Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: n6qiAr+OpKE4SVtSa9GKEAvFD49meVRlTsUzL2aGFUU=
Subject key identifier: 05:8C:4A:3E:AD:BE:34:76:AA:86:AC:43:03:E6:9F:80:5E:1E:8D:A8
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 01A17E4F5DA740BB94E2D06693E8F4D0E72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1ADD
Signing time: Tue 27 Oct 2026 17:01:32 +0000
Manifest this update: Tue 27 Oct 2026 17:01:32 +0000
Manifest next update: Wed 28 Oct 2026 17:01:32 +0000
Files and hashes: 1: 9S-B0D9lnDF21-usrbJC4P6zxPM.roa (hash: ZnhdVeDDKZrqSSXA3q/cojKHxXaNDDWFxkadx20lHYg=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: su0W0RbnO6Z7fs_hQWfi82HBmZE.roa (hash: FaaXZ+UIdTUUGuM2AjeOCtg4amoifIyvo78+2woAaSI=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: Ejtrp5WP7k4Wfw28feVvV/0JjSbTaf38xjQzESTf7eQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:5d:a7:40:bb:94:e2:d0:66:93:e8:f4:d0:e7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Oct 27 17:01:32 2026 GMT
Not After : Oct 28 17:01:32 2026 GMT
Subject: CN=058c4a3eadbe3476aa86ac4303e69f805e1e8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:27:9d:32:54:eb:d6:8b:7b:b2:f8:26:0e:
0c:67:09:8a:02:c2:5c:c8:8f:04:7d:1a:51:39:02:
82:19:36:27:43:dd:98:40:f2:ab:01:ee:bf:07:54:
7d:d3:e6:66:31:61:0e:a8:35:c2:1e:c2:ac:ec:ca:
07:60:ed:06:a6:0a:a5:48:77:14:a2:14:cc:a8:00:
7e:9d:e0:93:1a:07:84:56:68:0c:95:5d:42:ec:a5:
ed:7d:ef:6e:05:9d:d9:56:b6:ed:22:29:c4:8f:a3:
7c:0f:92:7c:c4:ae:ea:e4:8c:d7:92:1f:29:bb:d2:
7a:67:cd:ac:45:8b:3d:30:f2:e9:23:0b:c5:52:e6:
ae:16:16:55:21:66:76:66:d0:54:6b:b7:b8:ff:11:
2a:71:02:21:1e:95:a1:74:88:29:a7:9e:19:5a:3c:
10:9b:5d:fc:94:cc:70:91:f7:30:e5:4b:45:49:68:
65:cb:26:d2:de:28:b8:fb:18:3d:6e:7d:73:9f:25:
aa:b9:ed:88:ac:82:63:42:07:18:7b:b1:05:3c:c7:
41:c8:92:7c:22:1d:96:7f:08:09:dc:57:86:c9:3a:
01:51:eb:ad:b1:02:50:0b:90:a5:ee:97:7c:4e:32:
ef:af:09:e0:d3:27:d3:54:6b:f9:82:45:bc:12:a9:
d3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8C:4A:3E:AD:BE:34:76:AA:86:AC:43:03:E6:9F:80:5E:1E:8D:A8
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:95:14:37:a4:59:62:4b:07:39:3d:0a:69:76:c4:a7:e0:45:
75:2f:b6:12:5a:07:9f:6b:34:0c:45:d6:4d:34:a2:9c:30:ff:
88:8e:8f:59:ab:1c:01:68:58:1a:eb:f5:e7:d8:ba:33:db:a0:
de:c3:42:80:40:42:27:85:c0:d7:e0:55:38:06:65:b6:8d:e5:
80:ef:0e:37:3d:35:fe:36:ff:78:a7:f9:f9:59:c5:be:6a:05:
84:98:e0:d0:3a:6a:5b:d4:b1:7c:8f:a1:16:de:29:bb:0f:80:
50:f2:77:3f:f1:8f:fa:a2:f2:b2:c5:1c:7e:41:70:f5:65:59:
08:bc:63:b9:35:c4:1c:ae:25:9b:d2:8a:1f:a3:a3:56:46:3a:
c8:63:62:5c:6f:7f:b6:d5:97:c6:a3:b9:c0:b0:77:76:4d:61:
e8:02:cd:99:02:5b:e7:c0:a1:48:ce:e3:17:79:9d:bc:30:21:
8b:3e:d7:b6:67:87:1b:7c:ee:ed:2d:8a:d7:9b:38:69:d7:b4:
36:d3:46:9e:72:9c:de:89:42:c0:dc:14:b6:c3:64:d6:d2:c9:
01:2e:37:7f:ce:d2:90:53:6d:50:ee:95:83:86:df:80:4c:53:
45:e8:2d:cd:14:be:cb:46:49:08:5c:25:dc:2f:f1:35:6e:d9:
d3:b3:03:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:41:36 2026 by rpki-client