Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: bMNw2WmupVrZBo1HsTphHrlQeVCTQT9YoEmTvkIwgzg=
Subject key identifier: 72:00:BB:9A:E3:BD:26:F8:8E:B5:E6:C9:AE:6D:93:93:DC:1A:09:3A
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01A03C715AFF195ED6D4158A78D1028266ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1A1D
Signing time: Wed 26 Aug 2026 05:00:56 +0000
Manifest this update: Wed 26 Aug 2026 05:00:56 +0000
Manifest next update: Thu 27 Aug 2026 05:00:56 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: sNWSltYI5xJQPJp90Giunway1C5/dkt9AVWIuQY+Ryc=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:5a:ff:19:5e:d6:d4:15:8a:78:d1:02:82:66:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Aug 26 05:00:56 2026 GMT
Not After : Aug 27 05:00:56 2026 GMT
Subject: CN=7200bb9ae3bd26f88eb5e6c9ae6d9393dc1a093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:e6:9f:03:69:94:72:54:c1:fd:f9:7d:f4:
cb:0b:5a:73:db:93:24:1f:68:43:d0:0a:d2:56:9c:
96:45:a8:a7:ca:90:fe:eb:71:ac:5d:cf:bd:1c:92:
a3:31:a8:e4:c8:3a:25:c8:39:11:8b:22:2a:56:eb:
29:b2:cb:31:1a:89:49:0f:24:29:c9:9d:01:e4:89:
d7:70:3c:09:63:94:7e:a2:4e:cc:e8:4f:7c:80:36:
8f:f1:d1:19:83:7f:e0:5a:34:a4:af:d0:4b:0a:dd:
67:9c:06:2b:cc:f5:fc:f2:7b:d5:fd:8c:29:fe:27:
ba:14:af:8b:cc:92:ce:7f:e8:77:d0:fd:e7:de:9f:
f1:0c:04:84:6e:a0:00:26:54:2d:96:71:a3:07:2d:
b4:b0:2b:89:d3:d6:e8:50:10:0b:28:a2:6e:82:db:
11:a5:e5:bf:74:5d:50:0f:2c:08:85:86:11:c5:71:
d3:50:e0:46:05:82:4e:65:a2:77:bb:8d:a6:b0:2f:
14:c7:66:d2:2f:52:b0:68:b7:53:c6:2d:67:7a:70:
4b:17:ed:3b:69:93:1f:73:c4:93:c7:e8:24:2e:b9:
97:de:d2:12:18:2b:ec:60:ba:ec:ce:4a:9e:7e:86:
49:6f:a3:12:21:51:bc:95:ad:96:46:9d:84:91:6c:
5b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:00:BB:9A:E3:BD:26:F8:8E:B5:E6:C9:AE:6D:93:93:DC:1A:09:3A
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d9:f9:c8:5c:f5:f1:25:2f:4d:1c:47:69:32:f8:11:79:e1:
c6:ec:71:d9:7b:96:5e:a7:74:95:23:c3:e5:5e:eb:8d:83:f2:
47:12:0a:47:07:39:bf:75:91:bb:11:ae:f3:a4:86:9a:6f:25:
e7:2f:8b:2e:cc:d6:3b:0f:7a:6e:7c:ff:f4:11:e0:6c:72:dd:
56:0e:de:01:1e:8d:f3:b7:c9:7c:52:4b:4f:5e:90:e6:ec:70:
76:cf:e2:e1:87:02:63:ae:16:eb:28:9b:eb:13:b4:8c:4c:2c:
ce:a8:6e:d1:97:e7:c2:72:bb:db:bb:a9:6e:4d:24:dd:3b:3b:
89:a1:93:82:e1:80:96:e0:73:7b:02:3a:1d:c1:4c:9e:94:c6:
7a:bf:37:76:99:2f:af:a3:06:e7:fa:23:55:bb:60:6b:a6:ce:
f4:15:09:41:af:50:24:55:04:86:05:c1:47:d0:62:98:4f:b3:
6e:06:9c:ba:24:45:23:92:aa:14:81:61:4e:89:24:31:12:20:
1a:e6:4a:dd:25:45:b4:32:63:5d:e3:1f:de:fd:76:c6:10:d8:
07:8d:fb:f4:4d:2e:7d:45:8d:45:20:b7:ed:40:62:d7:28:58:
db:75:84:53:56:2b:04:f0:7e:31:49:e9:04:63:5b:10:f5:e5:
bf:20:e1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:56 2026 by rpki-client