Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: mRyJJPDztGeezlferl0yIF/RE0t9Fwm1r1l1KiNqqVI=
Subject key identifier: EA:A3:99:B3:B6:16:1C:37:54:71:12:DE:AE:40:6C:C9:3C:D6:17:D6
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A08BD5A98938D21D423F66C660ABBAFF78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 15:00:30 +0000
Manifest this update: Thu 10 Sep 2026 15:00:30 +0000
Manifest next update: Fri 11 Sep 2026 15:00:30 +0000
Files and hashes: 1: PH_ZKgl0YEGJU7EkBo6yBeC3Dmc.roa (hash: ftUQrFR+3ehEYLFohxpomme6EwAaFtgPBICTDxCfk6I=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: 85edeMVRSsJ11A2XOjdMfG0OjQxm0kgYMZ1Ug7umWz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:a9:89:38:d2:1d:42:3f:66:c6:60:ab:ba:ff:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Sep 10 15:00:30 2026 GMT
Not After : Sep 11 15:00:30 2026 GMT
Subject: CN=eaa399b3b6161c37547112deae406cc93cd617d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:80:d6:6a:e9:0b:b6:a4:a6:08:9e:40:a2:
dc:bc:c9:0d:7c:cf:b7:6a:3e:fe:2a:42:6a:68:59:
6d:ba:4a:05:ad:44:1c:ee:1a:47:72:43:81:40:73:
19:d9:3b:63:df:e4:65:aa:be:92:97:7f:b4:7d:4b:
53:1d:52:22:da:1c:9c:db:f3:25:54:7d:cc:2c:cf:
79:47:24:ae:ef:7c:52:d5:0d:f2:82:53:d7:b4:95:
b4:c6:dd:a8:e6:6c:d9:39:01:95:8b:1d:b2:3a:14:
46:ce:bd:2f:e4:47:8c:3f:c5:11:ef:cf:60:24:81:
6b:f6:59:ad:1f:41:d4:e4:cf:40:28:f8:14:48:51:
eb:1b:88:5a:4c:db:5a:51:b5:6a:7b:b6:22:b7:63:
9a:ea:23:31:19:5f:51:7c:49:84:a6:b9:a6:da:97:
51:60:bf:c0:f5:ec:f0:1a:75:dc:ea:38:c6:90:eb:
0a:d6:7e:4f:3b:3b:35:8f:ff:be:8c:1c:5c:87:6e:
76:2b:34:ee:c8:da:b9:11:6f:bb:18:18:b8:09:b5:
c5:3b:32:de:30:30:2d:89:47:cc:48:45:f5:97:c7:
42:e7:5d:3b:e7:02:3e:4c:e9:26:c1:7c:a2:50:d2:
07:ca:a5:a4:e6:a3:14:3f:82:3d:bd:8f:62:bb:f7:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:99:B3:B6:16:1C:37:54:71:12:DE:AE:40:6C:C9:3C:D6:17:D6
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:cd:e3:4d:fd:d3:2d:60:cc:71:2d:8e:64:a8:e7:84:27:08:
98:c6:a6:d0:b9:4b:d6:64:68:82:06:78:28:de:00:98:56:c3:
90:9c:aa:ac:cd:81:89:43:5d:88:e3:df:93:97:6b:59:19:22:
49:f2:c3:33:7a:a1:82:44:1f:0b:b4:60:5e:21:9c:fa:b4:3f:
00:27:ba:a2:9b:a9:df:85:cc:3f:59:8f:23:e0:15:1f:08:24:
f2:fa:55:18:6b:84:c1:08:56:c7:e6:e5:77:98:a2:db:e9:d5:
83:81:7e:51:60:f7:29:d1:91:9f:c0:8a:0f:b1:95:46:6c:e1:
dd:4e:1b:b2:02:e9:19:de:d7:bf:d7:d7:33:4f:ed:93:9e:9e:
e4:67:81:47:d1:4d:3c:67:4c:7b:c1:95:01:81:58:1b:c9:cf:
11:31:dc:42:e2:f4:d7:28:8c:b3:0a:df:20:cd:85:73:c1:6e:
05:31:46:1d:87:4a:7b:ee:53:bb:8d:f2:39:4c:6e:fb:65:7b:
66:f6:0f:e4:96:b2:3e:fd:e7:ff:e8:3a:0a:02:ab:50:0e:d9:
09:de:ad:0c:89:0b:3b:25:c2:d7:fc:d5:d5:a4:a6:77:89:f1:
50:f0:af:50:d0:57:e6:16:b9:88:c7:8f:1c:13:99:f9:05:54:
69:32:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:18:09 2026 by rpki-client