Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: MZLdxQ2kxFf+s9lYc0o0+JO1Q/UyPerfQcPWmG9/bck=
Subject key identifier: 35:B5:40:52:D7:87:75:D1:66:11:E8:C9:32:24:E5:7B:E4:54:A9:37
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 01A12FC610D2626DC583844EEB38AA323263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 10B9
Signing time: Mon 12 Oct 2026 11:01:11 +0000
Manifest this update: Mon 12 Oct 2026 11:01:11 +0000
Manifest next update: Tue 13 Oct 2026 11:01:11 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: iWxd7K1lJ4iSSByatt5wl/4Z28dUg7pZwTB5L2wFeeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:c6:10:d2:62:6d:c5:83:84:4e:eb:38:aa:32:32:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Oct 12 11:01:11 2026 GMT
Not After : Oct 13 11:01:11 2026 GMT
Subject: CN=35b54052d78775d16611e8c93224e57be454a937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:83:8c:de:22:4b:54:83:8e:82:e7:77:c7:10:
3b:69:c8:a5:9f:fc:32:f9:1c:52:7f:58:a4:c0:07:
0b:f8:ee:3d:7a:45:8b:15:04:f3:48:d2:f2:60:f4:
36:cc:ed:15:d7:81:3f:bc:5b:9b:01:e4:24:4e:4e:
75:24:b1:c7:75:de:b7:5d:e0:5f:a2:ad:3c:e6:37:
38:c5:91:80:24:e6:82:a9:37:8b:6f:5f:f6:9d:b3:
a2:b9:45:f2:75:1d:30:a5:ae:de:b6:51:58:72:6b:
39:a7:e2:48:9e:71:3e:33:18:eb:ce:24:2b:98:54:
2d:e4:88:a3:6d:68:14:64:bb:e9:ef:fd:e6:85:da:
45:9d:20:54:4c:73:00:a0:a6:04:72:b8:fc:db:92:
c3:4b:2a:16:90:ff:1b:d9:84:95:6b:3e:62:ed:0a:
3f:d4:b4:4b:90:f0:24:f5:17:66:f7:4a:32:e8:7e:
24:a0:fe:f5:a5:af:f6:b5:ad:e1:52:b6:59:0b:f9:
d9:4d:94:ca:88:c6:a0:d9:01:ce:dd:c0:ab:e8:09:
ed:9f:e0:fc:4b:74:79:b2:7c:a6:79:d4:d8:0e:21:
2d:14:f6:4f:e3:c3:ed:43:38:67:8f:7d:ad:9b:7e:
7d:b6:3d:99:09:19:71:3f:df:17:dd:fc:4d:b5:2a:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B5:40:52:D7:87:75:D1:66:11:E8:C9:32:24:E5:7B:E4:54:A9:37
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9d:8a:25:d4:e2:72:7c:63:c3:de:1e:96:5e:97:c4:48:cb:
9d:82:1a:64:a2:05:f8:6b:5c:67:a5:80:aa:16:95:f1:46:40:
56:59:c0:a8:da:99:fc:79:09:2b:28:63:68:73:00:c5:bc:04:
cf:2c:5d:a0:3c:a0:c0:fd:d7:48:f3:92:c9:93:6c:84:ca:b2:
71:17:15:eb:5d:07:d5:01:10:bc:61:27:66:3a:3c:6c:49:c5:
18:e1:b3:96:2c:09:1e:73:ee:c7:4a:15:9f:9a:b4:31:35:bd:
cb:5f:fb:3d:ba:d4:b7:8c:34:d8:c8:3f:8b:bb:b0:1c:71:d4:
0f:2d:2e:54:d0:b5:93:10:5c:42:e5:23:1a:5f:13:53:1a:47:
97:67:b6:11:9a:82:03:67:1b:a7:95:9d:68:89:5b:fa:9e:a5:
d6:4c:30:37:14:91:c3:bb:83:2a:43:eb:d2:94:7e:73:3f:a1:
e7:b0:7f:b8:ed:53:03:91:ae:34:c3:27:7d:53:1d:93:54:ed:
a2:2f:9e:c5:d7:eb:90:2b:a3:bf:30:af:cb:90:82:a8:c2:86:
6f:11:1a:a9:78:9d:6e:1a:8d:04:c5:78:07:54:eb:aa:c4:19:
e2:a2:f7:c2:f4:7b:ce:98:8d:69:a1:f3:15:c4:cb:6e:db:f8:
43:59:3b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:24:37 2026 by rpki-client