Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: /EAfNSqh7wFWi7ieox0bXlYRRG7jjlA+ruZ9C4i2/bs=
Subject key identifier: 76:EE:17:5E:F5:5C:4F:60:37:1A:43:64:08:18:D8:68:F3:63:9B:4D
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 01A1739420EB515491D41A5E2BF809014440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1AC0
Signing time: Sun 25 Oct 2026 15:00:49 +0000
Manifest this update: Sun 25 Oct 2026 15:00:49 +0000
Manifest next update: Mon 26 Oct 2026 15:00:49 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: JH0+7YaOPSPf9O7tjOhLrI1mX+B1LadNP0MwGEY9vBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:20:eb:51:54:91:d4:1a:5e:2b:f8:09:01:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Oct 25 15:00:49 2026 GMT
Not After : Oct 26 15:00:49 2026 GMT
Subject: CN=76ee175ef55c4f60371a43640818d868f3639b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:6f:9e:1e:64:24:e7:02:72:77:4c:c0:8b:
b9:e6:51:14:a5:59:f4:fe:cd:70:82:6e:6d:da:62:
39:71:9c:2e:b2:19:dc:b4:e0:aa:cc:b6:25:59:74:
59:5f:01:1a:f3:81:9d:16:79:66:34:66:f2:d0:e6:
b0:2b:de:ad:4f:98:3f:4f:12:2f:2f:1d:f1:e6:24:
1f:76:42:2b:f0:eb:b0:6c:53:7a:49:aa:5c:00:ee:
56:51:4e:91:bb:83:87:ff:3f:a3:af:e9:a5:cd:c8:
9c:d7:00:2c:81:d3:83:9d:5d:af:eb:39:70:fd:04:
ec:f7:22:0a:56:02:35:d0:18:21:22:1d:38:16:b1:
6b:b6:8e:de:f0:6a:18:a5:3c:25:f1:6b:c4:53:c1:
91:32:f8:fd:31:c4:f1:92:14:0a:ce:4a:0b:fe:06:
19:d8:a4:14:93:7a:a1:8f:1e:e8:ab:fe:54:f6:15:
fe:de:33:7b:81:ca:f7:99:0e:34:e5:27:9d:28:9c:
4f:43:2d:b4:a2:91:64:30:7b:d7:79:1b:1a:d3:f5:
e6:9a:c8:f8:83:49:ef:bd:42:a7:e4:96:eb:46:2c:
e1:3d:15:4d:e7:13:42:62:57:b4:53:e8:ff:ee:8d:
11:0a:51:28:3d:9a:9a:48:a6:ca:a5:bf:0c:cb:16:
d6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EE:17:5E:F5:5C:4F:60:37:1A:43:64:08:18:D8:68:F3:63:9B:4D
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1f:4f:c9:9b:b5:fc:38:84:c5:28:f8:28:10:3b:94:08:c8:
9f:73:2e:5b:dd:73:ee:3d:56:9b:1b:98:a8:24:2b:00:8c:52:
b0:2f:29:d9:14:66:72:36:4d:f0:e8:51:27:0e:e7:7d:16:ba:
21:35:26:62:a7:64:3e:95:93:75:fa:88:0d:86:b9:22:61:fa:
df:da:95:f1:0f:b0:9a:30:56:3f:0b:b3:7c:66:99:16:3c:92:
33:68:1c:98:09:a8:7d:03:f0:b0:7b:7d:92:69:e0:4a:d2:10:
ae:81:e6:b4:8a:60:59:04:68:9d:73:cf:8a:fe:17:7b:af:54:
4a:0e:5b:28:48:23:c7:46:ee:f0:5d:b9:ef:8c:d5:c4:b7:3c:
3c:fa:44:72:58:76:f8:28:48:63:01:16:e5:ec:a6:18:ce:6d:
e7:05:bc:ed:c6:f3:c5:97:d4:b7:90:13:5d:6c:d9:6a:f7:e9:
6f:9d:89:6e:ac:e2:33:97:45:38:67:53:49:06:05:c0:4a:88:
16:dc:40:9a:11:e3:64:fd:e2:34:8d:46:d4:84:0c:df:86:33:
af:e1:e5:1d:f1:69:46:0b:ae:08:75:18:26:86:a9:c8:01:c5:
71:4c:4b:26:73:8d:07:45:ea:32:ed:9d:30:89:fb:ab:a3:68:
7b:51:c6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:03:39 2026 by rpki-client