Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
File: u_ZiVRjeFxdQ353R3d5c5PATUUs.mft (raw, json)
Hash identifier: GbXv63w5RelsX10j7SE7ZI3ioqkGAxeNbhBhxRFYziE=
Subject key identifier: 59:D7:A4:4A:BB:19:18:F9:26:61:73:A1:64:59:27:F8:BD:A9:6B:44
Authority key identifier: BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
Certificate issuer: /CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Certificate serial: 01A0F11E69BECD1231AA51AB296D844B0A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
Manifest number: 88
Signing time: Wed 30 Sep 2026 07:01:37 +0000
Manifest this update: Wed 30 Sep 2026 07:01:37 +0000
Manifest next update: Thu 01 Oct 2026 07:01:37 +0000
Files and hashes: 1: A26-lasbV2k5M75rwTYmuN9_3do.asa (hash: Sun6EI7e8A+FFJyQElrNlyyAYtlzT8QGKplzHnPtD4g=)
2: r9sOkUJSTIYwYByOsBG7rQ5fUU4.roa (hash: 6XJeDwvqeUvD80Gd8Az6ZX6d/AoW+pC7ZiXXSru7U5o=)
3: u_ZiVRjeFxdQ353R3d5c5PATUUs.crl (hash: OEG3w3BYoUXSXy5+RJHhuS9af/5+WYkZXVb/vqCtJJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:1e:69:be:cd:12:31:aa:51:ab:29:6d:84:4b:0a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf6625518de171750df9dd1ddde5ce4f013514b
Validity
Not Before: Sep 30 07:01:37 2026 GMT
Not After : Oct 1 07:01:37 2026 GMT
Subject: CN=59d7a44abb1918f9266173a1645927f8bda96b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b5:45:07:6d:8c:3a:0a:67:ff:fd:13:d5:cd:
3c:ec:cf:66:67:7e:79:b1:5b:ff:e2:df:f8:1c:76:
fe:76:73:af:3f:5f:04:86:3c:65:31:c0:0b:8e:16:
9c:63:c5:f6:92:73:9c:c3:cb:0a:d2:e3:17:cf:d3:
3d:50:e4:2d:36:44:a3:e6:90:3f:fb:69:03:4e:df:
b3:55:9c:82:bb:e4:80:e7:fa:c1:62:26:02:e4:da:
ad:ec:4c:1f:ef:7c:89:b3:6b:72:d8:38:36:ce:31:
5b:89:5c:e7:26:22:6b:d6:6e:58:d8:a2:9b:b4:9c:
de:35:2b:17:e7:0a:99:f1:6d:bf:dd:56:b7:31:e1:
b1:c0:8c:d0:1f:2b:5e:47:17:31:88:f1:96:46:8c:
99:66:0f:17:0d:75:b6:b5:97:bc:62:f2:e6:01:15:
a1:a8:c0:eb:86:be:c8:d0:a7:79:67:38:c4:c3:6b:
41:d4:29:97:ec:74:c0:53:14:a4:7b:74:2f:6e:ea:
4a:a2:99:e8:80:ab:19:66:67:64:a1:a8:6e:19:25:
b0:fc:2b:ab:bc:be:72:ec:44:2b:b1:3c:9b:af:a0:
4e:c6:c6:b7:88:52:49:d8:19:30:89:f6:a8:f1:eb:
ec:16:8d:b2:6c:a8:25:20:0f:6f:35:40:ce:dd:d6:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D7:A4:4A:BB:19:18:F9:26:61:73:A1:64:59:27:F8:BD:A9:6B:44
X509v3 Authority Key Identifier:
keyid:BB:F6:62:55:18:DE:17:17:50:DF:9D:D1:DD:DE:5C:E4:F0:13:51:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_ZiVRjeFxdQ353R3d5c5PATUUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a677d8-4ef9-4e93-b019-14fc804d353a/1/u_ZiVRjeFxdQ353R3d5c5PATUUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:17:63:79:c6:5c:fb:d1:94:99:db:a1:42:89:8a:ea:44:77:
57:2d:ed:2a:f9:78:a6:9f:0c:17:bf:9b:1a:12:b2:4a:a8:55:
ba:61:da:a4:d9:f5:22:0c:11:29:69:2e:9f:74:e4:50:00:d6:
7a:ba:7c:60:67:d3:c1:f0:71:01:8c:38:f2:66:b2:33:51:a5:
70:0d:a3:c0:07:59:e8:67:64:53:8a:53:98:b5:ea:e5:ae:da:
cb:bc:17:5a:4a:00:ef:05:83:54:d5:f8:a9:eb:5c:2f:ba:b3:
49:1b:b3:f6:8c:72:cf:42:4a:af:24:d7:91:3d:d0:1c:25:61:
b4:90:65:dd:d5:8e:87:2d:d2:59:35:ad:0f:f5:c0:07:87:cc:
1b:a6:2e:3d:74:f0:81:c4:22:73:07:d5:2d:ec:71:1e:d2:0e:
f1:2f:c7:df:3d:78:93:7d:58:06:14:e7:a8:e8:1c:70:80:ec:
06:5f:c0:cf:b8:0b:d1:81:65:ca:2f:67:b9:3a:d7:3b:b0:92:
34:90:97:78:59:a8:43:c8:d5:11:51:e6:9c:1c:0b:6c:44:4a:
c2:80:51:97:f8:b3:88:42:52:80:9b:7a:27:af:e8:77:7c:8a:
ee:3f:0a:f8:89:42:5b:dc:88:9f:ff:a5:21:bb:00:7e:ec:84:
87:60:53:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:04 2026 by rpki-client