Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: YxPv1YUDFk8Wxc3gkS+ggHBtjyhtmiPt27uUdvx3uNE=
Subject key identifier: 12:07:EF:26:F6:BF:4B:81:CF:D5:34:03:44:81:F1:C4:58:1C:6C:85
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 01A1777088C50E5ED3DF9D280F723EDC459A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1AC1
Signing time: Mon 26 Oct 2026 09:00:26 +0000
Manifest this update: Mon 26 Oct 2026 09:00:26 +0000
Manifest next update: Tue 27 Oct 2026 09:00:26 +0000
Files and hashes: 1: kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa (hash: o5DgZsV413bg/omkWA7yGgiwOhEayAL+iXDGxDZd72U=)
2: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: y768f8CJU40wtnF0ZEJAmTsHVNKVDKo4FUgwWJWTLBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:70:88:c5:0e:5e:d3:df:9d:28:0f:72:3e:dc:45:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Oct 26 09:00:26 2026 GMT
Not After : Oct 27 09:00:26 2026 GMT
Subject: CN=1207ef26f6bf4b81cfd534034481f1c4581c6c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:65:14:3f:08:bf:f0:6b:15:a3:51:e7:35:
6f:93:25:50:e1:45:76:bc:bd:62:ea:f9:c4:fa:fa:
3a:b3:5d:88:2e:17:90:e7:e4:9e:b7:53:aa:c5:29:
f8:45:df:0f:e3:b8:6b:ca:8f:1a:d0:75:5d:6a:30:
71:74:c7:a1:68:9f:d6:d7:93:bf:35:ed:2c:18:b6:
3f:8c:37:9d:81:ba:f1:ce:f4:6c:7d:9f:bc:00:9d:
e1:36:db:c2:a7:2b:8c:2f:2d:5b:af:af:3f:99:d8:
1c:d7:07:d9:16:d0:40:da:cd:ab:d1:6a:77:0f:ec:
6f:60:58:93:d8:87:0b:1a:24:fa:3b:e1:66:2d:d3:
9a:cb:70:af:ab:e2:bc:90:16:ce:27:06:5a:fd:f6:
7d:2c:d9:29:33:b4:30:b0:11:df:a9:f3:c3:92:c8:
b7:07:fc:52:3f:d0:df:76:37:02:cb:f0:bc:0a:0e:
0b:09:67:14:1a:c9:31:c1:25:9f:c3:5c:93:84:75:
33:a3:1f:2b:32:ea:f2:24:68:a3:4b:e5:78:df:aa:
8b:d2:2a:5a:47:cc:c1:bf:f1:0c:b4:ba:94:63:92:
d8:80:21:1c:b1:c3:f9:31:30:3c:f1:a2:8f:eb:b1:
52:74:40:fd:72:f0:ff:14:eb:23:49:61:f3:c5:cb:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:EF:26:F6:BF:4B:81:CF:D5:34:03:44:81:F1:C4:58:1C:6C:85
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:97:8b:46:ac:07:bf:c8:ee:61:04:31:5e:58:88:2d:2e:9f:
a2:08:05:52:a6:50:06:10:16:e0:f2:60:d4:74:40:20:53:e9:
74:55:6e:0d:76:17:00:1a:e1:10:d4:dc:54:28:80:0b:de:89:
36:9b:79:6f:d2:d3:19:3e:fc:56:dc:82:a5:2d:38:5c:73:41:
1b:68:bb:93:26:6b:91:a6:ef:d2:01:d5:72:49:b5:b1:b3:af:
6f:41:43:fe:97:d0:70:8c:b4:af:9d:0b:85:5e:01:9a:5c:ef:
c8:6e:8e:40:ab:ea:a4:c3:71:20:12:9c:9b:f9:5a:a9:d9:19:
f7:3d:93:8d:44:5d:10:14:35:41:14:82:ca:08:80:d4:2e:f1:
94:f0:09:f7:23:b7:f2:d6:3f:79:59:d0:f0:29:22:49:7a:b6:
9c:43:11:ba:97:e7:0e:c1:85:b0:10:61:ca:28:45:5b:56:3a:
9b:f3:b8:fd:29:54:57:d4:13:dc:4d:f3:38:a5:24:ed:17:77:
93:6d:27:6c:87:7c:72:4e:9c:0e:7a:19:e9:54:b2:91:a8:9a:
32:df:69:7f:b6:89:92:ce:3c:4d:7c:9d:9f:02:51:09:24:49:
ba:f6:15:12:eb:6f:1a:3c:3e:8a:3e:a9:aa:43:1e:54:7b:f9:
ea:27:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:03:47 2026 by rpki-client