Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
File: unCBZs7wN1WvaGaB95MfjVe6jsg.mft (raw, json)
Hash identifier: JYlUUye9AwtI41BQ+wTw+jr4ibTFGsKVEp+lvsEo5l8=
Subject key identifier: A0:2D:21:05:CB:E2:6B:F6:48:45:D1:00:2C:B6:9F:E0:54:98:FC:42
Authority key identifier: BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
Certificate issuer: /CN=ba708166cef03755af686681f7931f8d57ba8ec8
Certificate serial: 01A17FD05AC33C75E093AB8DDD866B3D9F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
Manifest number: DC
Signing time: Wed 28 Oct 2026 00:02:03 +0000
Manifest this update: Wed 28 Oct 2026 00:02:03 +0000
Manifest next update: Thu 29 Oct 2026 00:02:03 +0000
Files and hashes: 1: pE-Dh8alv5vN2ET0F-GtZ2bFSSg.roa (hash: AwQf+/zNLpDriXjSh7WcAWIIEv/q4fP/dqqhXPd5R8U=)
2: unCBZs7wN1WvaGaB95MfjVe6jsg.crl (hash: yZ7chmwYCaymvWdP/d4cKbFuchVmN+/ziDh2J3UxxXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:d0:5a:c3:3c:75:e0:93:ab:8d:dd:86:6b:3d:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba708166cef03755af686681f7931f8d57ba8ec8
Validity
Not Before: Oct 28 00:02:03 2026 GMT
Not After : Oct 29 00:02:03 2026 GMT
Subject: CN=a02d2105cbe26bf64845d1002cb69fe05498fc42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:2e:d5:a3:8f:11:3c:97:0d:ec:d2:3c:0c:
19:9d:23:f4:61:cd:50:c2:95:97:6b:a2:84:5d:f7:
b4:f3:77:04:fc:84:f7:9a:f2:6f:c1:02:24:0c:b9:
0c:b8:53:27:3d:05:bd:eb:23:0e:bd:50:b2:12:38:
16:13:fb:09:b8:38:99:b7:4d:ab:ca:ad:0e:58:7c:
5a:b6:fb:55:cb:ca:8c:fb:f5:7d:a9:b0:cd:9c:4d:
b9:38:5c:4f:cd:8b:cb:11:ef:2e:e1:ff:d4:f4:82:
17:83:90:e7:68:85:62:52:ab:08:8d:66:8a:a2:96:
10:02:d4:13:e8:26:e9:ff:51:fb:59:59:44:5d:44:
02:10:27:f1:93:3d:c4:87:8e:ca:4c:5c:0f:15:45:
f8:5e:42:ab:1d:e3:d9:4b:08:cd:a2:cf:af:95:85:
8e:ab:4d:bb:f4:db:29:80:50:6d:ff:f0:10:6a:3a:
43:7b:c0:02:30:eb:f8:66:cd:66:d8:75:8c:53:74:
f7:13:80:f9:0e:40:62:ce:ea:94:32:80:ec:76:8a:
87:36:78:1c:56:71:3a:84:67:c6:f5:e5:f1:6a:1d:
ae:38:14:24:06:db:35:54:85:b5:a3:5b:cb:75:c2:
a5:39:3f:d9:da:9a:f6:76:b1:4b:70:a8:bc:36:c7:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2D:21:05:CB:E2:6B:F6:48:45:D1:00:2C:B6:9F:E0:54:98:FC:42
X509v3 Authority Key Identifier:
keyid:BA:70:81:66:CE:F0:37:55:AF:68:66:81:F7:93:1F:8D:57:BA:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unCBZs7wN1WvaGaB95MfjVe6jsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d532ca-0c15-4641-9fa5-5080d1b946fb/1/unCBZs7wN1WvaGaB95MfjVe6jsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:be:90:99:13:13:82:56:10:18:f1:38:66:44:50:07:1c:3b:
27:96:63:da:05:87:c1:b9:b4:af:42:4b:14:40:f8:b8:9a:f1:
a5:07:eb:96:94:32:3f:78:63:f7:4f:d9:2b:47:1c:6f:69:25:
9f:aa:bd:47:5e:2f:f3:46:03:f3:be:64:b9:56:5b:4e:61:f7:
f2:e3:cb:16:7c:b1:71:f4:fb:0e:89:bc:1b:b4:f9:c9:06:4f:
9a:74:a5:b2:f0:8c:30:67:09:4a:2a:c2:f9:8c:bd:4b:b7:ee:
51:30:7f:cb:0c:3d:80:9f:49:a4:5e:63:35:e1:8b:19:a3:40:
87:cf:26:66:10:f5:79:60:6f:f2:a5:17:4d:7f:92:c7:ed:c5:
7a:25:b7:69:da:95:17:ea:b2:a2:c3:24:f5:5c:9f:62:8c:f5:
6c:03:14:a0:e7:55:00:bd:27:32:7c:b2:7e:a4:9c:35:aa:c6:
51:d7:31:e3:e1:41:4b:de:95:11:27:b8:9a:45:9b:89:05:bf:
0f:38:a3:39:f3:50:63:e4:28:0d:13:51:19:a0:55:94:a1:03:
eb:2b:8e:19:04:8c:fb:d0:d8:2c:0f:83:cb:86:f4:9a:0e:bb:
bb:99:bc:69:a0:3e:12:1d:2d:fd:11:38:48:11:8b:a4:d6:8e:
f1:6b:4f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:12:40 2026 by rpki-client