Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: kiZ+/NdJsX2KD13PWvSfKrhA/iFYjT4HVvFZfAICVWk=
Subject key identifier: BB:F8:7F:E6:C8:9F:28:8D:0D:E2:4C:DE:B3:9E:1D:FE:E9:09:F6:73
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 01A165A1F09397639FDB947EE8CA314E513F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 1A4B
Signing time: Thu 22 Oct 2026 22:01:13 +0000
Manifest this update: Thu 22 Oct 2026 22:01:13 +0000
Manifest next update: Fri 23 Oct 2026 22:01:13 +0000
Files and hashes: 1: F_MQUh6Cv4-dn8QQYjcllgNmU_Q.roa (hash: rPOBsU3IqWyWd2TrfL/Ef+LouW+88Qh38gAJottjBDo=)
2: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: 3/TgqfXoNPyUK88BzUo1cOEmWj6HVldLf0YYD/ltow0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:a1:f0:93:97:63:9f:db:94:7e:e8:ca:31:4e:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Oct 22 22:01:13 2026 GMT
Not After : Oct 23 22:01:13 2026 GMT
Subject: CN=bbf87fe6c89f288d0de24cdeb39e1dfee909f673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2a:0a:f8:6a:7c:1e:f5:1a:3b:15:d6:f7:e3:
f7:a0:60:4f:e1:e1:e1:06:ae:73:fa:de:aa:92:4e:
83:74:02:56:90:8a:39:02:4e:fa:b0:46:95:52:84:
4d:a2:89:3a:a0:48:c3:f8:71:d0:27:38:3f:ad:5e:
22:38:1a:2e:47:db:1e:4e:f8:48:ac:1a:18:7e:15:
ba:87:72:59:ea:34:d1:bd:db:db:a3:f4:72:dd:7a:
2d:0f:25:40:bb:7b:16:a3:33:e0:35:08:fa:a4:39:
f0:ea:a2:b3:56:a2:d9:d6:3f:b9:74:e0:0b:d8:69:
e5:ed:44:67:a7:44:91:ca:4b:64:b0:99:e0:2a:ad:
ba:f8:44:fb:c7:30:30:3a:ac:a8:2d:c7:8f:1a:ea:
ad:dd:a7:d0:05:b9:0a:d4:47:9b:06:0e:f2:90:1f:
f7:4b:b7:29:44:47:e4:3f:38:ee:19:be:22:a6:b9:
16:5a:6f:a0:df:f6:c5:aa:c7:f5:a6:f1:68:1e:57:
93:4c:f3:8b:c0:a5:94:f1:86:29:be:01:62:46:27:
c0:de:e1:51:58:b9:27:9e:e5:fe:06:3b:9a:ee:e9:
49:98:72:f2:5e:e1:fe:86:83:97:ed:8d:4e:ff:cc:
9f:ca:de:d9:99:12:4f:ee:14:c4:f0:60:93:a2:7b:
76:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F8:7F:E6:C8:9F:28:8D:0D:E2:4C:DE:B3:9E:1D:FE:E9:09:F6:73
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:00:ae:10:78:fb:7f:d4:b6:19:ad:d4:b5:c2:1f:eb:d2:ff:
29:82:c0:99:09:0a:ec:44:5f:de:e9:dd:98:1f:09:dd:4b:34:
da:d2:7d:88:30:fd:e9:9e:de:9a:ef:1d:e8:0d:c6:a7:5d:16:
2f:45:9a:09:cb:77:94:5d:6e:66:d1:41:15:ff:c3:bb:fe:6e:
2d:f9:f1:a5:b4:58:50:13:c6:a3:b8:44:b4:25:92:21:30:8e:
65:11:9c:44:1b:99:fd:f2:3d:ae:e7:76:e7:16:b7:fa:76:c7:
59:93:4b:1a:26:d9:41:a2:b8:3f:2c:02:a7:4b:a0:a2:14:4e:
de:71:2f:bf:d7:a6:58:09:f9:90:f9:f0:be:09:b7:8f:91:c0:
da:6b:c4:8e:71:ea:a8:50:25:e2:b3:1f:25:c4:5d:d7:5c:da:
3f:d9:c5:49:49:e0:8b:4a:f0:cf:cd:79:c3:62:49:44:41:c4:
62:d9:3f:5e:ad:79:5f:94:aa:a8:84:95:6e:84:f4:74:8a:91:
10:e7:38:04:ec:34:cb:27:46:e8:41:43:ae:23:71:db:3d:99:
e6:78:3c:44:00:a6:83:e2:6e:41:5f:73:cd:42:9b:ef:9f:d1:
5b:27:8a:f9:f1:50:e2:6f:80:68:a9:f2:c4:f7:91:7f:a0:7a:
30:b2:ed:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:34:53 2026 by rpki-client