Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: kUo+WhFuYV9UVlTdnlTskv9uwZxbCkFyxVGcESw161Q=
Subject key identifier: 30:AE:44:F1:BD:83:AE:4F:06:80:38:8E:B2:DF:F6:EA:78:F6:8E:3C
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 01A09B12898588AA1408305ACB69412B760A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1A51
Signing time: Sun 13 Sep 2026 14:01:18 +0000
Manifest this update: Sun 13 Sep 2026 14:01:18 +0000
Manifest next update: Mon 14 Sep 2026 14:01:18 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: UoirSJIRGz552sB+OW6X9EGEVSLK0TskoTseGuZUeM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:12:89:85:88:aa:14:08:30:5a:cb:69:41:2b:76:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Sep 13 14:01:18 2026 GMT
Not After : Sep 14 14:01:18 2026 GMT
Subject: CN=30ae44f1bd83ae4f0680388eb2dff6ea78f68e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:54:f8:86:e4:c9:80:4e:9d:6d:df:80:8b:
e1:06:e2:21:a2:b7:a3:c9:46:47:a5:f7:86:d2:91:
2a:59:af:9a:05:ae:3f:cd:1e:c8:ed:e2:84:01:6f:
5b:3b:5b:35:56:66:bf:93:9c:2f:21:f6:92:27:32:
9b:32:b0:22:8a:60:0e:76:24:ec:ce:f8:3a:09:70:
54:8f:8f:ea:03:60:86:a0:7f:35:43:ed:78:d7:2e:
3f:f8:a4:dd:d2:ac:d9:9c:3a:bc:be:5a:12:4b:47:
e0:9e:58:f0:10:c6:d7:3b:aa:46:48:2a:da:4e:39:
91:1f:fb:4b:db:71:18:b4:26:ba:7c:23:1f:05:ce:
a0:ab:dd:55:9e:c2:b7:e0:43:0e:c6:06:02:fa:ff:
5f:1f:e3:fd:fd:90:8f:c7:24:02:86:10:bc:5e:db:
e0:28:01:4e:fe:50:3b:35:c4:27:9a:63:bf:32:93:
f5:99:d6:51:be:8f:67:44:e3:a6:91:0e:2d:01:d5:
14:67:15:c5:3d:6a:e8:97:1b:0a:f4:65:cc:e6:99:
e1:90:29:d4:f5:a1:2c:21:b2:8a:7c:25:c3:03:ad:
e0:b0:a9:c2:a0:6f:80:7b:d6:06:83:8a:54:72:15:
f5:98:4c:dc:f6:25:96:88:b3:b9:bd:85:49:29:09:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:44:F1:BD:83:AE:4F:06:80:38:8E:B2:DF:F6:EA:78:F6:8E:3C
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:fc:25:86:5a:31:f4:e2:29:7d:79:0b:d7:9a:6d:49:74:ba:
b5:09:09:23:bb:e0:e4:07:b0:2f:aa:a5:dd:52:b6:86:55:40:
c0:a7:bc:1b:82:a3:b7:ad:90:40:32:3a:37:e7:e1:32:13:7b:
4e:38:3b:12:49:59:89:c6:b1:f0:95:85:89:91:6f:6f:31:46:
7c:32:02:f6:15:2e:44:99:f9:fb:ae:10:9b:40:02:49:be:17:
74:1f:d0:66:73:a2:e3:72:e6:9f:08:c7:83:68:35:26:e1:11:
3f:06:97:86:38:aa:c1:8a:d6:e5:bc:57:eb:2b:cc:38:16:58:
f5:e2:b1:b1:89:62:c1:d7:28:24:2f:0f:4e:e1:c1:da:21:d7:
e0:fb:f6:15:72:04:ec:d0:d6:9e:4b:43:ed:2a:92:dc:a8:98:
d7:d6:98:85:17:b3:4f:20:d2:d5:c4:16:94:f3:ae:ad:0b:3a:
58:3b:dc:77:10:fb:64:7b:9f:26:9b:d3:25:46:38:11:00:45:
12:93:78:65:d1:d2:85:a2:db:4f:8c:fd:be:ab:fc:0b:95:42:
a5:43:f9:ab:ba:a7:69:fc:ae:a7:dc:f3:56:81:35:fa:e0:be:
0a:3f:9e:0a:83:4e:f1:55:7c:e1:b0:2d:17:52:2d:4f:91:f7:
4c:3a:90:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 22:59:17 2026 by rpki-client