Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
File: uByWUlV5h6KgWAzFxl42RrAdo7s.mft (raw, json)
Hash identifier: QqdamK3f2N0twQFLebU2quPvTBk/m6Ykt7PQuc0w/wk=
Subject key identifier: 9D:8B:B9:DA:9F:26:78:51:39:37:D9:AB:6C:57:DA:2B:88:29:FF:3A
Authority key identifier: B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
Certificate issuer: /CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Certificate serial: 01A08AFA4222BC2E1ACE7B9D42EEDAE5AA19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
Manifest number: 1167
Signing time: Thu 10 Sep 2026 11:00:51 +0000
Manifest this update: Thu 10 Sep 2026 11:00:51 +0000
Manifest next update: Fri 11 Sep 2026 11:00:51 +0000
Files and hashes: 1: C4QPEpSpw3t5fGPgvzarVGPFeoU.roa (hash: sZmWqujKvyfknDjomNZFVZ00FVqvptB5ow8TW0Spc+s=)
2: uByWUlV5h6KgWAzFxl42RrAdo7s.crl (hash: Eao+vNWD9zoRtxVPB+HD9X4yA7dZUlW9iTJNtbwVZYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:42:22:bc:2e:1a:ce:7b:9d:42:ee:da:e5:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81c9652557987a2a0580cc5c65e3646b01da3bb
Validity
Not Before: Sep 10 11:00:51 2026 GMT
Not After : Sep 11 11:00:51 2026 GMT
Subject: CN=9d8bb9da9f2678513937d9ab6c57da2b8829ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:da:ac:ac:6b:11:cb:b8:53:9b:76:89:c7:1b:
cf:f2:1d:01:54:47:96:4b:36:04:01:3b:aa:18:33:
dc:19:f8:ad:6b:2d:5d:b2:8f:2b:c0:91:42:34:40:
5c:d2:f0:16:83:65:d5:13:35:3c:59:83:11:43:7a:
03:fd:fb:2b:f7:82:23:41:82:b0:f2:2d:5d:fe:19:
f1:58:09:1b:08:05:67:dd:23:06:81:9e:b9:f7:47:
5d:da:a9:a5:73:bf:12:53:34:ea:62:d2:e7:27:7b:
de:16:c2:3e:87:42:b7:5b:e2:c7:7f:99:3f:6c:88:
16:4f:08:28:68:53:14:f7:8d:16:db:8f:4c:04:c7:
80:e4:7a:c8:f9:81:46:b5:f3:ee:0d:38:df:22:e1:
ec:dc:c6:07:19:cb:d8:d1:7b:15:3f:43:ac:5d:67:
b9:45:13:fb:bc:83:69:7c:65:1f:ff:cf:c4:0b:eb:
41:cd:c1:d9:8e:42:41:1c:4c:33:80:71:de:d8:06:
f8:68:26:ab:cc:d8:13:95:a5:f1:b7:12:e8:24:a7:
b0:cf:b5:b0:c6:48:29:b6:3f:04:0f:8f:20:56:8c:
55:39:93:27:57:5a:ac:ac:39:56:b9:31:e3:1c:1a:
49:ae:a7:fe:c8:89:af:d0:20:77:4d:65:98:8e:4c:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8B:B9:DA:9F:26:78:51:39:37:D9:AB:6C:57:DA:2B:88:29:FF:3A
X509v3 Authority Key Identifier:
keyid:B8:1C:96:52:55:79:87:A2:A0:58:0C:C5:C6:5E:36:46:B0:1D:A3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uByWUlV5h6KgWAzFxl42RrAdo7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aab054-ed50-4aa6-acee-fa0d2e47e6f1/1/uByWUlV5h6KgWAzFxl42RrAdo7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:35:2b:36:9f:32:a1:56:69:59:64:7f:dc:97:1d:23:0b:
c5:28:df:15:fc:71:41:55:39:13:e4:d4:91:88:b6:71:be:95:
e5:91:ce:67:fe:c8:33:bb:6d:49:2b:04:8e:9a:65:01:d8:39:
44:c9:1d:21:e2:f7:c6:fa:03:03:58:34:1c:cf:ae:79:ea:18:
a9:15:5c:17:1e:28:98:1c:3e:5c:f0:53:fd:74:c5:49:98:08:
62:e6:cb:f2:d6:9a:d0:55:ea:3a:7a:d0:fc:b9:ed:9f:d5:c4:
44:9b:53:1f:4e:88:f5:fc:c5:09:bd:37:32:a8:2c:d8:9a:6a:
d0:bb:3f:ee:78:60:52:d0:84:dd:45:f6:d1:d8:50:a6:1a:3d:
2a:96:52:e4:af:8b:ca:d1:96:bb:6c:ba:d8:43:93:66:a4:ab:
0c:5e:e7:64:f9:3c:30:a1:10:01:f9:1c:65:5e:a7:d4:ce:b4:
53:20:18:ec:50:e3:0c:9f:ae:27:f4:4f:f3:85:78:e3:70:76:
b6:c7:f4:7d:82:6f:67:20:55:6a:cb:b7:08:63:29:81:d9:36:
9f:34:01:af:26:21:de:4a:50:35:3e:20:17:43:6d:37:93:2a:
8f:70:80:c9:bb:91:3c:90:36:66:8f:9c:d0:97:05:05:b4:5d:
0c:08:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:40:49 2026 by rpki-client