Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: XkckFBN4IX/Wwsy3na36K4v6PbSHREFJlFdM9ZArvqM=
Subject key identifier: C1:22:1B:63:7B:C7:08:75:A1:0F:A4:CB:8C:9F:46:F5:C2:3C:77:15
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01A149F34CCCEE166DD58CA63FC21526EFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1AAF
Signing time: Sat 17 Oct 2026 13:00:43 +0000
Manifest this update: Sat 17 Oct 2026 13:00:43 +0000
Manifest next update: Sun 18 Oct 2026 13:00:43 +0000
Files and hashes: 1: aVA1AKv4zyiYGjxlH-mPLS_YW_U.roa (hash: SWC8hkYko2ZloQTKC6mTiTzHPA/u0KsHmhT+8vSmcgE=)
2: s3V4ezzVbMG6kQnOebdOqCb73pg.asa (hash: ow5lvZsoSYdTbZy9dKSWmykf5vPlazyuhSsgiGfpw40=)
3: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: A3ST2YNDXcERQ6HqbdfWgiG+56jWNGZf5Gm4sHrzW+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:f3:4c:cc:ee:16:6d:d5:8c:a6:3f:c2:15:26:ef:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Oct 17 13:00:43 2026 GMT
Not After : Oct 18 13:00:43 2026 GMT
Subject: CN=c1221b637bc70875a10fa4cb8c9f46f5c23c7715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:33:d8:93:da:ae:db:33:1f:0e:5c:9d:a1:0f:
e6:9b:a7:55:df:2c:9a:42:36:e1:14:f5:33:78:23:
86:a8:cd:7e:c2:6c:d4:d4:64:01:37:24:75:d1:e8:
b9:e4:d0:5a:4b:8f:21:84:59:50:69:09:72:4b:72:
31:5f:0b:57:58:63:84:23:23:9d:d0:ad:ac:d9:a5:
f7:34:70:f9:e9:41:05:9b:4e:33:53:97:eb:2b:87:
ea:d1:de:94:0a:80:20:54:c5:be:a5:d2:91:bb:38:
eb:86:e2:fe:b0:64:3d:8b:b5:8a:99:c9:a9:a5:24:
46:00:bb:03:07:97:4f:16:45:6e:cc:ca:c1:56:66:
de:d3:45:96:93:b5:eb:08:9b:36:e9:d7:66:9e:d9:
de:01:53:bf:e1:a5:bd:38:ed:d9:19:1a:d0:94:34:
56:e0:f6:01:46:5d:5c:bf:85:56:c3:d6:5d:6b:4c:
a8:b5:26:f9:4f:ac:5d:fd:0b:15:a0:54:15:36:3d:
c5:0b:31:3f:51:58:e8:71:6e:f5:19:3e:97:f1:4c:
52:a1:c6:ce:34:42:4c:21:de:0c:1f:11:9e:f8:2c:
c7:db:b2:d7:69:b1:1e:43:d9:c6:73:74:bf:1a:be:
c5:e3:d6:1f:5c:5c:d7:47:5d:06:1d:9f:f7:34:69:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:1B:63:7B:C7:08:75:A1:0F:A4:CB:8C:9F:46:F5:C2:3C:77:15
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:9d:a5:8b:a7:e0:d5:71:59:41:1c:d0:29:db:e9:a4:d3:4c:
d5:8f:fd:fe:cf:df:26:7d:21:b4:47:92:67:74:ba:58:1e:02:
19:a4:95:2a:3a:13:55:6e:19:2c:a6:79:8f:32:7c:1c:e9:85:
32:39:0f:ec:43:20:e5:1d:86:67:8b:b4:b1:c7:ea:d4:e9:43:
bb:7e:41:6d:61:64:1e:2b:cc:40:ca:48:77:1c:28:3b:83:fa:
eb:1d:2a:b3:a2:b8:76:93:a5:b1:42:30:da:bd:db:55:56:d4:
af:61:f7:b4:8d:be:ce:ad:ba:85:fe:c8:f0:f0:0c:0a:d4:89:
18:d9:51:23:c4:b4:3d:0d:cf:41:f3:1c:90:d0:dc:85:57:03:
c1:a1:aa:ba:33:63:48:a9:d3:fe:6c:c8:78:ca:62:01:52:ea:
ac:47:6b:8d:cb:f7:ce:62:11:51:fe:05:3d:e7:95:45:e7:74:
0d:40:23:49:44:42:04:a0:ca:f1:01:45:1a:8d:7c:96:0c:ef:
ff:f2:3a:bd:ad:16:c1:89:75:f6:f2:3d:4d:22:0e:8a:da:05:
f1:a4:8c:78:28:46:24:52:19:f5:c7:6f:4c:96:55:5f:56:15:
f6:25:77:31:3e:5b:ed:47:8a:f6:1f:b9:db:ee:c2:fb:07:aa:
eb:05:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:32:37 2026 by rpki-client