Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: +xds5HTisHJqNRBidWtQiv5NQxT8vB+ToTEj61scjoA=
Subject key identifier: 08:20:20:73:0C:A7:41:C6:7B:38:05:30:B0:BB:C8:AD:BD:2C:BC:B6
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 01A0F7C5382BFD7D8F34F510559949420DB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 14:01:32 +0000
Manifest this update: Thu 01 Oct 2026 14:01:32 +0000
Manifest next update: Fri 02 Oct 2026 14:01:32 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: WX3VckdM3wRbHVJT9nLtfNqfLys/EsscK0HT7By3PEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:c5:38:2b:fd:7d:8f:34:f5:10:55:99:49:42:0d:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Oct 1 14:01:32 2026 GMT
Not After : Oct 2 14:01:32 2026 GMT
Subject: CN=082020730ca741c67b380530b0bbc8adbd2cbcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:43:2c:10:a7:df:f5:57:ac:5d:77:ab:19:
b2:54:3e:0e:ba:09:63:31:7d:8d:87:9f:21:f4:da:
89:93:96:54:d5:a4:79:83:ed:16:ab:d8:be:59:1a:
0e:98:ab:36:9d:6d:40:fa:67:7c:4f:96:7b:e5:68:
2e:f5:17:5b:48:cc:e9:b5:42:ed:a8:f3:c2:54:98:
91:6f:d8:0b:bc:cc:ac:6a:46:48:e0:2f:d1:32:c0:
fc:5b:a8:cb:c9:61:e3:fb:85:71:a3:fc:da:8e:4c:
d9:75:d5:69:38:94:97:8e:0b:de:23:96:ab:93:d0:
55:ff:a9:8f:e9:ac:d9:03:25:4a:15:f9:ab:6b:da:
86:01:b1:2b:96:24:fd:ba:e1:28:64:28:b4:c8:28:
73:57:93:7a:31:b6:26:3e:c3:bb:04:f3:1d:92:8a:
dc:23:5f:43:3b:3a:98:6c:9f:70:ee:bc:8a:7f:2d:
07:ec:98:ae:5b:d9:80:4f:0e:af:c6:d4:06:36:42:
ec:b9:d0:7f:2d:0b:39:15:d4:8f:45:78:79:94:42:
38:9e:9d:cc:4d:c3:a5:ef:28:74:9e:95:cd:b2:3c:
75:b4:ef:af:63:97:43:c4:0b:26:61:81:e7:7c:af:
2b:59:18:5c:15:51:aa:0c:d1:65:88:79:ef:54:80:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:20:20:73:0C:A7:41:C6:7B:38:05:30:B0:BB:C8:AD:BD:2C:BC:B6
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:0b:7b:c5:21:07:0b:59:f4:23:8f:f0:9f:e3:75:41:22:fc:
07:99:4b:86:db:03:2e:8d:9e:80:ae:43:cd:89:90:07:38:83:
60:4f:a6:51:54:96:2d:bd:30:10:21:e9:25:a8:a7:90:63:33:
95:91:65:52:e5:c0:6b:fd:ba:90:ea:db:14:30:11:66:1d:4e:
07:e2:36:fd:5a:bc:a5:f2:0e:0f:46:dc:bf:47:2e:8e:8c:e3:
9c:db:fe:2f:32:4d:f5:31:10:11:13:88:c0:d7:25:0e:3a:f6:
48:76:fa:55:dc:aa:75:23:9a:34:0d:35:45:57:c0:70:2b:5d:
32:f8:2e:f1:75:3c:4a:88:ee:95:1d:99:80:66:32:58:ab:e0:
f5:51:d4:5b:5f:dd:fb:3f:54:65:50:ff:c6:7b:7d:59:8a:0a:
06:d5:56:9f:8d:54:fc:c7:b9:4c:10:a0:50:97:a3:6d:a5:05:
7c:2b:91:24:11:c2:83:e0:ce:5b:01:29:6c:59:e9:67:4b:d2:
33:1d:a7:99:f1:77:f5:54:c1:05:4e:cf:77:63:10:6e:1f:71:
78:d5:16:15:28:2c:b5:d3:0e:ea:29:8e:8f:da:69:83:64:ee:
d1:3e:e0:4a:70:80:db:16:2a:2f:fa:52:e4:39:25:30:04:80:
4c:d7:2a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 07:48:07 2026 by rpki-client