Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
File: udCVzONbOja-8QjvdipiGvRmJiE.mft (raw, json)
Hash identifier: kCnR6ZPTuJWBZUh1E9Wds2OYlPRlK9vLUT36tjnToSs=
Subject key identifier: 98:71:1E:59:32:94:DB:95:5C:A5:2C:6A:90:5C:48:23:8C:D2:94:A2
Authority key identifier: B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
Certificate issuer: /CN=b9d095cce35b3a36bef108ef762a621af4662621
Certificate serial: 01A089B0FC51A01787ECC66B2EC61CE74F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
Manifest number: 079B
Signing time: Thu 10 Sep 2026 05:01:12 +0000
Manifest this update: Thu 10 Sep 2026 05:01:12 +0000
Manifest next update: Fri 11 Sep 2026 05:01:12 +0000
Files and hashes: 1: udCVzONbOja-8QjvdipiGvRmJiE.crl (hash: YUvbEfwNPz5kuMCzJGbEAGphzdpE8iAOsvEr8u+LoI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:b0:fc:51:a0:17:87:ec:c6:6b:2e:c6:1c:e7:4f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9d095cce35b3a36bef108ef762a621af4662621
Validity
Not Before: Sep 10 05:01:12 2026 GMT
Not After : Sep 11 05:01:12 2026 GMT
Subject: CN=98711e593294db955ca52c6a905c48238cd294a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:ea:99:d4:51:ec:a7:14:2a:14:93:dd:81:
c9:61:a3:99:cb:1f:5a:bc:02:bb:67:67:82:7e:68:
30:e7:fe:84:ba:f4:be:1a:47:fd:84:a6:d3:85:9e:
6c:da:12:d7:11:b8:19:9a:94:25:92:dc:d2:e3:a0:
38:e3:ef:2a:01:cc:13:d1:39:dc:11:aa:9e:45:dc:
1c:ae:0b:21:1f:af:26:4b:84:66:c1:92:f4:d5:ec:
c3:38:42:44:88:af:d9:23:a8:21:71:66:65:96:92:
8e:2b:1f:0f:76:d7:be:65:b2:ae:a7:d8:5d:a2:4c:
09:bd:10:f7:57:a8:41:a1:7e:74:b6:77:eb:b9:d8:
02:9b:c0:cc:be:1d:0b:dd:1a:e7:39:f5:1f:6f:13:
d7:3d:75:94:05:0f:e7:6f:bc:5a:6a:3f:d6:58:d3:
9b:cc:26:a4:19:da:e0:40:ef:64:ca:d2:36:15:65:
a2:45:32:f1:6a:20:34:e0:e9:b5:49:63:a3:1f:1e:
9c:05:72:a0:3e:c3:c0:e5:60:3c:75:03:19:cb:b5:
d3:12:4c:f9:8f:25:6d:68:e7:6e:1f:a4:ed:c3:20:
6b:6e:e9:fb:75:69:39:4e:05:5d:1c:75:0e:bd:f8:
f8:5f:8d:81:31:32:7e:1b:fe:89:ca:d6:a5:6c:54:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:71:1E:59:32:94:DB:95:5C:A5:2C:6A:90:5C:48:23:8C:D2:94:A2
X509v3 Authority Key Identifier:
keyid:B9:D0:95:CC:E3:5B:3A:36:BE:F1:08:EF:76:2A:62:1A:F4:66:26:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/udCVzONbOja-8QjvdipiGvRmJiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/281cc2-959e-4192-bdde-8c70bc847bc5/1/udCVzONbOja-8QjvdipiGvRmJiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2b:fa:95:74:5a:00:98:0c:a7:b4:8e:b5:b2:42:96:26:d5:
