Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: 9gqR4gjqx89d0aC9FQVzDwHcc/Wcu8F+zsZUepDBnoo=
Subject key identifier: 80:EE:C4:56:9D:69:AF:D5:13:58:D5:98:BB:C7:D8:EA:04:7A:9E:FF
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 01A14CF432FD019CE88A09D60068B4F101A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0F4D
Signing time: Sun 18 Oct 2026 03:00:34 +0000
Manifest this update: Sun 18 Oct 2026 03:00:34 +0000
Manifest next update: Mon 19 Oct 2026 03:00:34 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: MAZEj9QFY8gGFD5OsWIfB9FX9az8Guma1q03XGwlQhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:32:fd:01:9c:e8:8a:09:d6:00:68:b4:f1:01:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Oct 18 03:00:34 2026 GMT
Not After : Oct 19 03:00:34 2026 GMT
Subject: CN=80eec4569d69afd51358d598bbc7d8ea047a9eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:5a:2a:8d:92:36:05:a6:f6:2b:90:1e:ee:
97:13:7a:e1:fa:97:9e:18:19:8c:67:35:4c:e4:90:
61:0e:55:56:f1:50:f8:e6:fa:87:26:70:cd:db:84:
a3:c8:20:88:b6:6f:5c:a4:26:f6:b5:d6:34:fa:18:
2e:23:9c:4a:45:01:02:41:2e:83:1d:37:65:ec:5f:
9e:30:0f:59:6b:32:3b:77:ed:a8:7a:77:c6:10:9d:
2a:aa:02:2b:ae:dd:e6:d4:df:4b:df:f6:46:60:cb:
10:12:3a:ab:fd:4f:66:ff:ad:2a:60:b4:03:74:9f:
ee:f4:e8:96:fd:cd:4e:bc:a6:15:b7:1c:95:77:11:
4f:c0:0d:46:09:af:63:14:1e:e3:a4:74:df:1b:71:
15:47:c0:70:7b:10:12:c6:22:43:93:c7:06:9d:3d:
04:54:19:db:76:1d:6e:ef:9a:eb:95:c3:de:5c:d1:
95:a9:a8:3d:54:36:1f:ca:83:d4:b6:7f:7f:51:52:
bf:e0:9e:0b:e0:49:af:b7:8a:2d:e4:b8:dc:cf:0e:
e0:09:1f:94:85:be:07:fd:0d:92:12:f8:92:34:69:
09:3a:b7:39:70:80:f8:7c:20:67:45:24:40:9c:90:
07:34:5c:3c:16:52:ea:b1:2c:0d:e7:b5:97:fe:79:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:EE:C4:56:9D:69:AF:D5:13:58:D5:98:BB:C7:D8:EA:04:7A:9E:FF
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:8a:5b:86:fb:ba:f7:06:54:ef:e0:f7:a8:04:a9:28:66:b0:
20:b6:e5:da:8c:cc:e2:5b:30:f1:91:44:79:db:bf:d0:27:0c:
7b:6e:7f:f2:5a:bc:97:1a:30:ca:c8:96:8d:7c:f1:7b:66:3c:
3b:4f:15:d9:fd:c3:a9:e4:53:f2:6b:d1:57:66:9a:09:67:5e:
ac:a6:82:08:96:75:d9:63:95:d7:8c:d3:d6:6c:37:4c:9f:a7:
b7:07:a8:fa:42:9c:a7:57:c2:63:11:06:8b:c7:36:c1:59:7f:
3e:34:93:01:51:13:f6:59:a5:33:da:22:61:51:c2:30:74:ad:
02:18:1c:df:c9:92:04:e8:63:c2:81:a4:be:96:4b:0d:0f:1f:
ef:40:b5:8c:cb:b0:76:f1:09:32:a2:3e:75:d4:6a:c1:19:fb:
10:47:28:b2:6c:a5:31:a7:95:57:19:aa:a2:b0:c2:17:c7:5d:
c0:b7:5f:50:13:e1:c3:8c:70:4b:3c:c2:e8:c0:d9:d5:59:de:
fa:d6:ba:bb:ff:eb:b7:cd:f2:b9:a0:f3:37:4f:ab:85:9a:91:
8a:d0:aa:01:ed:93:b1:f7:fd:a2:d8:d5:43:b9:dc:6b:fe:87:
49:2b:ac:df:ba:19:d4:9a:89:07:c9:77:56:aa:db:f8:3a:c7:
ec:2f:64:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:25:54 2026 by rpki-client