Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: vX9eTLUi4TBLcZIgITRauNizuHFwPDpArokV4yfQWCQ=
Subject key identifier: D9:B6:39:71:00:80:7F:53:45:49:5D:99:5F:BD:CC:7C:65:99:53:A4
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 01A17B16A267C5DF19602B1F7087EE280B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 17A1
Signing time: Tue 27 Oct 2026 02:00:43 +0000
Manifest this update: Tue 27 Oct 2026 02:00:43 +0000
Manifest next update: Wed 28 Oct 2026 02:00:43 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: CyZ/UWni/cEKj38y/Axg1sOXNWmzCctwRH5DyVrIkfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:16:a2:67:c5:df:19:60:2b:1f:70:87:ee:28:0b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Oct 27 02:00:43 2026 GMT
Not After : Oct 28 02:00:43 2026 GMT
Subject: CN=d9b6397100807f5345495d995fbdcc7c659953a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8c:5b:1a:9b:73:bc:b7:d3:ae:c2:95:0c:2e:
ce:d7:2f:8d:96:50:63:bc:ad:01:ce:15:0f:c5:61:
40:e3:01:80:90:1e:f2:bc:bc:6d:45:b7:b3:cd:03:
e5:3d:0d:40:85:07:4c:81:b1:c2:52:65:e9:ff:ed:
74:b3:7a:22:d7:b8:ef:f4:53:f8:98:f3:43:37:3c:
dc:a7:cf:03:74:ca:80:e3:1c:da:ff:1d:87:36:37:
db:15:7b:ab:a9:2f:0d:03:da:77:29:ae:6e:19:dc:
bb:34:43:16:32:00:d2:6b:31:9f:ce:a0:12:d9:7a:
6b:cd:4b:7b:49:eb:78:85:bf:49:f2:c1:08:87:0f:
70:ec:47:cb:64:4d:7c:59:13:e1:81:c1:3f:78:97:
15:a4:8e:95:19:28:0d:da:5e:34:1d:6a:3d:9b:7b:
4b:59:6b:6f:2d:3a:f2:48:a1:79:24:7b:b7:16:22:
a8:c3:b6:a6:a2:a3:01:12:07:7e:75:00:fe:e0:57:
5f:2c:41:91:e1:8c:dc:31:8e:e7:27:fe:c5:cf:a6:
6b:3f:81:fb:f8:58:2e:1c:95:e5:30:62:df:a4:26:
c5:a3:dc:d6:29:ef:3c:50:65:61:40:f4:21:61:ca:
8c:49:16:f1:ff:da:96:63:e8:71:64:b8:ff:a9:cf:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B6:39:71:00:80:7F:53:45:49:5D:99:5F:BD:CC:7C:65:99:53:A4
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a2:ce:da:63:2f:91:ef:29:a4:d3:a1:b9:2d:14:79:fa:3f:
28:d5:d2:b6:a6:0b:16:ef:01:fb:ed:53:5d:80:fd:11:64:e0:
4c:83:9c:d8:74:67:43:6a:10:81:1d:af:c5:3c:0d:a5:0d:b0:
de:02:1a:15:49:92:b7:56:d5:90:c6:a2:2b:17:53:75:3b:41:
db:40:81:2f:9f:1c:31:c4:23:11:cc:d6:84:91:84:52:d3:57:
ad:8c:72:91:59:e9:45:0e:5a:4d:5a:0e:cd:21:d0:ab:9f:16:
cd:26:b3:39:90:6e:07:be:e6:a5:97:35:4f:40:96:da:38:c5:
76:8e:68:51:bf:bb:7f:d1:4e:b8:a3:b9:7c:ca:e4:ed:1e:d8:
70:05:11:b8:ae:8a:11:d1:51:94:29:e8:c7:9c:cb:ff:06:c1:
b2:1b:a4:a8:08:4c:01:71:7a:f7:32:23:ca:b3:9c:5c:56:f2:
50:16:ee:a7:d8:bc:d1:81:89:b3:93:d5:7e:8f:ad:5c:34:20:
6e:8d:2a:54:15:54:17:97:fc:ac:85:ef:97:49:0e:10:8c:cf:
f1:4a:4a:83:40:6d:39:0a:e4:da:ee:ee:9a:cb:f7:e4:1e:e3:
ed:70:8e:1b:24:8e:e2:5d:91:35:a1:b1:52:56:e9:f1:63:94:
e2:ad:ce:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:41:31 2026 by rpki-client