Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: kgdrpa4zrmZychDXtXTIG6Se2JlH9NZo1AW5m77wwM0=
Subject key identifier: A9:B1:1D:02:3D:06:F4:70:8C:40:70:DD:0A:38:F1:01:96:CC:A9:68
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 01A002EFFBCED83DC4846187BCAE541B6209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 01:01:17 +0000
Manifest this update: Sat 15 Aug 2026 01:01:17 +0000
Manifest next update: Sun 16 Aug 2026 01:01:17 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: qnVs3OivJSmP/omLM00BzZ7pAg65NEshsdYtq7QDETQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:fb:ce:d8:3d:c4:84:61:87:bc:ae:54:1b:62:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Aug 15 01:01:17 2026 GMT
Not After : Aug 16 01:01:17 2026 GMT
Subject: CN=a9b11d023d06f4708c4070dd0a38f10196cca968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:35:db:b2:ab:dc:dc:84:83:ee:d9:7d:f4:
9e:72:08:2f:3b:9f:46:b5:69:a1:38:ca:39:5f:3f:
85:e8:ba:a0:bb:f1:ac:80:d3:be:0f:13:b9:93:0a:
ff:94:26:ea:b4:57:f7:54:56:ef:56:69:b6:9c:b4:
a5:73:1d:b0:b3:bf:a6:b0:f1:9c:3e:2a:15:fc:5e:
a2:96:01:2a:14:55:b9:c7:c3:5f:c3:e6:21:1b:ca:
08:bf:68:fe:9d:75:bd:2f:49:22:d3:60:35:ab:5b:
05:1d:b2:9e:f9:7f:15:25:02:15:9f:3e:5e:79:c9:
e6:56:3e:49:15:f5:54:44:5b:fd:35:4a:ed:91:d3:
41:71:5d:86:49:63:9c:6d:af:53:4e:54:98:93:ca:
4f:35:de:94:52:4c:16:62:aa:15:02:48:1e:4f:c4:
39:2f:fb:0b:50:7d:94:b0:bd:99:f4:10:50:61:40:
81:f4:f4:39:33:e3:f2:29:44:8e:b9:8c:31:fb:b1:
54:15:18:c7:3d:61:24:67:a9:27:c5:40:2f:29:70:
4c:64:68:85:c6:e8:d2:25:91:dd:e9:16:54:06:6b:
b5:d9:c5:bf:46:e9:0e:de:f0:81:8d:2a:43:b4:a7:
c9:9c:a4:ce:5b:6b:97:0e:7a:fc:c2:f1:fe:ef:a7:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B1:1D:02:3D:06:F4:70:8C:40:70:DD:0A:38:F1:01:96:CC:A9:68
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:7d:3e:c2:fe:59:e6:8c:14:c7:b3:75:c4:44:22:e2:c3:fb:
58:8a:5f:90:1a:c1:66:ae:12:b6:44:12:cb:28:8e:a2:c2:c0:
b4:b2:da:7a:0c:05:54:cf:ec:fe:64:78:d6:5c:4a:15:f6:1f:
76:5e:df:c0:d7:04:aa:ab:d0:d0:83:c2:cb:b7:16:a8:e4:89:
02:2d:07:f4:7e:de:77:6b:a1:dc:53:8d:44:ac:02:dd:78:44:
35:36:7f:0e:46:ee:db:10:1a:a4:cb:2f:3d:b5:e9:b6:0d:6b:
e7:f0:8a:af:3e:1c:c9:b5:c3:9c:3d:ab:0c:e7:49:21:ae:9d:
ae:e7:3f:30:2b:8c:5b:0c:e8:d9:d9:d6:7d:a8:8c:fa:8b:7f:
fb:13:92:59:13:1a:a3:c1:9b:a9:2d:54:c9:c1:c2:28:42:d6:
ec:6d:d4:3a:c4:09:09:5d:cc:ae:cf:3a:6d:3e:2f:cb:0d:72:
85:10:d0:2e:ce:0d:ca:70:3c:44:b4:81:63:9c:96:64:ce:9d:
a7:f0:fe:1b:07:45:cd:91:fd:6c:1d:8f:c0:86:17:4b:a6:6c:
62:bd:32:27:3b:82:62:33:dd:51:e0:26:c1:ee:8d:b9:be:ce:
2f:90:4a:83:90:eb:62:82:ae:ee:e0:d6:67:d2:6e:7e:38:27:
8a:a8:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:02:01 2026 by rpki-client