Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: q77gbJTwcNtXqbhrLsQpWwrrYPO4DIOFFBGSPkmExhA=
Subject key identifier: 65:47:AC:5C:EE:B3:FA:FE:B0:A9:5E:0A:84:C7:B1:60:FB:AF:91:C5
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 01A0412AA32354B73CE0FFC418148EDF02D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1A2E
Signing time: Thu 27 Aug 2026 03:01:48 +0000
Manifest this update: Thu 27 Aug 2026 03:01:48 +0000
Manifest next update: Fri 28 Aug 2026 03:01:48 +0000
Files and hashes: 1: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: teJA4CKqWevjClkJhrSPGNgY+vykKHbXCUbTmhEojG8=)
2: y7cO-uvd-g6IKXPnSmNUZia9w1s.roa (hash: aa7Xz8229L+R/TET5wKLzyMqkiPkHrosbEK4nrHeitk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:a3:23:54:b7:3c:e0:ff:c4:18:14:8e:df:02:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Aug 27 03:01:48 2026 GMT
Not After : Aug 28 03:01:48 2026 GMT
Subject: CN=6547ac5ceeb3fafeb0a95e0a84c7b160fbaf91c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:c4:b8:0e:52:67:a3:ee:21:0e:40:a3:4d:
59:3b:f5:f4:ad:7b:b8:4d:df:29:de:3a:f6:5c:6a:
ee:02:b6:b8:73:73:3f:d3:cc:40:d1:2b:da:b9:da:
6b:84:a9:f5:01:f4:00:d8:05:ba:10:ed:b3:94:b5:
d0:54:3f:46:54:89:89:d7:ba:45:0e:2a:4b:30:89:
bd:dd:e0:39:02:4b:4c:da:4a:cd:11:f4:23:3e:af:
82:f7:fa:8f:30:16:9d:e1:24:30:40:97:59:74:9c:
c8:30:e0:a2:fd:1c:48:38:90:0f:8c:23:47:63:8b:
b1:f5:28:b4:92:ca:09:4d:0f:67:90:e6:7e:52:01:
88:e5:44:1a:7d:c5:be:9b:fb:b5:1d:df:8b:6b:50:
bf:59:b0:00:78:24:0e:6c:fe:d9:5d:78:48:28:29:
91:56:4c:99:94:fe:9d:2d:9d:00:e8:a0:25:d2:6c:
f2:32:46:50:f0:f3:66:c5:5d:70:5a:3b:8f:13:e4:
64:7a:b6:02:fa:a4:e7:dc:ae:e5:94:56:11:4b:93:
33:76:1c:5a:77:bb:cd:fa:54:00:34:88:08:8b:f9:
4a:30:22:e8:c3:99:5f:2e:66:55:ca:5d:2c:dc:b0:
bc:63:70:4f:71:c6:f8:74:33:c4:84:7f:29:97:e1:
f3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:AC:5C:EE:B3:FA:FE:B0:A9:5E:0A:84:C7:B1:60:FB:AF:91:C5
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:a3:53:a8:bb:0a:15:51:c3:d6:62:4a:69:bb:c6:e5:72:fa:
2b:97:50:41:2b:26:fc:04:d5:2e:7b:47:e2:8c:a6:ff:8e:01:
7c:9e:95:8c:2e:a6:76:46:8b:fc:fd:2c:58:7a:c7:1e:26:37:
d6:e7:bc:15:1c:af:56:25:bf:e4:c1:29:39:d1:2c:56:7b:17:
28:ec:3f:23:73:2d:4c:67:52:10:81:fd:5d:86:f1:bd:98:d5:
26:4f:3d:78:dc:fb:29:c3:47:f2:09:7e:96:8e:58:1a:97:4a:
1b:d7:12:75:94:b6:1d:04:d2:44:27:f5:37:07:48:ff:82:b6:
65:87:05:c6:10:ac:e1:1b:6c:0f:05:cf:e1:f3:cd:d9:48:d1:
0b:38:c0:0b:59:df:24:9f:c8:a1:48:4c:ec:f7:2e:95:2c:53:
ad:c8:73:96:b7:ef:c4:29:4d:5a:08:31:1d:d0:b4:2d:6d:81:
4d:06:b7:63:86:0b:c1:ea:b6:53:dc:6f:7f:d3:66:68:68:c1:
b8:63:32:01:b2:5b:6d:bd:1f:6a:c8:87:1a:15:b5:c7:e1:fc:
28:8d:5a:2a:1d:a0:8c:1f:f1:fa:43:13:5c:00:de:45:56:22:
a1:f0:a4:8a:b4:8c:28:1c:cc:d9:69:fb:25:fb:06:1b:ac:7d:
fa:62:04:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:44:38 2026 by rpki-client