Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: ZITRojtFPe3qTVGFYCbIFaZwDJnI5/U2Cib7ok5yDM4=
Subject key identifier: F3:4E:CB:AE:A3:2A:D6:77:B8:FE:3F:6E:69:76:69:26:69:84:AE:23
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01A06E02FFFB26FCA337A1D1FB25AC2696F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 15BA
Signing time: Fri 04 Sep 2026 20:01:25 +0000
Manifest this update: Fri 04 Sep 2026 20:01:25 +0000
Manifest next update: Sat 05 Sep 2026 20:01:25 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: xCUmQJJccz4qdt+Zp/Xhzi5pR1QAFM4gntB9wCpK2jk=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:ff:fb:26:fc:a3:37:a1:d1:fb:25:ac:26:96:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Sep 4 20:01:25 2026 GMT
Not After : Sep 5 20:01:25 2026 GMT
Subject: CN=f34ecbaea32ad677b8fe3f6e697669266984ae23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:18:63:c2:42:5c:2c:c3:2c:91:84:72:d7:
25:3a:c7:63:7e:91:56:b5:42:51:9c:46:d0:33:1e:
64:1a:70:c9:cb:27:68:dc:c4:12:40:45:50:e4:08:
2b:97:5b:a8:b5:53:c2:3f:e0:17:68:2d:96:bb:71:
ac:a0:f9:88:5c:de:a3:20:6a:56:9d:37:91:cd:b0:
e0:35:81:50:2b:4f:46:bb:08:ef:02:95:8d:ec:3a:
03:12:10:53:39:8e:61:6b:0c:ef:fd:03:b9:df:05:
e8:57:5b:ac:3f:3f:2f:80:2a:b3:06:18:9d:e7:c3:
85:fa:a6:77:25:34:77:40:e2:17:97:95:7d:07:99:
8f:d0:c1:e3:21:b8:78:a4:5e:2e:96:1c:3a:6c:d9:
e5:38:34:38:94:31:7a:46:ef:03:91:16:e2:ca:a2:
4a:d8:6b:a5:91:d4:4d:df:18:41:10:dc:60:b5:78:
2e:16:82:8a:35:e4:f2:85:ed:fa:b8:36:63:d4:e8:
d9:67:13:c6:58:12:0c:c3:de:15:a8:c0:74:d4:c1:
b7:42:d2:bf:12:87:d9:80:42:ac:ad:52:32:15:37:
c1:b8:0e:73:f9:81:15:a7:cf:4f:2e:94:a9:c6:b9:
d1:a3:1f:8f:20:75:dd:12:a0:f6:05:ee:07:98:7d:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:CB:AE:A3:2A:D6:77:B8:FE:3F:6E:69:76:69:26:69:84:AE:23
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5b:3e:89:00:54:87:93:9b:10:b0:0b:a1:11:ef:8a:2e:21:
93:f1:22:56:c3:c2:6d:13:db:fe:b2:98:3d:a1:46:c6:6c:79:
e1:66:2e:69:7b:16:12:61:18:5e:ed:64:dc:e4:0b:10:46:97:
ab:c3:50:e6:9f:5e:a1:66:de:c3:9e:33:7c:c8:36:9a:a5:eb:
d3:9e:57:b2:84:96:98:bc:1b:ad:43:bc:d6:f2:a2:bc:22:3a:
1e:07:f0:30:25:60:4e:35:27:20:22:e1:e2:72:7d:0c:5c:3f:
a0:ad:28:d9:e3:a6:5d:0f:35:b5:c8:ee:72:c7:ef:bc:a4:b7:
37:b5:81:75:1e:ef:06:39:4a:cc:da:7f:da:90:5b:99:b2:59:
c5:27:12:4b:3d:b5:d2:6a:58:a3:d5:d7:37:f9:e8:7d:1d:50:
eb:e3:9c:d7:4b:3f:94:2f:1e:ca:37:91:75:6e:f6:0d:11:8a:
95:4d:e9:5b:f4:a2:ff:e2:cf:d4:5f:8a:a7:65:bf:a1:71:6b:
36:f7:33:3f:6a:25:94:08:f5:7d:6b:e4:a7:17:70:b7:de:5b:
f1:fc:66:67:93:ac:ac:7a:b7:15:d6:ad:f6:a3:fa:23:32:9d:
d4:cf:5b:b9:23:26:68:9c:d1:ca:74:46:24:79:c4:af:21:12:
75:f9:bf:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:56 2026 by rpki-client