Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: fo/RycBUzX0xCNyscVaFieUfgRrddRR+OcwSwQQKEsg=
Subject key identifier: 9F:CF:B6:2F:31:33:0F:43:F0:3F:4B:00:D9:24:B9:C8:7A:14:09:16
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01A15AB0AA6BEE5C11EE7286FA5BB43B6F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1AB2
Signing time: Tue 20 Oct 2026 19:01:29 +0000
Manifest this update: Tue 20 Oct 2026 19:01:29 +0000
Manifest next update: Wed 21 Oct 2026 19:01:29 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: jGoYiuWtB+GQF9mn/0dTIK5WIoyXDo7BkCqT6siyvA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:b0:aa:6b:ee:5c:11:ee:72:86:fa:5b:b4:3b:6f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Oct 20 19:01:29 2026 GMT
Not After : Oct 21 19:01:29 2026 GMT
Subject: CN=9fcfb62f31330f43f03f4b00d924b9c87a140916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:f1:a4:43:bb:ab:69:ec:28:e2:e4:aa:39:
b3:b0:7a:32:f7:91:74:4a:f7:cd:03:94:e3:06:6b:
5d:d8:99:50:1e:7c:af:75:0a:75:3c:fb:32:1e:5a:
4f:26:62:90:79:41:4a:84:46:6e:db:be:5a:b0:b8:
72:42:9d:e6:eb:ea:52:ae:a0:77:ec:22:43:b7:0e:
ff:ef:13:75:74:8b:b1:ce:12:59:1c:35:cd:39:9d:
78:2c:8e:c3:a5:fd:c1:6a:ea:50:c3:c3:b8:fc:91:
c0:eb:41:e4:78:56:3c:d7:a1:10:f1:35:df:f3:4c:
e6:92:33:25:6f:ca:23:98:e4:2c:66:82:28:29:83:
1e:94:e5:5a:cc:05:d7:c6:55:3a:f6:c8:fc:61:b5:
24:87:d1:96:f8:34:1b:b1:b9:1d:cf:13:26:cb:33:
de:c5:d4:54:a3:8a:e2:55:c1:99:b5:8e:38:dc:bd:
8a:b2:b6:a5:4a:d1:41:5b:0b:5d:17:c3:30:74:99:
f9:bf:f2:30:56:75:04:65:5e:f3:e4:b5:12:60:bc:
5f:11:a5:fa:94:0c:10:fd:3d:17:48:8a:b1:c7:e8:
c1:43:c3:97:b1:6e:7b:7d:77:25:e7:f7:07:c9:51:
7e:ba:ab:4d:41:1a:a8:53:ea:b0:dd:7f:dd:39:c8:
1e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:CF:B6:2F:31:33:0F:43:F0:3F:4B:00:D9:24:B9:C8:7A:14:09:16
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:29:9b:95:c8:40:66:0c:35:6f:e7:6b:06:aa:0b:41:97:77:
6b:e7:28:8c:5f:33:b1:1f:5e:dc:5b:51:77:84:fd:51:c5:6d:
1a:a6:df:06:77:56:48:81:a2:68:21:43:55:f8:f4:52:b2:c4:
0d:21:b5:1a:3b:6c:bd:1e:55:08:65:5c:3a:b0:a2:bc:7e:63:
39:ba:5f:a1:c1:ed:cd:da:99:e8:84:68:5d:d9:3f:89:73:b8:
85:ce:16:57:27:72:87:8b:21:6e:81:e1:05:b9:ba:bb:da:07:
03:22:62:18:d0:7a:62:24:d2:04:cc:af:68:3e:64:c7:1d:21:
98:0c:73:9b:20:6c:98:78:70:7b:55:f1:b7:48:74:bd:00:98:
2c:3e:bd:28:4a:64:27:2f:62:f4:ef:f4:c6:7a:c0:a8:2e:a8:
d8:76:12:25:0a:57:22:1f:c5:be:0f:ec:5a:52:b9:7d:37:ff:
27:be:fe:56:cd:d7:02:0d:6c:ee:6b:7c:e4:17:4c:6a:c6:eb:
80:9d:04:fe:be:61:f7:ba:dc:13:3e:40:33:47:5c:e4:48:11:
b2:7a:0d:2b:b7:bf:68:ab:fe:c8:67:f5:56:a6:30:a6:a7:bb:
c5:05:16:6f:b5:21:7a:d8:0a:dd:69:c4:2d:6e:e9:4d:05:f1:
93:fb:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:36:23 2026 by rpki-client