Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
File: uprVMfVGd8FxqPFBDTr9vwGquis.mft (raw, json)
Hash identifier: t4ooYxg6uxBXQBcZc0HQ+9HegIy5+HWgF9kNAAgJxZ0=
Subject key identifier: 70:77:EF:D4:1C:FC:2A:FF:52:7E:AE:1E:AD:CF:F2:E0:CF:3B:1C:40
Authority key identifier: BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
Certificate issuer: /CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Certificate serial: 01A17EBD65078106D657080FF09B24EC2080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
Manifest number: 02AD
Signing time: Tue 27 Oct 2026 19:01:43 +0000
Manifest this update: Tue 27 Oct 2026 19:01:43 +0000
Manifest next update: Wed 28 Oct 2026 19:01:43 +0000
Files and hashes: 1: A8SXcw4AzFMfpLpo3wwueTJZTmw.asa (hash: A3VuX910iot8yxyYhIvxya0LiOo/oWEga/OUTWYivXo=)
2: uprVMfVGd8FxqPFBDTr9vwGquis.crl (hash: Jjgf1Ni5aVifZ34t2StMp76EHrpIXu2JI8pF84SNyuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:65:07:81:06:d6:57:08:0f:f0:9b:24:ec:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9ad531f54677c171a8f1410d3afdbf01aaba2b
Validity
Not Before: Oct 27 19:01:43 2026 GMT
Not After : Oct 28 19:01:43 2026 GMT
Subject: CN=7077efd41cfc2aff527eae1eadcff2e0cf3b1c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:12:21:3e:59:e5:ad:98:4c:68:df:95:fe:
1a:a2:d1:21:75:07:48:76:f9:f8:13:ce:29:43:be:
6b:32:e6:c0:d8:ed:43:58:9c:33:0c:12:9e:42:d7:
22:7a:d3:7e:34:6e:4b:7c:80:2d:1e:71:15:09:b1:
48:24:f4:14:59:1f:6d:40:5a:51:3e:ba:da:9a:56:
51:ae:af:f3:9b:50:e9:7f:e1:f7:1c:20:e8:d7:fb:
55:b7:45:2d:b4:38:0a:43:51:0c:c5:3e:98:b7:0f:
cb:7f:2a:07:52:6e:61:a9:a3:ba:23:b2:16:34:71:
6e:e5:7b:e1:4d:d6:11:11:c1:eb:07:a5:0b:be:3b:
01:23:d3:fc:89:fc:c7:54:b6:fe:76:2c:3f:bc:65:
12:12:f4:33:45:4a:ad:4b:06:61:8e:8a:48:37:f5:
33:b3:be:00:f9:e8:d5:73:36:23:67:b1:59:ac:47:
af:02:77:8d:fd:32:56:5d:96:e3:15:e5:61:08:b0:
2d:65:fb:90:09:f7:f3:a5:15:48:a7:25:88:73:f0:
7e:69:2c:93:8b:6f:5a:0c:85:df:39:ce:7e:73:45:
de:0c:fc:ca:67:c7:30:19:f6:3e:44:00:8c:a9:2d:
74:72:c3:53:5c:a0:de:74:58:be:ed:a8:34:84:46:
45:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:77:EF:D4:1C:FC:2A:FF:52:7E:AE:1E:AD:CF:F2:E0:CF:3B:1C:40
X509v3 Authority Key Identifier:
keyid:BA:9A:D5:31:F5:46:77:C1:71:A8:F1:41:0D:3A:FD:BF:01:AA:BA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uprVMfVGd8FxqPFBDTr9vwGquis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/bbb948-fa13-4619-89ae-5561b078fb95/1/uprVMfVGd8FxqPFBDTr9vwGquis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:08:bd:8d:aa:06:3c:69:29:1a:97:af:15:56:f8:1e:c5:a4:
a3:01:7b:8e:ca:60:b0:56:33:71:8e:8e:b1:5c:c7:4d:03:f3:
f8:02:24:9a:46:9c:2c:32:79:88:ee:7b:00:9b:49:fb:66:73:
ca:dc:0b:3b:f7:0b:a4:33:11:e1:8a:e6:e3:c5:1b:15:99:79:
22:51:5a:30:31:ed:f6:e8:d1:0d:00:6a:b8:83:4d:7d:61:c7:
72:cd:ad:e7:17:7c:49:97:93:4b:14:e0:f9:c3:bb:bb:f5:d5:
45:b6:b6:7b:22:f2:12:7e:28:19:8c:db:3d:fd:15:f5:13:4f:
06:61:33:f4:d5:b6:4a:11:e9:72:b9:62:eb:cd:21:1c:b6:6c:
30:28:47:f4:1a:b1:31:ad:d8:8a:da:5c:3b:9d:08:ef:53:2c:
8a:03:18:5f:c5:a7:02:93:ae:26:c0:d4:3e:ea:10:57:d1:99:
d1:b9:2e:d0:bd:c4:15:c4:31:88:50:10:77:dc:08:d1:3a:f2:
e4:72:02:de:aa:bf:cc:8e:25:58:f7:29:33:eb:72:dc:f5:2c:
97:01:fa:13:0f:7d:76:3c:79:92:16:94:3b:4f:62:14:63:e3:
9c:5a:f6:d8:1a:49:47:35:ca:e3:3a:b4:94:1c:cc:10:c1:20:
15:f8:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:17:08 2026 by rpki-client