
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: SXtFNGgbFJndUmHVD3f2AOcMRmVEm32mCVxaaqumiSA=
Subject key identifier: 63:14:E6:13:58:72:73:3F:F6:71:32:13:6F:2C:B1:DD:6E:64:1A:DB
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 01A06E036EBF0F47E3706360CDACB67A4E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 07C9
Signing time: Fri 04 Sep 2026 20:01:53 +0000
Manifest this update: Fri 04 Sep 2026 20:01:53 +0000
Manifest next update: Sat 05 Sep 2026 20:01:53 +0000
Files and hashes: 1: JMPvlDqfumg9SCdcGHVOgXJTFF0.roa (hash: zyAeEkRmUw8H5AH4ZmfXS+fShOUStvzRLDUN//lhybM=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: Lux4F1bvv353G9TTxGiRHyCTXTGLtUu9ki5mTfmxjV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:6e:bf:0f:47:e3:70:63:60:cd:ac:b6:7a:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Sep 4 20:01:53 2026 GMT
Not After : Sep 5 20:01:53 2026 GMT
Subject: CN=6314e6135872733ff67132136f2cb1dd6e641adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:63:7b:aa:38:2f:0f:d0:d6:ba:bf:cb:8e:
fe:19:28:7b:98:81:0c:f5:24:3b:6d:a8:ad:37:00:
af:a5:ad:46:48:0c:a3:d0:da:5f:88:db:23:34:26:
7d:db:59:c6:5d:40:ea:22:28:74:5f:95:fb:c6:bd:
bd:86:68:db:0c:89:36:cb:85:00:8b:e9:fd:a1:2c:
78:cd:45:f2:26:76:fa:ae:11:60:e8:69:15:65:f7:
c6:aa:c4:98:36:93:ed:7e:4c:10:fc:a9:43:cb:93:
34:df:c3:03:ab:6c:08:83:26:bb:e7:16:52:dd:a8:
d4:ff:05:c8:70:02:23:b9:bf:f0:94:b6:02:16:14:
12:95:f5:34:8e:b5:d2:5d:64:09:cf:ef:06:20:34:
79:a7:bc:5d:52:ac:3e:e7:7a:79:aa:c9:d6:38:44:
a7:9f:ba:a0:4b:80:b4:7f:78:f9:2a:7c:03:e4:19:
05:d2:e9:ee:94:a0:75:9c:03:5c:a8:5c:9e:3e:b3:
db:04:bf:1a:27:e7:eb:8a:61:a8:f1:fd:0d:6a:b3:
2c:74:8c:04:3e:a0:31:91:e9:ca:11:8c:ee:fd:b8:
06:73:d0:d2:3a:1e:ad:bf:41:70:22:1f:fe:4e:35:
f9:60:b4:46:1e:79:f9:1c:ed:a0:3c:42:64:aa:a3:
7c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:14:E6:13:58:72:73:3F:F6:71:32:13:6F:2C:B1:DD:6E:64:1A:DB
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7a:a8:90:30:76:e2:02:f9:59:23:34:86:3d:ac:70:38:a6:
05:59:13:34:dd:1a:a1:ab:ca:99:d3:56:78:59:5f:6a:12:57:
e3:c1:0f:72:47:61:f9:e3:f1:80:81:fe:86:f1:e0:63:a2:57:
d2:0d:eb:99:17:39:89:74:1b:25:2f:2d:56:65:cd:e5:38:7f:
d2:cd:c8:c4:28:76:93:c2:ad:56:a8:a3:5c:b4:5a:d3:9d:0d:
05:38:50:38:ed:45:57:09:bc:b7:ed:63:31:78:11:d4:84:3a:
ca:20:a0:f4:06:89:6c:2e:61:d6:a5:d9:4f:6b:c5:23:c1:70:
1b:ef:d8:28:0d:0a:7a:ce:10:2e:1b:0b:64:70:e7:a2:3a:05:
00:2c:bd:1d:8f:8e:35:f5:d0:0b:39:46:cd:27:63:99:9b:fd:
fe:ec:65:dc:7d:46:81:ff:d3:19:26:90:3c:24:96:ff:8c:c7:
31:1c:9a:45:38:4e:e4:a4:7a:46:5d:e4:fc:37:96:14:04:89:
e4:3d:98:89:a5:dc:cd:cf:99:75:c5:c3:46:f6:28:59:cb:a6:
7d:b7:73:98:a1:14:ee:56:36:ea:59:c7:7e:42:14:21:39:e0:
7c:b9:1c:ba:6b:60:65:54:a3:0c:43:6c:46:ae:ec:99:46:0a:
0c:ed:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:39:18 2026 by rpki-client