Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: u0puWM+EUaQWQT0YoCjkybkq6EDPo5Q5HW581GxpPzY=
Subject key identifier: A1:B8:A2:EE:88:3D:2E:F0:29:E3:8D:36:3A:E6:63:43:D1:14:7C:AC
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 01A002818278FCB826347D09598EA7623904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 23:00:36 +0000
Manifest this update: Fri 14 Aug 2026 23:00:36 +0000
Manifest next update: Sat 15 Aug 2026 23:00:36 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: SirGRKHScu1Yl3IL1WC4KPZHXiJlMuQcO2AbexCil/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:81:82:78:fc:b8:26:34:7d:09:59:8e:a7:62:39:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Aug 14 23:00:36 2026 GMT
Not After : Aug 15 23:00:36 2026 GMT
Subject: CN=a1b8a2ee883d2ef029e38d363ae66343d1147cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:d1:6a:76:9f:f2:6e:24:c2:22:96:0a:98:
4f:55:99:0b:6b:f9:dc:37:f2:ea:37:70:f0:ff:89:
ac:9e:7f:d8:de:93:8a:45:6a:9a:87:67:63:b2:5e:
74:fe:a4:7f:7b:80:ca:87:59:42:d0:7f:09:c6:3c:
fc:ff:e3:a2:d2:0d:ed:f2:09:11:cf:a7:21:56:0f:
16:2b:b4:ad:cb:24:3b:f3:8f:00:ef:59:1f:ee:55:
da:5a:fe:ee:e6:ff:e7:2b:57:1b:81:57:59:0f:8c:
70:a9:c5:f7:9d:87:f9:72:c5:e7:6b:8f:6d:93:31:
de:4e:97:43:f2:c1:a6:48:0a:f2:75:01:48:6c:a4:
9d:47:98:2e:3a:bc:b9:a3:54:bf:7e:7d:fe:1d:bc:
97:bd:b0:04:35:cc:38:43:c2:11:6b:22:5c:a7:51:
46:aa:33:e9:c6:3c:ca:c1:b0:e3:e9:eb:36:95:4f:
30:49:35:0b:08:e2:ec:57:e2:a1:af:bc:3f:7d:ef:
c3:f7:fd:6b:2e:03:d3:ce:14:33:0e:11:23:4f:90:
22:33:97:9d:d9:33:5e:f5:9b:1e:08:e7:02:94:da:
79:1b:f2:47:de:ce:2e:0e:80:29:32:1e:e5:1b:83:
a9:74:37:0f:19:e8:f5:b1:c6:f1:ac:98:1e:99:97:
e7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B8:A2:EE:88:3D:2E:F0:29:E3:8D:36:3A:E6:63:43:D1:14:7C:AC
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0a:27:d0:fd:00:20:0d:7c:61:1d:2a:74:29:76:c6:a0:00:
21:c5:f2:84:e6:62:f7:72:6e:06:c5:6d:2b:95:3b:6c:f9:b0:
4d:fc:89:a1:61:37:0c:50:fa:64:52:21:47:27:c4:4c:f5:e7:
a4:f8:4e:71:9e:df:74:b0:a5:27:67:ae:b6:ae:78:81:98:1a:
78:ae:1e:7d:a0:b3:67:a7:95:b7:e9:54:4d:16:ec:2e:fe:35:
fe:74:9b:7c:ba:98:ff:cc:76:b5:e1:17:e1:e7:d9:a0:14:fa:
ad:91:9e:d2:bc:ed:0c:95:6a:a1:83:75:00:36:7e:1f:80:a2:
d6:e5:90:eb:58:6a:f8:b1:31:76:68:74:d2:e4:f0:c2:19:af:
8f:4e:0a:db:a1:e3:2c:47:ff:4a:be:a5:04:dc:0d:7e:60:cf:
cf:3e:82:39:66:f4:2e:34:80:0e:f9:67:ba:7a:bb:b5:fa:9b:
75:af:b0:1b:43:7b:c9:56:de:ac:7e:61:9c:9a:83:9c:80:c0:
6c:73:d6:ab:6e:98:f7:88:8f:94:5f:c7:05:b8:62:a0:d5:2e:
95:df:ae:23:a8:92:f5:17:89:fc:29:ac:e0:d7:65:96:db:53:
9d:89:b5:5b:3d:76:52:ad:b2:94:3e:e8:98:1b:d6:39:ea:a2:
97:ea:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:26 2026 by rpki-client