Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
File: _ubQl9bBh0oVzIxu61MpAULPB6k.mft (raw, json)
Hash identifier: jkdlVYUmklYeDD22l5If9I2M1TUk5OqSe3UPOMRfRZw=
Subject key identifier: 4F:3D:7A:B3:15:11:56:99:34:1A:AD:88:02:4E:54:5B:53:65:F4:47
Authority key identifier: FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
Certificate issuer: /CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Certificate serial: 01A0E5BEED54765FC913D655B02BC7625492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
Manifest number: 84
Signing time: Mon 28 Sep 2026 02:01:29 +0000
Manifest this update: Mon 28 Sep 2026 02:01:29 +0000
Manifest next update: Tue 29 Sep 2026 02:01:29 +0000
Files and hashes: 1: X9MygZSKSL6QlOO0UVIquYhu0Fo.asa (hash: Oin11/QLAtTIeyxZUGkGGrAhnCjiS0Q0Kg95zmjFkRI=)
2: _ubQl9bBh0oVzIxu61MpAULPB6k.crl (hash: c1gQzc3C265+ALjd+gkYY7JPJOZ5zzdDfG3UZFH+j8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:ed:54:76:5f:c9:13:d6:55:b0:2b:c7:62:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fee6d097d6c1874a15cc8c6eeb53290142cf07a9
Validity
Not Before: Sep 28 02:01:29 2026 GMT
Not After : Sep 29 02:01:29 2026 GMT
Subject: CN=4f3d7ab315115699341aad88024e545b5365f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:05:19:86:d8:c3:a1:fe:16:0c:ac:43:27:a1:
9e:29:e7:19:05:cd:6a:82:d2:ff:d0:06:d9:16:66:
45:b0:96:d6:7c:9f:7e:d6:e1:8a:6c:d2:0f:5b:26:
da:a3:99:74:b2:9d:b5:e2:f5:5a:84:bf:cf:2d:85:
8e:58:47:8c:90:86:9c:a3:93:df:62:35:10:f2:d9:
15:68:e1:60:f7:f5:2a:86:52:75:eb:68:e9:66:14:
2e:db:15:0c:6c:2e:67:b2:73:a0:d0:87:e7:30:07:
dd:d6:f6:54:5d:8c:35:b8:95:84:ad:78:49:a6:6f:
4a:23:f7:98:21:91:b4:a5:8b:63:88:c5:51:44:20:
45:0f:6a:6b:d6:99:28:f6:ee:23:d5:ce:65:eb:33:
62:36:32:d6:a9:c3:2a:59:fc:5a:52:dc:51:a7:c7:
91:ce:9f:51:97:c7:d0:56:1e:26:32:1b:41:79:ee:
0a:5b:c9:6d:fb:9b:8e:f4:e9:4e:9c:8b:75:f8:b2:
63:73:44:b5:5d:84:30:f2:8c:63:12:d2:23:82:31:
cf:fb:1d:f4:b6:6b:21:68:63:36:79:ad:19:91:25:
7e:c3:4e:cf:83:de:00:35:84:81:98:fa:6b:9c:e1:
f5:d3:41:e2:1f:de:cb:91:99:3b:0a:a6:3c:69:9b:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3D:7A:B3:15:11:56:99:34:1A:AD:88:02:4E:54:5B:53:65:F4:47
X509v3 Authority Key Identifier:
keyid:FE:E6:D0:97:D6:C1:87:4A:15:CC:8C:6E:EB:53:29:01:42:CF:07:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ubQl9bBh0oVzIxu61MpAULPB6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b8ad19-a9f0-4d83-9762-00470b1f8244/1/_ubQl9bBh0oVzIxu61MpAULPB6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c2:0a:c2:50:6f:8a:9f:31:d1:94:8d:6b:78:7f:74:c7:27:
4b:33:fe:d0:9f:de:7e:17:a3:50:c9:e1:7b:fa:f6:10:ad:fe:
9e:83:c8:9e:58:7f:96:aa:36:c6:83:11:c2:e6:1a:54:a1:42:
7b:e5:a9:76:d3:06:b2:e9:cd:c7:b6:3f:b2:74:52:59:87:5b:
59:e5:3b:2e:4e:4c:5c:9d:cd:7a:d8:60:d7:d1:1b:69:03:7e:
43:6e:72:f8:ab:61:af:e2:88:ef:28:0c:ff:de:1f:02:b3:52:
98:c3:6b:78:d0:00:08:ea:e8:4b:50:98:b8:2d:87:31:a3:ba:
99:c6:fa:c0:27:23:9e:d2:1d:cb:f4:e5:c1:c2:b3:6a:6f:e8:
71:47:4b:23:de:3c:82:93:2d:2e:cb:11:fe:d3:c5:8a:b5:04:
ab:bd:60:fd:a9:32:f1:a0:c3:e6:ea:1d:c9:ef:53:86:e2:dd:
a4:2b:b2:e5:e1:a7:ff:bc:dc:fd:0e:80:df:01:27:22:9f:72:
6b:32:c6:14:16:0b:3c:e3:df:da:c7:a2:09:26:11:a8:5f:67:
63:0e:73:2e:17:67:89:56:b6:f1:b5:a6:d6:5b:10:76:a9:eb:
da:ec:dd:50:3e:e0:e0:45:10:cb:77:15:35:75:cc:9e:76:dc:
7e:38:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:29:55 2026 by rpki-client