Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
File: u-kI6KPgpa192pXAYThTfWbqo0E.mft (raw, json)
Hash identifier: lrmnZfJ/qUkAgAp76VzaCcd+njtLZYvRsDz9+1lvrNk=
Subject key identifier: 62:F1:01:D7:85:E8:5E:B6:F4:80:EE:A8:F2:34:39:E9:28:EF:DD:EF
Authority key identifier: BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
Certificate issuer: /CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Certificate serial: 01A189095DF5F6C7EA14714A8CB563CCDFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
Manifest number: 01DE
Signing time: Thu 29 Oct 2026 19:00:54 +0000
Manifest this update: Thu 29 Oct 2026 19:00:54 +0000
Manifest next update: Fri 30 Oct 2026 19:00:54 +0000
Files and hashes: 1: KFQ8j7TUkafguJj4zRekxSOryf4.roa (hash: ggBvTDtfRXdcds5VSU0JdMg1c40E6KC/cP8l9ugy4aM=)
2: u-kI6KPgpa192pXAYThTfWbqo0E.crl (hash: /lN3F8vQlLGDZIqSuvzPscdr8kqKCarQkxNV3xbiTtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:5d:f5:f6:c7:ea:14:71:4a:8c:b5:63:cc:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Validity
Not Before: Oct 29 19:00:54 2026 GMT
Not After : Oct 30 19:00:54 2026 GMT
Subject: CN=62f101d785e85eb6f480eea8f23439e928efddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:ec:08:bd:ff:d6:f5:6f:14:4e:fc:a3:0d:
bf:c7:71:d5:3e:4e:fe:d1:af:93:ce:be:67:45:22:
e7:a5:eb:46:90:a5:2e:28:e6:60:27:9f:f7:f9:18:
1d:5f:d8:92:1d:65:39:01:db:37:bf:55:88:b5:2f:
eb:b5:68:13:7f:39:4d:b7:3a:3f:97:07:48:d2:a1:
89:a7:9e:db:64:b0:95:00:47:ff:84:00:57:b7:e6:
50:b0:c7:8a:e0:28:da:1b:1c:02:82:15:c8:71:c7:
44:82:ca:3b:dc:92:cc:7d:ca:6c:2e:fa:42:a2:65:
8c:2d:c6:c5:bf:9f:46:47:22:a8:3b:c4:11:ee:f2:
15:80:19:25:08:ad:f9:1d:34:a1:e6:63:e8:58:98:
77:fa:42:e5:93:28:1e:94:78:6f:69:ad:96:08:49:
1d:5d:bd:bd:f9:9c:ec:30:48:4c:22:ad:fb:b2:50:
5e:cc:e8:06:7d:47:cb:65:6a:78:76:67:6a:2b:7c:
4c:4b:b0:7b:b2:97:f5:74:01:92:04:fd:93:1c:a5:
2b:ce:9a:71:33:31:5d:87:b1:0e:53:92:d7:d7:46:
c4:51:17:44:10:9d:b7:68:ed:e2:40:2d:50:e3:6e:
24:88:50:06:1f:df:f6:c9:a4:db:67:62:5b:eb:b5:
90:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:01:D7:85:E8:5E:B6:F4:80:EE:A8:F2:34:39:E9:28:EF:DD:EF
X509v3 Authority Key Identifier:
keyid:BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:08:29:0b:df:05:58:07:8b:22:4b:28:9b:62:1f:a6:eb:
6a:24:21:58:56:f4:48:4e:bc:01:23:8d:1d:d7:1e:3e:01:78:
56:a2:9b:1d:f9:c6:a6:a4:c5:32:ae:62:a7:67:08:6d:13:b0:
09:dc:f0:b9:5d:8d:26:ff:92:56:cd:3d:80:07:3c:1a:c8:c0:
a2:57:84:59:bd:d2:32:2e:be:c1:8a:0a:33:0f:b0:26:78:58:
b9:be:a1:05:87:62:99:32:0e:5f:9a:2d:8f:37:d8:1d:19:52:
f8:e2:3f:9d:e5:0d:45:74:d4:4a:c7:01:29:4a:4b:e3:9b:59:
60:3a:8d:0d:02:df:1c:dc:f5:94:57:03:78:c2:b0:83:3c:c9:
54:08:ce:61:19:9d:f1:e9:56:24:a5:03:de:c0:c8:8a:33:96:
ed:e9:b9:30:3c:f4:56:73:46:10:a9:ee:cd:e6:7f:89:d4:86:
23:b7:98:08:c6:64:d7:17:a7:97:c3:74:29:3f:7b:3e:4c:c3:
d8:2a:a0:d7:c0:11:e2:da:ae:a0:f1:d3:11:94:2c:43:79:ea:
1b:75:79:be:2b:5e:42:8c:b8:44:66:0c:f7:0c:75:ac:ac:3a:
c2:f2:48:31:ee:4f:6e:bd:f2:20:33:8a:f4:1b:44:76:9a:e9:
ec:90:9b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:44 2026 by rpki-client