Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: 4Deig6We7GG2Zwz65FM9MH1PfYZSzvc/tEk0GzNIYxY=
Subject key identifier: 82:CB:9C:2F:8C:A7:BE:2C:D8:E6:3A:46:70:82:3B:67:33:90:22:33
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 01A179969012651D9EC21B75050B7A2406ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 02DB
Signing time: Mon 26 Oct 2026 19:01:12 +0000
Manifest this update: Mon 26 Oct 2026 19:01:12 +0000
Manifest next update: Tue 27 Oct 2026 19:01:12 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: AByiYMxxHYCb0nh/EflJTDnF1eMuL8aXw7h7wDEQj0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:96:90:12:65:1d:9e:c2:1b:75:05:0b:7a:24:06:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Oct 26 19:01:12 2026 GMT
Not After : Oct 27 19:01:12 2026 GMT
Subject: CN=82cb9c2f8ca7be2cd8e63a4670823b6733902233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:a1:6c:7a:2d:31:6c:3c:ff:be:c3:be:ff:
ea:b0:c9:7d:69:88:c7:71:40:b5:94:39:b6:de:f7:
09:a7:87:6b:72:d2:be:ce:a5:de:5e:fb:d4:5b:56:
27:19:cc:58:d1:f0:7d:fb:70:ab:47:08:d9:62:46:
3c:c7:29:45:77:a9:f5:0d:4c:43:ff:5e:a5:0b:b2:
8b:9a:22:38:08:a5:a7:d9:04:1c:48:a0:fb:0e:3e:
42:d9:89:22:45:51:c8:d8:6e:f1:99:b8:ce:c4:b1:
ce:15:ab:c3:ef:92:3f:1c:e9:8f:7c:e3:b1:ce:53:
f9:aa:7a:e7:fe:71:03:93:2d:aa:bc:02:4a:c7:87:
80:52:77:b0:70:5b:34:1b:77:96:08:ee:ef:94:04:
f7:32:4c:e3:5b:83:70:d4:93:e6:03:1f:62:10:85:
1b:97:5f:c3:b7:c0:95:20:b9:68:50:a6:3b:68:d6:
ac:2a:10:68:4b:a8:a5:ec:9d:a0:94:a7:e9:94:64:
84:c8:5b:b9:94:7c:49:f3:05:57:b0:81:f8:6e:c1:
23:40:23:81:cf:c5:78:c1:6f:77:e4:22:a2:04:da:
b9:71:c9:b9:94:d9:cc:19:3b:bc:4a:3c:90:d5:38:
81:8d:bc:25:31:4b:dc:b8:2c:1a:c7:49:49:0c:73:
54:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CB:9C:2F:8C:A7:BE:2C:D8:E6:3A:46:70:82:3B:67:33:90:22:33
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:da:89:87:13:0a:f7:53:14:d7:d1:26:86:c9:dd:54:0f:13:
43:5e:b4:db:84:d9:da:cb:51:ff:be:84:a0:65:32:77:78:97:
ae:0b:5e:1f:c4:57:ed:2e:3a:1b:df:1c:d0:78:0b:10:c1:32:
5d:ae:d1:13:b8:c2:08:4e:65:0d:fc:d5:59:ba:0e:3e:10:aa:
df:91:1f:40:bb:6c:6c:56:34:4e:28:7b:c1:2f:5d:a5:01:bf:
fc:21:16:8b:6b:5c:a5:ca:c5:11:2b:f6:b8:68:c0:bc:81:76:
ec:40:1e:3e:f4:5d:5e:83:48:2f:d3:bf:b2:91:ef:2a:56:3e:
7e:b6:7e:19:01:25:2a:2b:7c:ce:73:9d:2a:a7:5c:f7:5d:61:
8f:20:a2:c9:ca:77:3a:ae:9b:b0:9e:45:b3:aa:c6:1b:2f:b7:
f4:bf:fd:44:8b:7b:06:1c:b4:87:7a:74:06:aa:57:fa:06:93:
34:63:2e:a9:b9:f6:d0:45:bc:ef:66:35:ea:b8:15:77:bf:fb:
fa:19:ad:2b:36:83:87:2c:d5:cb:5c:5a:35:a9:56:78:61:f5:
f5:c3:ea:e2:f3:7d:c1:3a:d7:53:3c:91:98:38:4f:d1:f1:80:
41:66:59:fe:cb:93:ab:8e:62:eb:cd:1b:22:04:ba:5e:e3:f6:
3e:22:de:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:00:16 2026 by rpki-client