Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: 3XrNudpzjzPsjKhnuCc18B2f/fetbXnHZuPiiDuzaGc=
Subject key identifier: 58:A6:A4:0F:6A:81:0C:5E:F3:A9:9D:4E:4C:EF:EC:BF:89:E8:09:1C
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A17D050F31852550E654E67AD357F35C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: 0146
Signing time: Tue 27 Oct 2026 11:00:45 +0000
Manifest this update: Tue 27 Oct 2026 11:00:45 +0000
Manifest next update: Wed 28 Oct 2026 11:00:45 +0000
Files and hashes: 1: JzUfyPCrblYvYZwcHotkXzuo84M.roa (hash: RaWC4MhIRtH5SHhLDTD0WzY89DtJnMdUF+N+xwqg6ow=)
2: NBFkwcuoG4U3HPgDvYwZ9lTy41U.roa (hash: DUbOSdoP+Ir4xH3Jxtk9RRrHHKm89UKLvuya1GniYUE=)
3: jLoAADJ5Gs74uK7H-JMHbC6vQ6k.roa (hash: 9R+2Qe90idvHqjNj/7kJnuzpi6kaHQ700oIpbDO6G2U=)
4: qFAp9vwtBvnM0TAN1d2-KFx1frk.roa (hash: os8SWww/ujG1WxOzifi0QqtVtj4TDuro/d64iAaXdcM=)
5: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: 9sfvoPONXEgbl5DNmhXO1zR28sROT5yDMsyQNftZm5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:0f:31:85:25:50:e6:54:e6:7a:d3:57:f3:5c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Oct 27 11:00:45 2026 GMT
Not After : Oct 28 11:00:45 2026 GMT
Subject: CN=58a6a40f6a810c5ef3a99d4e4cefecbf89e8091c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:82:0b:37:ca:d6:b4:2a:58:43:5e:3b:d6:7f:
47:ad:b2:70:d9:bf:e8:b1:b2:1c:b8:0b:49:af:b9:
d0:ae:58:b1:d1:01:a8:48:e9:08:5c:03:8d:b5:d2:
6e:65:bf:07:79:0e:4f:4b:82:48:31:c3:80:90:33:
2d:86:19:c2:b5:db:14:5e:45:19:cc:2e:4d:48:ac:
65:12:49:77:00:8c:09:42:83:35:6e:cf:03:20:fb:
17:7e:95:68:c8:93:31:4a:20:d4:8d:f6:a2:e0:7e:
ce:6f:99:31:41:b3:80:64:63:28:38:2f:eb:ff:e2:
12:e1:9e:da:01:00:38:10:bd:bb:af:fc:a7:2b:a6:
22:49:8f:1a:9f:07:6e:7b:3c:f7:17:77:bd:36:d9:
a4:bc:79:64:cb:3a:e9:04:b6:80:ef:5c:e1:9d:7f:
db:cd:ac:4f:a3:97:39:01:01:cc:1e:f5:26:47:a3:
1c:c6:23:6c:9d:1a:59:60:87:8c:47:25:10:3c:6f:
cd:ab:b8:f6:23:99:75:b2:37:6e:ba:57:d0:b2:7e:
d8:9b:13:41:b5:86:b5:53:e1:e6:6b:7b:f9:35:db:
d8:9d:7d:d1:7a:3f:b4:c4:a4:73:c7:38:e6:f9:37:
1a:80:cd:57:e8:4e:b4:60:3c:c2:3d:94:93:42:ad:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:A6:A4:0F:6A:81:0C:5E:F3:A9:9D:4E:4C:EF:EC:BF:89:E8:09:1C
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:72:1b:b6:73:d7:eb:b5:d7:c2:3c:44:d1:a7:1c:8f:13:f8:
60:f5:69:03:40:2a:46:8c:5a:f2:8c:66:d1:ed:81:07:7e:70:
2b:f3:5d:63:50:4b:70:a8:c1:6e:14:b1:24:11:24:aa:0c:5f:
b6:68:fd:4a:4d:7f:ca:88:35:af:d2:c8:81:03:80:7f:d6:12:
fa:ea:49:91:1f:f2:23:d8:fd:6b:b3:be:95:c5:d5:19:cb:d5:
f2:d0:39:16:38:40:81:d1:8f:07:78:5a:b5:48:28:8a:74:ef:
94:d4:0c:25:41:a1:de:ec:90:0d:1a:8b:c8:fc:81:e2:51:7e:
27:82:57:23:5b:64:10:6d:b9:5c:bc:75:05:e5:ab:53:4b:a1:
27:63:fc:33:82:5c:bf:1d:87:a9:a7:1d:76:55:20:e2:3e:ba:
93:8c:6f:1f:08:51:ee:13:44:32:9b:14:6f:37:27:d5:1f:ee:
2d:3b:c9:47:9d:a4:61:83:a4:f2:67:09:8c:22:d1:0b:b9:57:
f0:e0:b2:55:af:71:46:00:8b:ad:fe:f9:8c:95:d3:9d:43:0a:
fd:c8:1b:73:26:bc:fa:1e:62:f7:99:d3:2f:24:56:aa:c8:32:
99:2c:6a:c5:ab:40:7b:35:67:b3:c6:e8:dd:d8:fb:5b:49:d0:
87:39:39:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:45:16 2026 by rpki-client