01:12 +0000
Manifest next update: Mon 21 Sep 2026 14:01:12 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: JldovJLTSJ4CClQcvrw7MIgx4vrWhfOFOsq6NZ7BZYE=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:f6:b2:b4:6d:f5:db:07:a6:c7:88:4d:49:3b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Sep 20 14:01:12 2026 GMT
Not After : Sep 21 14:01:12 2026 GMT
Subject: CN=cbabc638ded00cd0b3cb194fe4de7d81480c22fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:65:39:d4:0c:be:87:82:75:91:c3:a0:ce:
c1:ff:c6:ad:ce:b0:2b:de:f0:59:ba:de:53:61:5b:
b0:a7:66:a1:9a:5d:3d:86:bd:d9:2a:dc:62:c0:c3:
2a:54:18:e9:55:cd:51:ea:41:89:8e:ee:3a:76:97:
4d:30:61:6e:84:da:f5:fc:f9:26:b5:f9:ee:7e:98:
5e:5e:d1:5a:2e:da:7b:85:42:0a:58:84:f7:f3:35:
e8:42:be:6a:cb:d6:d2:5f:b8:4e:96:6f:b8:98:6b:
e0:19:ed:90:24:82:f9:f5:dc:6c:66:66:9b:b6:3f:
5c:76:55:fc:31:56:07:ac:1a:bb:b3:20:66:e6:68:
55:fd:c3:42:09:72:d3:51:a3:2f:e7:f7:b3:be:fc:
07:f3:e0:65:60:08:88:d6:e4:7a:ef:97:a1:23:65:
68:cf:6b:29:e2:6f:68:df:af:f9:fa:43:71:eb:3d:
9a:08:7a:1f:fc:4b:c6:49:35:40:92:51:b7:a2:b1:
55:83:2a:2c:41:e1:ed:87:ee:18:4e:75:c0:25:7f:
71:2e:45:76:09:22:48:ed:34:1c:ad:68:7a:86:bb:
27:c7:50:e4:6d:4d:4c:57:a5:25:59:28:b1:3a:68:
9a:84:75:d2:3c:de:81:a1:db:5a:57:5b:ec:90:e3:
dd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:C6:38:DE:D0:0C:D0:B3:CB:19:4F:E4:DE:7D:81:48:0C:22:FD
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:99:2b:4d:0f:58:8e:66:cd:6c:8a:bc:08:8c:ab:04:7d:ce:
7b:e0:89:72:12:07:ce:0e:c5:25:f1:92:99:20:91:32:d9:ea:
0b:a0:54:d8:87:a4:d8:17:c7:c4:64:7c:06:cc:58:8e:5b:77:
4a:83:68:e2:d1:c6:e2:44:62:49:15:11:82:16:5c:77:71:df:
f4:19:05:78:6d:77:f3:3c:df:da:46:48:1e:9d:40:12:16:4c:
cb:ed:b7:0e:cb:63:32:16:0d:20:f4:02:0f:7f:6b:b8:95:15:
0e:4b:ab:27:14:50:40:9d:70:ae:c7:3d:56:5f:60:69:5b:ec:
e9:f7:98:f4:21:cc:09:d4:bc:8f:9b:79:56:4a:84:6d:9f:98:
c2:e2:f9:54:72:73:eb:2c:bb:b1:85:1a:bb:cd:05:d3:9f:7a:
77:08:f0:a4:9d:20:92:c5:cc:53:2e:d1:99:ef:8a:b6:81:5e:
45:48:b9:5d:e9:ca:31:57:f5:94:3e:c2:89:ae:20:e3:b9:94:
d2:0c:19:0e:35:f3:34:c0:b4:95:68:d5:06:ba:96:0a:7a:a1:
a2:2c:b7:b0:07:78:17:41:bc:64:73:ec:ad:89:25:cf:e1:64:
68:96:8c:b8:73:c4:ca:6f:9f:4d:ab:01:bb:85:f2:3c:c2:88:
5d:6a:a6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:51:20 2026 by rpki-client