Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json)
Hash identifier: LvvpNkAcFMFq//IYKNic4Nw6ReXjObUGqQwwtesLH2g=
Subject key identifier: F1:86:B0:4B:6F:68:1A:60:A7:E8:31:0D:DA:7B:C2:C2:05:10:11:05
Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Certificate serial: 01A1713785D73EDB326D5668F4BE3F8715C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
Manifest number: 02F6
Signing time: Sun 25 Oct 2026 04:00:26 +0000
Manifest this update: Sun 25 Oct 2026 04:00:26 +0000
Manifest next update: Mon 26 Oct 2026 04:00:26 +0000
Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=)
2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 5RpUw8lALaNHXjHjR3UpHXyFsE5DxE89of29QdKXgUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:85:d7:3e:db:32:6d:56:68:f4:be:3f:87:15:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93
Validity
Not Before: Oct 25 04:00:26 2026 GMT
Not After : Oct 26 04:00:26 2026 GMT
Subject: CN=f186b04b6f681a60a7e8310dda7bc2c205101105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:08:9b:e5:8f:d6:d2:de:15:66:4b:c2:c7:05:
e7:e6:ff:c9:33:5a:36:a9:36:24:07:04:5c:7b:09:
d4:be:92:01:08:12:7e:aa:3b:c5:93:73:39:eb:50:
67:06:22:fd:42:2d:e9:ce:1e:a5:dd:35:29:e4:0d:
35:1f:fb:66:a1:c0:78:ab:8e:6e:09:cc:1c:88:80:
a9:e2:c3:56:f2:f8:45:57:45:70:3d:63:1b:08:d4:
5b:0c:ce:27:15:07:97:81:ad:e1:64:bc:1f:c3:8b:
4c:ac:e2:a2:91:d3:11:e8:c9:f5:f6:23:f9:26:1b:
ba:18:57:66:15:bb:ba:6a:84:93:ca:ac:b7:3d:00:
b7:51:cb:f7:82:1c:83:19:cb:81:47:95:a3:95:b9:
91:1e:7e:b6:3b:99:d6:80:0d:cd:83:f4:38:3c:10:
d9:0f:73:1a:da:e2:30:4e:f1:36:3f:4b:1e:7d:62:
03:a6:62:ca:6f:f0:cd:84:34:f2:1e:2b:d8:56:ff:
d2:76:6d:9a:48:1f:5d:48:9b:ee:a2:f0:9f:b7:33:
40:2a:30:ad:f2:6f:a2:8c:e7:a2:95:7b:85:a2:73:
dd:56:64:94:98:75:77:5a:a2:fe:20:ee:d9:ec:23:
ab:56:06:88:c0:10:c3:a9:2c:3a:2a:b8:8b:5d:17:
ec:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:86:B0:4B:6F:68:1A:60:A7:E8:31:0D:DA:7B:C2:C2:05:10:11:05
X509v3 Authority Key Identifier:
keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:85:52:35:f9:e1:91:82:bc:ac:cf:63:fd:9d:10:c4:73:e1:
b7:d6:4c:f5:a3:58:d2:0a:ab:42:ad:75:2b:53:c4:3d:fd:54:
d3:e8:72:cf:a1:9c:0e:e0:f2:ce:59:71:98:6e:7b:f5:4c:ee:
c2:32:fb:f2:07:f0:bb:b2:2a:fc:a9:ec:f5:a2:99:9a:ca:29:
c4:bd:2c:b3:42:a7:4c:a7:b2:f7:a6:40:d0:d7:6d:81:6d:9c:
3e:9b:ca:42:4d:2c:85:0c:a4:e1:f1:0d:1f:42:a8:6b:8a:76:
8a:f2:88:af:f4:3a:f6:57:0f:e9:58:18:b5:ae:a7:b7:a0:da:
e3:ee:d2:99:57:f9:75:f2:56:a1:d2:5d:f8:7c:f8:9b:13:ae:
97:0a:bc:9c:3a:2f:c4:0b:dd:7d:24:d9:1c:4c:b0:7d:56:96:
c4:57:e8:00:75:71:38:1b:25:f1:39:d0:88:91:70:81:30:fe:
e5:ea:d6:0f:02:92:bf:68:c6:f0:82:bd:ff:70:22:7e:f1:8f:
10:29:10:86:b8:8b:3b:eb:49:08:24:15:b4:2c:0f:09:cf:45:
5e:a6:e5:10:ad:fd:18:c7:06:bd:70:29:fb:ae:70:a7:af:a4:
5c:ec:30:7c:d6:c7:d8:89:19:ca:2a:d3:12:10:5e:5d:8a:1b:
e8:d1:20:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:03:33 2026 by rpki-client