Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: qBtFnKu6/kAnndKEiGxnZaQJO6v/hPCqlgkmAOmlPds=
Subject key identifier: 3A:B6:1F:FB:2F:BF:05:7C:6F:4E:0B:E4:21:BD:A8:43:1E:64:A7:B7
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01A165340BB9A48B21620D80F1A44478B8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 163A
Signing time: Thu 22 Oct 2026 20:01:12 +0000
Manifest this update: Thu 22 Oct 2026 20:01:12 +0000
Manifest next update: Fri 23 Oct 2026 20:01:12 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: U+ZXC+nm4/BXM2rBCfT19AOISN3ojJheaPEEiZDXXCk=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:65:34:0b:b9:a4:8b:21:62:0d:80:f1:a4:44:78:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Oct 22 20:01:12 2026 GMT
Not After : Oct 23 20:01:12 2026 GMT
Subject: CN=3ab61ffb2fbf057c6f4e0be421bda8431e64a7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:a9:9c:76:59:73:bb:70:2d:de:00:d0:b9:
0d:7a:ca:b8:3a:7b:15:2c:9a:13:1f:af:98:e2:6b:
37:59:94:e7:56:fe:ec:e6:ae:93:f7:6e:49:6b:5a:
db:c6:3e:5a:77:27:dc:4a:d3:5c:cf:17:79:7c:fe:
88:63:20:6f:18:23:3e:10:33:af:0c:b7:63:fe:89:
6f:5a:1b:d6:18:16:02:d2:6e:c9:75:89:58:7f:63:
86:ba:be:ff:38:ab:d2:d4:13:9b:fe:f7:5e:84:bf:
51:c5:3e:24:54:a4:84:12:5e:de:0a:a4:ae:3f:39:
db:39:06:dd:4c:88:86:22:ff:9f:62:a0:17:48:3c:
da:21:10:1f:ec:4b:9a:fd:22:f5:aa:11:60:73:3c:
c9:6c:91:18:ed:52:00:a2:ff:ba:b8:37:fe:ba:29:
25:26:5f:e4:25:0a:c3:ea:07:fb:63:85:d1:7c:5c:
9d:ea:fa:21:39:f6:d8:00:c4:a3:42:4d:9b:ed:b3:
e6:13:cc:4c:62:4a:37:12:ac:3d:63:f6:a3:fc:77:
d9:76:03:67:85:df:42:03:e5:c6:e3:3c:e5:ec:13:
a4:b8:18:77:22:e0:bd:93:f9:3e:56:14:60:e0:0b:
d5:17:72:54:d5:5d:34:2c:57:5f:e4:a7:04:61:87:
24:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B6:1F:FB:2F:BF:05:7C:6F:4E:0B:E4:21:BD:A8:43:1E:64:A7:B7
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:2d:e0:d3:33:41:e3:cc:c8:be:ca:cc:aa:61:3c:bc:6d:
3e:1e:09:12:14:a4:8a:4c:b4:ce:47:b8:f1:79:5f:9a:26:4e:
69:ac:cc:78:df:b1:e7:c6:d9:bb:c3:71:f2:4b:6b:cd:50:b1:
96:d9:bc:de:57:97:d5:16:c5:68:bd:6f:ac:e1:a2:8f:4f:e6:
af:35:ce:ee:39:b3:8b:a6:56:03:bd:ee:2c:47:25:83:4e:b0:
db:45:2a:ef:1e:72:a7:db:d6:f7:1c:3c:dd:36:02:98:80:11:
94:ba:5b:c8:d2:7b:45:40:ab:4e:48:45:a9:96:69:07:0d:17:
5f:9d:f9:74:9e:de:e1:6d:f5:64:e1:8b:b6:06:cc:8c:33:47:
16:63:1c:e9:d5:18:c0:3a:e8:ce:92:0d:d0:56:3e:f6:3f:e7:
f7:e9:4f:db:c9:89:cc:59:99:7b:0b:9c:ad:46:6a:1a:15:dc:
c5:d1:89:e5:58:84:56:63:15:f1:6a:c3:ee:ab:db:bc:2c:54:
07:70:d0:fe:b4:57:34:4a:c9:f1:35:76:2c:5c:ff:51:fe:ae:
09:18:41:1e:0d:88:de:da:f3:0d:33:05:f2:bf:06:fe:28:34:
bf:b1:3b:fc:1d:25:4c:09:9b:00:55:e2:16:99:b0:34:68:2c:
8b:74:1e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 00:26:22 2026 by rpki-client