Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: MIxwpVfpiur1wEN6gqMq0nK3KktHA6r4HP6XRflduF0=
Subject key identifier: 67:D5:EC:BC:EF:92:E1:1C:A2:8A:6F:AB:D7:0A:95:B4:EA:8A:80:1F
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 01A08AFA8C6512910BFEEFF1827B95361B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0E11
Signing time: Thu 10 Sep 2026 11:01:10 +0000
Manifest this update: Thu 10 Sep 2026 11:01:10 +0000
Manifest next update: Fri 11 Sep 2026 11:01:10 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: 0Jv6nL8Yuv6Sbp2v8jLrSH5Kpr1TJ7SNA73MbHB0GZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:8c:65:12:91:0b:fe:ef:f1:82:7b:95:36:1b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Sep 10 11:01:10 2026 GMT
Not After : Sep 11 11:01:10 2026 GMT
Subject: CN=67d5ecbcef92e11ca28a6fabd70a95b4ea8a801f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:f4:61:67:87:ae:86:71:ca:63:0a:99:37:
b3:72:27:dd:3a:93:20:af:de:75:1d:63:de:5c:96:
81:13:d4:34:f9:4f:be:ad:4d:fd:99:1c:97:3c:73:
1c:a1:20:ba:94:b5:a2:b7:7a:8f:aa:93:cc:26:45:
04:e9:28:8e:d5:f3:b5:45:61:de:e2:3c:cd:46:14:
5e:0a:3a:83:0b:83:79:67:00:c1:1b:a4:18:c5:f7:
f8:a4:df:d4:30:63:f2:56:67:e4:d7:53:27:20:70:
ca:73:97:dd:fe:61:e3:48:71:a9:eb:70:0a:6f:9f:
2b:5c:4e:28:aa:04:80:19:7e:2a:ea:b8:fa:d7:06:
f8:97:80:66:5e:a4:1a:f9:7e:f0:85:11:d1:ec:7f:
cc:16:9a:11:32:2b:c7:0b:ef:d2:82:e2:a8:43:9f:
f9:d9:8e:43:4a:0d:be:cb:9f:3f:0c:95:43:bd:0b:
2e:e1:0c:55:b3:90:6a:51:ed:5e:41:96:ec:a4:ee:
0e:50:b2:a5:ca:34:3a:5c:70:dd:99:ba:f6:e1:17:
9a:60:84:ef:4f:8a:65:09:5a:de:a8:a1:1b:14:08:
74:96:c7:1c:be:5a:10:be:4d:14:69:41:64:89:94:
e0:d1:a0:49:00:32:f0:1e:cb:92:10:91:45:02:8b:
7c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D5:EC:BC:EF:92:E1:1C:A2:8A:6F:AB:D7:0A:95:B4:EA:8A:80:1F
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:39:bb:21:29:1f:06:14:e1:41:a0:f8:50:63:e1:61:b3:a1:
84:75:f3:6b:57:34:0e:32:6d:0b:92:76:c9:8b:bb:d1:67:03:
6c:61:4e:ca:b8:79:8a:b6:cd:a5:6a:41:8d:92:4e:fb:21:a9:
60:b7:df:28:7c:f4:b7:4f:83:7b:cd:04:23:10:0f:51:a2:b4:
66:69:4a:ac:5e:40:b8:dc:b0:4a:36:ea:e1:26:04:e5:46:51:
eb:a3:97:1e:b4:b5:bd:45:23:64:83:30:ec:5a:ed:fd:ff:5c:
d5:4f:b1:26:4e:61:dc:76:3c:46:5d:0d:71:9e:37:17:b6:c4:
a9:e6:8e:4c:d6:f0:bb:15:99:59:19:85:6e:7e:c0:23:8f:f2:
73:8e:ce:ab:8d:d7:7e:71:79:be:a5:94:31:b3:36:56:c0:f5:
49:57:af:1b:46:6c:63:65:f4:3a:bd:1b:4a:0f:4b:54:a1:c4:
cd:b4:36:60:a8:70:18:e7:5e:c4:1e:c8:dd:c9:ee:58:04:e3:
ec:e6:8c:e3:3a:30:dd:05:ca:ea:56:35:f0:4d:ce:08:ac:f9:
f8:f2:fd:8d:51:9a:eb:99:28:d2:e9:1b:7a:17:d1:d8:bf:68:
84:11:1a:cc:10:91:c4:11:bf:c7:6d:1b:a2:f6:db:6f:db:26:
d8:be:c1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:19:07 2026 by rpki-client