Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: dTCcSGr76qJ+Sc5ytOl721iAsj0mg2tk5DD06D/7V8c=
Subject key identifier: 61:EF:0A:C6:DC:75:DA:88:AF:A9:1B:1F:6E:37:00:0D:48:FC:6F:91
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 01A18150420FA430332A8C45DFB224D6D0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 16D5
Signing time: Wed 28 Oct 2026 07:01:22 +0000
Manifest this update: Wed 28 Oct 2026 07:01:22 +0000
Manifest next update: Thu 29 Oct 2026 07:01:22 +0000
Files and hashes: 1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: pvexaoikdQqJ99U5P1p5HydTgfg0lF2+lEilGggb6Lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:42:0f:a4:30:33:2a:8c:45:df:b2:24:d6:d0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Oct 28 07:01:22 2026 GMT
Not After : Oct 29 07:01:22 2026 GMT
Subject: CN=61ef0ac6dc75da88afa91b1f6e37000d48fc6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:bc:03:8c:7c:12:b1:ec:f4:9b:5c:a1:aa:
16:e0:d0:81:77:02:f2:62:5e:51:6b:77:11:70:00:
32:24:6b:20:b9:98:68:f2:56:6d:ec:e9:76:b2:6a:
97:1f:b5:a1:24:5c:28:b8:c3:3a:56:bf:e5:b7:a5:
2c:ba:90:37:3d:a3:bc:5b:ee:cc:07:6f:a7:33:de:
c2:fb:d1:d6:2b:d0:a7:7d:fe:d2:fb:e8:0e:9d:ba:
33:76:0c:1d:9a:12:41:7f:0c:b6:c0:2f:58:66:d2:
4d:e2:51:d3:f9:78:8d:07:9d:12:9f:2f:b0:82:77:
62:4b:76:db:e0:ff:3e:aa:05:fe:b4:c4:fc:97:6a:
cb:2c:ca:3c:70:5a:63:0c:bb:e1:c0:b4:c8:45:5a:
05:1c:54:62:84:89:79:ce:9d:05:31:0d:11:a1:28:
71:89:07:77:2e:98:c5:8e:14:24:40:8d:5d:81:fb:
01:e9:7d:1b:4a:5e:51:92:c1:e3:aa:ef:de:5a:e2:
58:a4:09:f3:f8:e9:84:06:3d:52:52:f0:52:5e:3e:
d5:02:2c:24:6f:6a:92:ae:1f:26:93:8f:da:56:7f:
43:a8:e0:c9:49:f4:f5:cd:bb:b9:e9:4e:b8:84:54:
9d:88:72:a3:07:90:33:92:e9:92:3f:20:03:f9:4b:
dc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:0A:C6:DC:75:DA:88:AF:A9:1B:1F:6E:37:00:0D:48:FC:6F:91
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:e0:d5:c0:c7:af:58:e9:f3:4d:c3:d5:f7:09:c8:f9:78:45:
99:2a:66:1c:74:da:5c:ff:d9:c7:bd:43:85:2d:2f:99:db:a7:
ff:f6:a3:db:97:e6:29:b5:98:d0:70:6f:ae:a2:16:54:b5:79:
70:ad:ea:dd:1c:6b:e4:66:da:7d:b3:81:47:44:ec:33:5f:d7:
75:0b:39:2c:18:00:6e:b6:1c:ae:61:af:b1:5d:42:95:88:bf:
77:42:c7:63:be:5d:31:2b:d1:0b:72:2e:db:40:cd:2e:77:19:
e4:90:04:6f:70:27:e2:89:1a:7b:58:d7:b2:f0:21:41:1d:1b:
ac:02:4d:e4:0c:e0:d5:fd:69:3b:4c:d8:47:1b:03:dc:fa:d7:
f7:2f:98:35:d6:92:eb:46:a4:b0:09:42:1a:e3:86:78:a3:1b:
6e:a5:e3:3e:39:e8:7d:51:51:5d:d0:64:dd:0c:53:5f:3c:cc:
74:0f:e0:7d:f1:1b:9e:31:0d:22:20:5f:a9:ab:f8:6b:9b:8a:
ca:99:ed:47:1f:ee:06:0e:2b:a2:28:92:09:3f:c3:ae:a5:74:
82:08:01:51:0d:95:7a:6e:f6:97:d7:a5:07:2c:89:bc:df:76:
1c:1c:c8:7e:7e:da:7c:51:c1:a8:a5:ec:9a:c1:8d:7a:0e:2c:
8a:10:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:34:06 2026 by rpki-client