Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: iGKV5FuKRmiIhamyy1Zo7a9lWWzXgZJnXBhuC21NOoc=
Subject key identifier: 14:A7:B7:0E:99:58:C2:0F:4A:32:2E:F8:1A:3A:6C:C7:7E:AF:62:4C
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01A1795EEF518BE2C3092B59B5333D7ED3C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 085F
Signing time: Mon 26 Oct 2026 18:00:27 +0000
Manifest this update: Mon 26 Oct 2026 18:00:27 +0000
Manifest next update: Tue 27 Oct 2026 18:00:27 +0000
Files and hashes: 1: dnDDWU0kXEL4k-Q9V_N4k3fkyvE.roa (hash: kAHCeHmRezZQn2zHAJ1uZ8zCAw/Y5YGogodsloQKjVg=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: HUq3HVsQlW3XJ0h/Es5zaS8bKkNyiploZ54ndHFmjlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:ef:51:8b:e2:c3:09:2b:59:b5:33:3d:7e:d3:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Oct 26 18:00:27 2026 GMT
Not After : Oct 27 18:00:27 2026 GMT
Subject: CN=14a7b70e9958c20f4a322ef81a3a6cc77eaf624c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:3a:75:ed:a6:b6:38:83:9b:03:b0:03:c0:
60:25:14:07:e4:8b:3c:e7:2f:e7:49:93:34:1c:ec:
fb:1f:68:94:29:76:3f:7e:95:e2:e4:d3:61:0b:5b:
16:b9:7a:cd:49:c3:82:fd:42:58:50:5c:57:3f:c9:
74:83:4d:fb:88:e0:8a:07:81:32:36:25:58:12:75:
7f:f4:9b:8e:c3:4f:1e:5a:62:d4:2a:89:b8:e3:cc:
1e:61:f2:7c:d8:a5:3c:52:6e:b6:03:0d:ea:f8:c3:
8a:12:07:43:6b:18:d8:0f:f9:e9:c3:3d:7c:02:54:
f4:58:3c:8f:5e:51:1f:a5:59:6e:e3:83:48:10:0f:
9e:5e:dd:7c:12:09:85:75:45:f9:08:7e:e0:9e:fb:
77:c7:f2:9c:00:1c:93:d7:68:a2:64:e1:a5:91:c3:
ff:ea:72:f5:0d:7b:5c:a9:52:43:37:6a:71:52:85:
a4:b8:19:a3:fc:3f:be:be:8d:46:86:51:55:83:b5:
7f:f5:d0:2a:9b:0a:ef:4a:b7:a1:70:f6:b2:e3:dc:
d0:ea:00:3c:59:ee:13:99:a1:f1:7b:44:86:51:6c:
f0:32:94:ba:63:c2:8c:5b:29:07:60:9a:89:6a:28:
72:9f:62:74:ab:09:00:2c:82:44:fc:06:22:93:3a:
bd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A7:B7:0E:99:58:C2:0F:4A:32:2E:F8:1A:3A:6C:C7:7E:AF:62:4C
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:32:91:a3:28:c2:e5:ca:f2:85:25:7f:fa:a1:b5:20:e4:21:
00:42:de:22:9b:3d:ac:45:8f:84:12:d8:8b:69:61:cb:76:36:
84:05:eb:14:36:47:2a:fd:c9:e7:1b:ef:3e:83:11:32:11:b9:
2f:54:b2:6c:de:a4:8c:3f:af:a4:f5:fa:22:50:a0:ed:dc:59:
d5:9b:1e:fa:b8:58:84:9d:fd:f2:fc:0b:5f:22:c8:96:75:0a:
5f:aa:88:ab:06:0b:3b:18:9a:85:df:20:2e:9e:22:e9:32:08:
6c:64:7a:82:08:3e:3b:09:72:70:5b:c5:2b:fe:c0:26:a6:29:
ad:10:1f:0b:74:39:d4:31:4c:9a:4a:09:74:23:93:0e:81:64:
59:e9:1f:18:bf:cd:d6:aa:37:17:39:15:68:5a:bf:a8:5d:f7:
3f:bb:ab:77:d2:4e:37:cc:aa:6f:58:b2:46:9e:ce:9c:e2:db:
a6:7e:0e:a3:87:79:c6:ad:b3:50:67:cf:6b:fa:dc:b1:3f:76:
ef:54:82:1f:75:75:f3:b8:ac:13:33:6a:b4:66:0d:1f:e7:af:
0b:17:40:2c:d3:93:f4:1a:ef:a3:e3:5a:d6:3f:c3:41:df:77:
ed:a8:6b:52:9e:86:dd:33:6f:f9:6c:cf:2c:f0:52:27:c5:96:
93:34:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:17:41 2026 by rpki-client