Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: F20gfWbiDelETzArHLwCkTI8zSJnYih7D0Yux2Fuf9g=
Subject key identifier: 1B:C9:84:DD:FC:2B:DC:88:9B:96:F0:E7:F6:0C:21:5B:0A:49:AB:2A
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 01A1889BAABAFE2F8825EE99776B3D293D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 1ACE
Signing time: Thu 29 Oct 2026 17:01:05 +0000
Manifest this update: Thu 29 Oct 2026 17:01:05 +0000
Manifest next update: Fri 30 Oct 2026 17:01:05 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: SQR45hWMiGVMPhyRq/2ZWeXdv/9VQ/oN4sfe1LroQ+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:aa:ba:fe:2f:88:25:ee:99:77:6b:3d:29:3d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Oct 29 17:01:05 2026 GMT
Not After : Oct 30 17:01:05 2026 GMT
Subject: CN=1bc984ddfc2bdc889b96f0e7f60c215b0a49ab2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9e:51:01:ff:ac:b2:5d:f2:72:c9:ce:4d:62:
93:5a:c2:7c:f6:ba:af:02:e3:62:88:0e:04:83:32:
c9:e1:ea:ac:83:88:35:d1:e8:90:8a:bb:5d:8f:32:
be:de:fc:cf:9d:fa:54:44:b0:91:5a:d6:84:53:ea:
94:96:b2:68:a7:3f:e7:af:ca:75:f9:50:1a:44:09:
20:4e:97:d5:fd:ce:70:4a:bb:e9:9e:73:3a:29:c6:
b6:64:5b:d5:c2:13:d9:3b:c6:29:5a:9b:4b:3f:be:
bc:86:63:ec:6d:e6:5d:00:c6:cc:75:df:ef:b4:43:
1f:38:55:90:9b:92:81:37:74:16:60:25:18:8c:42:
02:c2:a0:2b:79:4c:5c:9a:e9:12:45:f6:be:2c:d9:
53:5b:08:96:af:55:0e:ba:d7:53:0f:ed:a9:a9:39:
a2:99:e7:66:05:0a:02:5d:03:c0:c8:89:c7:58:5d:
2e:da:d2:5b:2c:bf:11:f6:d8:26:da:8a:11:3e:d8:
d9:d5:df:47:b0:a1:a2:65:f7:84:a9:49:66:2f:33:
84:cc:0c:50:41:e3:e9:67:52:1c:e8:cd:ad:1e:15:
f1:e6:f4:d0:96:0c:4f:64:f5:23:34:c5:83:f5:63:
63:88:90:56:14:a3:85:fc:ff:3c:47:0e:d1:66:ca:
5d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C9:84:DD:FC:2B:DC:88:9B:96:F0:E7:F6:0C:21:5B:0A:49:AB:2A
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:9f:7f:e1:91:f0:ac:6a:95:c0:46:25:e1:57:38:af:22:
02:1f:a6:a8:c4:b0:2a:15:bf:43:92:dd:9b:d0:0b:b1:d4:01:
f0:01:f5:23:39:ce:34:db:08:8c:62:81:85:09:90:a1:cd:c1:
98:d3:ed:ad:d6:27:08:f6:a0:9a:39:17:d2:79:77:44:b0:88:
af:2a:8c:8b:31:7a:df:92:01:0e:57:61:c8:c3:75:e5:cd:98:
d3:ac:bc:75:b2:4c:80:5b:91:a4:87:11:48:bd:fa:16:74:c7:
cf:91:3f:49:e7:20:f2:63:80:4d:3b:f4:f5:78:85:af:5e:bc:
b6:45:34:8c:e2:b1:8b:e8:f5:fd:81:cd:c5:02:61:82:52:2a:
8f:99:e3:f3:fb:dc:4d:c0:ae:a5:2f:54:f2:05:f9:c0:16:f5:
b1:9e:de:d9:da:cf:a6:14:6b:6f:37:a9:f0:ab:3b:0b:6e:27:
5b:66:89:41:ed:1c:c3:38:c5:59:27:6f:e4:3a:a0:49:5f:99:
12:98:e1:36:54:a9:b3:49:21:a0:94:1c:81:b4:2c:86:dc:d8:
fc:be:f4:3f:97:2a:b6:84:1f:18:95:62:39:f6:7b:18:99:cb:
95:c3:e3:9b:7a:d3:7b:ba:13:3b:77:4f:e3:cd:fc:42:c2:a2:
14:4d:7f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 01:33:01 2026 by rpki-client