5b:e3:00:55:ba:91:61:d3:dc:4d:97:4e:36:bb:9c:84:26:2c:
d8:65:65:29:f4:87:cd:56:9b:ea:ab:ee:0f:fa:d3:32:26:86:
1b:74:4e:c2:57:c7:08:cb:e8:86:43:91:d4:72:37:b2:61:ef:
73:3b:ae:07:9f:f4:7a:b8:ee:52:0c:d0:85:73:04:0a:72:13:
4e:c8:5f:a9:6f:48:fa:f7:07:95:12:38:57:41:2f:79:56:f4:
c4:4e:47:51:b6:08:4c:97:89:df:68:af:14:8a:95:ec:ef:2c:
9e:00:ae:69:bc:c1:98:39:25:96:ab:af:62:49:8f:fd:19:ff:
0d:e2:d6:c8:7b:1d:ee:c1:58:2a:92:11:57:81:db:6e:6a:11:
85:24:c3:1e:18:f3:f0:5c:93:80:35:0f:91:d6:50:dd:46:d2:
04:64:65:38:a0:26:de:16:71:4b:93:32:ef:18:49:e6:08:e9:
fb:7c:db:6d:9f:97:39:f6:0c:9e:e2:0c:48:cf:95:16:e3:c4:
a0:3f:b2:74:08:e3:cc:8a:00:c1:7e:c5:e2:49:b1:37:9b:e3:
2a:f1:90:d1:78:c6:8c:2b:6e:ca:21:c3:c9:d3:21:4f:77:cf:
96:5e:8b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJsPxRoBeH7MZrLsYc5083MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZDA5NWNjZTM1YjNhMzZiZWYxMDhlZjc2MmE2MjFhZjQ2
NjI2MjEwHhcNMjYwOTEwMDUwMTEyWhcNMjYwOTExMDUwMTEyWjAzMTEwLwYDVQQD
Eyg5ODcxMWU1OTMyOTRkYjk1NWNhNTJjNmE5MDVjNDgyMzhjZDI5NGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw7qmdRR7KcUKhST3YHJYaOZyx9a
vAK7Z2eCfmgw5/6EuvS+Gkf9hKbThZ5s2hLXEbgZmpQlktzS46A44+8qAcwT0Tnc
EaqeRdwcrgshH68mS4RmwZL01ezDOEJEiK/ZI6ghcWZllpKOKx8Pdte+ZbKup9hd
okwJvRD3V6hBoX50tnfrudgCm8DMvh0L3RrnOfUfbxPXPXWUBQ/nb7xaaj/WWNOb
zCakGdrgQO9kytI2FWWiRTLxaiA04Om1SWOjHx6cBXKgPsPA5WA8dQMZy7XTEkz5
jyVtaOduH6TtwyBrbun7dWk5TgVdHHUOvfj4X42BMTJ+G/6JytalbFT1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhxHlkylNuVXKUsapBcSCOM0pSiMB8GA1UdIwQY
MBaAFLnQlczjWzo2vvEI73YqYhr0ZiYhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8yODFjYzItOTU5ZS00MTkyLWJkZGUt
OGM3MGJjODQ3YmM1LzEvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8yODFjYzItOTU5ZS00MTkyLWJkZGUtOGM3MGJjODQ3YmM1
LzEvdWRDVnpPTmJPamEtOFFqdmRpcGlHdlJtSmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSv6lXRa
AJgMp7SOtbJClibVW+MAVbqRYdPcTZdONruchCYs2GVlKfSHzVab6qvuD/rTMiaG
G3ROwlfHCMvohkOR1HI3smHvczuuB5/0erjuUgzQhXMECnITTshfqW9I+vcHlRI4
V0EveVb0xE5HUbYITJeJ32ivFIqV7O8sngCuabzBmDkllquvYkmP/Rn/DeLWyHsd
7sFYKpIRV4HbbmoRhSTDHhjz8FyTgDUPkdZQ3UbSBGRlOKAm3hZxS5My7xhJ5gjp
+3zbbZ+XOfYMnuIMSM+VFuPEoD+ydAjjzIoAwX7F4kmxN5vjKvGQ0XjGjCtuyiHD
ydMhT3fPll6L/A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:35:45 2026 by rpki-client