Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: p9aLPOUAzw0RKFdVECV6c/r/FojxdDc2de8e6CQqelM=
Subject key identifier: 81:1A:17:AB:D8:DB:8B:1C:49:A3:CE:FD:A9:A3:B3:C7:D1:48:7F:06
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 01A0902062B06114F9896E470226535E30C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 14A4
Signing time: Fri 11 Sep 2026 11:00:36 +0000
Manifest this update: Fri 11 Sep 2026 11:00:36 +0000
Manifest next update: Sat 12 Sep 2026 11:00:36 +0000
Files and hashes: 1: BpvKKP8EHYFnUrzt21TAjaKhVyY.roa (hash: BVcIxns5J1UEyy8KjfhVvJrapP9On5m6pyzg2XcZJHA=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: V+bjecm0wK1OxMgNSjnQxnbvr/NzkgroqzV2gYnTSVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:20:62:b0:61:14:f9:89:6e:47:02:26:53:5e:30:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Sep 11 11:00:36 2026 GMT
Not After : Sep 12 11:00:36 2026 GMT
Subject: CN=811a17abd8db8b1c49a3cefda9a3b3c7d1487f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:c7:61:31:8b:96:c0:0d:ed:a2:db:01:bc:
3b:ed:9b:0d:ca:a2:c3:01:f4:b8:51:ac:c3:7a:36:
9b:8a:44:e5:b3:f2:e6:fa:de:bc:da:5a:f5:13:8e:
44:ed:cf:de:de:ab:51:c2:0d:67:97:c6:d9:6a:96:
66:a0:51:57:9e:a1:f6:99:4c:d7:9e:4e:43:cc:6e:
03:6e:5b:d8:31:0a:a4:06:5c:3e:ad:71:1e:57:49:
66:82:59:0b:1d:5a:91:aa:53:5e:6a:02:30:3d:0b:
f2:ce:4f:0d:16:3b:f3:e7:6b:54:e0:36:c8:19:1d:
41:28:5c:80:6e:ec:33:a7:d9:33:7d:c7:79:62:b8:
e7:bc:a2:01:e2:09:19:8f:08:e0:72:44:50:9b:d7:
dd:d1:39:37:ee:59:4d:8a:45:f6:b6:3f:ed:99:63:
56:f7:d3:a8:20:f2:71:e0:29:8c:b3:34:54:9e:94:
8f:02:e3:b3:76:54:62:e5:64:ca:e0:27:04:f3:a5:
36:8f:a9:a5:56:24:3a:1d:89:1b:bc:f1:89:f8:1f:
0e:ae:75:80:45:5e:fb:09:ff:8c:2f:92:ed:71:fd:
78:34:0b:58:67:e2:e7:ec:f1:90:5b:4a:c3:d0:5b:
8a:74:6f:89:0d:92:94:f0:9a:7d:4d:c6:21:3f:65:
2f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1A:17:AB:D8:DB:8B:1C:49:A3:CE:FD:A9:A3:B3:C7:D1:48:7F:06
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:67:3f:39:ef:be:c6:c8:b6:e4:07:4c:ff:30:b5:f2:9c:aa:
00:04:57:d3:21:aa:02:49:68:d2:57:2b:05:3b:fe:42:a8:94:
e8:f6:e5:b7:ec:0e:a7:ce:b9:3c:24:80:52:14:d3:6a:16:6f:
7f:ec:72:ee:33:f5:3f:65:25:7e:a7:c7:53:da:81:ff:93:05:
9f:53:4f:f1:f6:8f:98:7b:39:a9:45:bf:e9:98:cc:30:ed:4c:
00:20:c9:a0:80:14:cd:33:56:1c:d2:dc:2f:f5:f5:e4:d9:9b:
af:90:f5:c4:cf:eb:ca:82:44:4a:45:52:e5:95:06:67:d1:91:
61:3e:4f:51:91:31:0f:ae:ba:b1:29:0e:43:9b:0f:ab:82:2f:
c5:a5:83:be:cf:6d:0d:ed:44:0f:ac:cc:05:0a:2a:28:35:36:
40:80:53:22:ae:47:14:d2:02:03:93:a6:ae:13:26:0f:ce:38:
85:2b:14:f6:0b:81:fb:64:b6:25:80:74:e6:15:0e:be:2c:7e:
a6:a8:b1:7f:2a:99:76:a6:f8:1d:3f:c4:f6:9f:e4:80:b2:63:
25:df:41:02:14:d0:b5:11:b6:a7:c5:d6:47:4e:2b:cb:40:85:
88:3c:c4:46:81:57:75:6c:06:90:d9:82:d5:30:d2:eb:1a:08:
ff:03:35:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:09:09 2026 by rpki-client