Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: CTE3NP2j7vjoqTjDNa8v2uI/bbRJXvPNYsvsaEVMPrk=
Subject key identifier: 54:66:0C:A5:A6:F5:5D:64:34:16:0C:14:C8:C3:3F:A8:8D:A3:95:8D
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 01A02A6B2127E6793DBD4A7303919BA33B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1A16
Signing time: Sat 22 Aug 2026 17:00:58 +0000
Manifest this update: Sat 22 Aug 2026 17:00:58 +0000
Manifest next update: Sun 23 Aug 2026 17:00:58 +0000
Files and hashes: 1: 6E55Dxslc1xUwoydNHNZM4ZExZY.roa (hash: sNvH8Do1xMuJUTpDkj9TMIXCGe+B5BVTB4O2xk57j68=)
2: RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa (hash: 6bNU9Qy7gfD16SLkxQ7XrFRbn1WRdrTIHlp5cBAhhLU=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: qwCfQP715TptMy+uDKI0mop6dWiHrTSZFCWqkHFUDak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:6b:21:27:e6:79:3d:bd:4a:73:03:91:9b:a3:3b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Aug 22 17:00:58 2026 GMT
Not After : Aug 23 17:00:58 2026 GMT
Subject: CN=54660ca5a6f55d6434160c14c8c33fa88da3958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:7f:36:88:d2:f0:b2:93:f0:62:a5:ae:f4:
25:2e:57:1a:1a:e1:ac:61:e0:7e:1e:33:be:8a:b1:
cd:49:79:08:f7:a5:8c:8c:0d:7f:2b:ed:c5:d3:8b:
a5:98:9d:93:61:da:38:22:57:a3:ea:78:46:fa:eb:
aa:cc:69:13:6a:a0:0b:91:a3:df:07:2c:d1:21:2b:
df:5a:b8:33:6b:e2:5a:47:80:de:de:b2:26:b6:82:
61:f4:1c:af:79:61:45:f3:6e:d9:dd:40:ba:d4:eb:
f7:67:92:6c:f5:2f:c0:cf:20:67:92:73:f3:d2:e7:
92:1a:9e:2d:9c:b6:92:de:c6:3d:16:3a:42:16:b6:
a4:a5:f5:d0:d5:33:60:9f:69:9c:ca:11:fe:54:e8:
15:44:f8:71:eb:55:e6:72:27:83:e4:a4:4c:66:68:
94:0d:a7:7f:89:d2:07:b3:35:1c:f4:18:f7:7d:6a:
cb:c8:c9:58:47:87:24:6f:01:ae:47:95:79:cc:fe:
70:ee:ac:2d:ca:cc:c9:43:29:7a:c0:a3:32:07:d5:
a6:c0:69:5d:75:78:ac:05:94:f8:11:e2:dd:c1:d9:
ec:a5:f6:5d:d6:ec:50:3e:c6:3b:66:04:a8:fb:cd:
66:f9:a4:6f:53:c3:5e:18:27:34:7e:3a:c3:65:1c:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:0C:A5:A6:F5:5D:64:34:16:0C:14:C8:C3:3F:A8:8D:A3:95:8D
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5a:6c:9f:a5:c9:c8:ca:2a:ea:2c:60:34:da:3f:7d:c5:1a:
4e:89:bf:dc:13:f4:fd:a2:95:c8:3a:2c:90:db:ba:5d:05:82:
02:df:f6:17:e8:3c:a3:5b:4b:90:54:ca:e0:27:99:2d:2d:88:
e5:48:0d:6b:7a:37:79:9f:9a:af:44:f5:22:49:95:44:93:4a:
43:1c:b0:72:07:7b:9b:15:e8:96:c3:d1:40:63:dc:63:70:64:
97:2b:b9:5d:aa:12:df:4c:66:b0:57:f0:a3:15:94:c6:f9:50:
68:06:c8:23:b5:ef:5d:1e:6d:07:73:a1:3b:0c:3e:fa:3a:d5:
cb:bf:f3:76:05:eb:fc:ba:12:01:cd:39:c2:7e:f7:26:38:ba:
f9:69:83:dc:be:7e:f4:2c:95:dc:03:a7:33:1f:02:b5:d6:23:
33:c5:a9:8d:bc:ad:eb:d1:d1:a7:34:99:88:77:ab:56:1c:6f:
9a:51:f8:c9:83:ab:48:e9:38:a1:1f:28:fb:84:a7:9f:0d:9e:
2f:51:53:c5:df:e5:1c:2d:7c:19:fc:f6:96:e6:2f:86:64:cc:
4f:40:8e:2e:a1:04:0c:bc:09:12:c2:97:90:d4:ba:56:a7:51:
3b:88:80:57:fd:34:b1:af:d4:64:7e:d8:59:f0:ed:39:84:f9:
58:c2:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:07 2026 by rpki-client