Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: IBVRePIOWcJIjxVwtK0j0JInmlRi0ifg3Qa284Ogny0=
Subject key identifier: 1C:F7:AC:CB:24:F4:3F:8D:D1:93:BA:31:AB:C4:A7:A0:B0:89:63:B4
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 01A17C6081AC67FCF05BE3A1280B5F8D60E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1ADC
Signing time: Tue 27 Oct 2026 08:01:01 +0000
Manifest this update: Tue 27 Oct 2026 08:01:01 +0000
Manifest next update: Wed 28 Oct 2026 08:01:01 +0000
Files and hashes: 1: 9S-B0D9lnDF21-usrbJC4P6zxPM.roa (hash: ZnhdVeDDKZrqSSXA3q/cojKHxXaNDDWFxkadx20lHYg=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: su0W0RbnO6Z7fs_hQWfi82HBmZE.roa (hash: FaaXZ+UIdTUUGuM2AjeOCtg4amoifIyvo78+2woAaSI=)
5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: LfiO0AxZX51hznHVumDvIKfMH/Pur29FUVBQ+5kbIvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:81:ac:67:fc:f0:5b:e3:a1:28:0b:5f:8d:60:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Oct 27 08:01:01 2026 GMT
Not After : Oct 28 08:01:01 2026 GMT
Subject: CN=1cf7accb24f43f8dd193ba31abc4a7a0b08963b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:1d:14:d2:e5:a5:9c:ac:d0:44:ca:4e:7a:
b7:d6:7a:4a:9c:d1:25:f0:c6:39:43:20:ee:97:25:
cc:09:8b:35:40:e1:fb:7f:c3:6d:36:46:93:ea:e5:
40:a0:d3:0c:fc:c5:f2:d9:24:2c:3d:31:30:1f:9b:
33:bd:86:2e:53:b2:54:ba:55:7e:ba:11:3d:16:f9:
93:bb:ea:49:7c:89:3d:1a:2e:29:5b:7b:53:53:83:
a0:df:b0:75:82:55:05:6b:a8:ff:18:43:6f:19:48:
ab:ee:64:bb:86:36:a7:ad:31:ba:8e:73:4c:c0:41:
bc:33:17:f8:84:8a:bc:7c:aa:c8:ec:6a:46:75:12:
f5:e7:2a:d8:40:7e:a1:bf:cc:7c:3b:c6:93:20:9c:
5d:8f:70:49:d5:aa:52:7c:b5:6d:1d:d1:66:d1:f2:
f3:33:ac:9e:01:54:9c:c8:36:c1:a5:a1:c5:a5:2d:
6d:c8:15:fb:62:8f:58:12:c7:3a:4e:50:71:7f:5a:
1a:f9:5c:f6:fa:40:d6:1e:9e:5a:18:69:1a:c9:57:
cc:ba:85:ef:4a:95:ed:0a:69:72:6a:65:e8:54:e0:
fc:8f:d1:e1:e7:f3:f9:18:5c:86:51:4a:a9:af:a8:
3a:5e:ae:a9:7b:bc:f4:bc:ff:4f:8e:b0:f0:a7:96:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F7:AC:CB:24:F4:3F:8D:D1:93:BA:31:AB:C4:A7:A0:B0:89:63:B4
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1f:fb:52:ee:5b:0a:b8:dc:22:3f:86:02:c9:34:94:65:69:
99:96:ef:af:9b:77:bf:8f:bc:72:88:0e:d9:2d:a3:ad:16:2d:
01:1a:9d:ed:fa:75:f7:75:ce:e9:1b:94:94:81:63:3d:65:5b:
b6:53:3e:24:33:b9:dd:3c:eb:0d:0d:64:55:53:ce:65:fb:23:
b6:0b:2b:8e:c6:92:bf:67:1d:0c:58:bc:e8:99:c0:94:ed:eb:
f0:50:9a:50:31:24:16:5b:9e:a7:26:e1:eb:41:9d:41:0c:13:
08:e8:d9:f3:02:be:c1:0b:4b:e0:2d:e5:d3:8f:32:6b:7c:c8:
cb:ef:89:fc:18:2d:92:b6:5b:b3:14:eb:ca:63:44:1a:df:c8:
6d:1c:ed:a5:ed:bc:fe:ca:0d:84:03:4b:66:10:e4:7b:e9:81:
96:00:4f:f7:e0:e0:3d:83:ad:d5:45:43:c4:8f:6c:92:7f:ee:
47:28:d3:26:81:11:3b:71:53:c5:e6:8c:a6:bb:4f:02:12:38:
74:42:f9:dc:0e:a8:d5:aa:88:11:d8:20:7a:4f:56:67:9a:46:
d1:3f:71:a5:fe:3d:99:59:51:00:63:47:d8:3b:9c:c2:b6:e1:
51:5f:73:df:74:d0:77:32:7a:52:e9:06:1f:c5:8b:0b:84:11:
fe:19:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:40 2026 by rpki-client