Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: n+4hNj3W4s+Wi5Ay4jwKdGsp0/mTJdmxJjLy4GxVOVs=
Subject key identifier: 4C:EB:3C:09:DB:20:4C:85:66:29:E9:EC:64:59:0B:C5:14:FA:3F:53
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 01A1758282EF3A35D4861558182E14E81DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 08BA
Signing time: Mon 26 Oct 2026 00:00:49 +0000
Manifest this update: Mon 26 Oct 2026 00:00:49 +0000
Manifest next update: Tue 27 Oct 2026 00:00:49 +0000
Files and hashes: 1: BbVSxyNU5ucTTClQQhXhrGR8l5c.roa (hash: uBAPc/ZA4XAUWz5KImLTTUEFpX0UbBgDW1mHGlWJfas=)
2: DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa (hash: dUYfJyucIcgSEye6sBcDdNQsfbXuPD7ojWDauTvFvck=)
3: OJgOARYMPxRB72yCPkk6JUbwQB8.roa (hash: 3UwM7rZhqWCROq+sb6eb0MpPbxYHZiGojiOHooeJ2KU=)
4: e8f0N2koGxLuVORh62e9yiFONmA.roa (hash: l74UNXKpHqzVGeD5WfqV801+3Uv6HZ+Zal3qCDvFAAY=)
5: jlEiFX_wyRdO1f-giRgoTohEBks.roa (hash: WygL2x3ENDsYbsxAyrNSYu0iLwbX2a9wJTadgTZm0AM=)
6: obcRivu1HhvfNKCkOhw7LiU240o.roa (hash: nv7GGc79nMAv6p/WulvBkefiC5b6qKMqvGIDQeKSTOk=)
7: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: euJXuCUmaxeANJQ6QPRITOo1v6+q5THW1d14rtxMoAw=)
8: wiPd6tKL-ejAoZ6GLTkwP9VrnWA.roa (hash: YxRVGM09B7hq2RXw9mcl3q9tvV0vOyxDQg2e0rhZobo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:82:82:ef:3a:35:d4:86:15:58:18:2e:14:e8:1d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Oct 26 00:00:49 2026 GMT
Not After : Oct 27 00:00:49 2026 GMT
Subject: CN=4ceb3c09db204c856629e9ec64590bc514fa3f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7e:d8:ec:9c:f8:6d:ca:7f:0d:ae:eb:ef:14:
cf:33:3c:dc:e4:00:17:38:a0:9c:85:c0:a7:bd:33:
cd:6d:2b:bb:29:26:28:62:cd:48:14:b6:11:25:23:
e2:2a:4b:96:1e:94:e5:75:07:b0:38:d1:db:c4:1d:
78:1a:25:e6:80:46:0e:74:43:67:4d:48:8c:f6:36:
b9:60:c9:c8:5c:26:f1:48:d4:97:74:2d:bf:1b:90:
94:e8:79:d4:90:a5:9d:73:83:3d:18:dc:57:77:1d:
ed:5f:fb:47:37:af:9c:2e:50:da:55:88:5d:4d:5a:
7e:ae:0a:fe:11:18:82:46:73:92:3b:5f:51:17:26:
6a:86:db:11:a1:cf:fd:b7:48:65:1c:3d:23:73:15:
9f:64:c5:00:3e:4e:e1:46:30:62:ff:28:d7:bb:b9:
e0:fe:41:34:dd:ea:88:6b:57:96:71:95:ca:c4:34:
71:f4:e1:21:2a:25:06:51:38:2b:73:27:d2:97:16:
11:e1:12:31:18:34:92:27:40:a8:15:a7:24:a0:d2:
4c:02:75:25:aa:11:01:e0:34:bd:fb:fd:e5:23:45:
8f:fb:1e:83:34:5f:2d:32:71:a2:1a:fd:da:9c:5f:
ac:db:05:e9:36:b7:8d:53:d1:04:94:a9:3a:cd:25:
7c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EB:3C:09:DB:20:4C:85:66:29:E9:EC:64:59:0B:C5:14:FA:3F:53
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4d:a5:79:26:63:fe:de:30:ab:23:57:fc:e3:e4:2f:ab:e0:
7c:52:ff:12:c8:c8:ac:6b:be:07:38:ee:10:2b:97:11:4e:f8:
ba:c0:c3:57:c2:7e:8f:8e:16:1b:eb:e2:fe:91:ff:b2:68:4d:
0e:ee:e5:40:d2:d4:14:20:5a:8e:32:52:4c:43:29:cc:f5:b3:
10:7f:ac:64:ac:ec:e6:db:be:f1:b9:cd:56:ab:78:da:78:9c:
ff:b9:30:2e:ec:79:95:9b:e1:3f:ef:50:d3:cb:eb:e9:0c:c6:
6d:90:9e:77:c9:4d:56:aa:74:16:bb:d8:26:59:9c:de:cf:cb:
59:db:4b:40:64:7c:7c:f4:e4:59:ef:35:de:fb:d9:0c:4a:b2:
49:c5:79:99:52:9e:10:5d:d4:4b:27:98:81:fb:7e:54:86:da:
a9:36:52:88:12:78:f2:2c:b9:b5:10:10:45:b5:e8:35:b0:ba:
97:56:f4:32:77:7d:2d:12:da:91:4b:08:40:c8:51:75:3a:85:
f3:a0:68:fc:3e:bf:e9:8a:7d:04:81:21:cf:a4:53:72:2f:38:
94:5f:30:da:b4:46:df:5b:ee:63:66:e4:5e:06:ad:2f:a9:7f:
59:a2:5a:48:1e:a8:70:d2:22:86:15:c9:25:37:da:b0:05:3b:
25:62:5f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:29 2026 by rpki-client