
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: zFyHCH5pUJJi8NAs4hKRAKXnqT4Lulejxk/byA5QPaQ=
Subject key identifier: 69:4E:12:04:B7:74:BA:BE:07:7E:DA:B7:1D:91:0E:94:FC:F2:56:47
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 01A08C0D55D4BCA81F9DDB3536617917624E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 0260
Signing time: Thu 10 Sep 2026 16:01:19 +0000
Manifest this update: Thu 10 Sep 2026 16:01:19 +0000
Manifest next update: Fri 11 Sep 2026 16:01:19 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: /ianq5SI2izTla/FyTsRneiXRt/66TcHf1h114fwM6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:55:d4:bc:a8:1f:9d:db:35:36:61:79:17:62:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Sep 10 16:01:19 2026 GMT
Not After : Sep 11 16:01:19 2026 GMT
Subject: CN=694e1204b774babe077edab71d910e94fcf25647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:c2:42:6d:62:16:3b:71:22:d2:f4:36:a6:
1d:08:f7:43:5b:72:31:86:1a:82:28:0a:18:e7:a6:
d8:0a:1e:b6:95:a9:e9:a8:a0:df:3e:47:51:32:bb:
e6:a6:61:50:58:5c:76:d3:42:a9:f5:d3:8f:06:12:
73:69:ad:67:be:29:1e:ed:2e:02:53:4c:6c:8a:22:
f3:51:81:9c:c7:0a:0a:eb:c0:f4:c8:90:3f:fb:b9:
cd:c0:94:fb:0f:33:23:05:7a:6e:ce:35:db:fb:48:
18:5a:4d:cd:71:b9:f4:9b:44:2d:f4:f5:0d:3b:28:
5e:38:66:94:48:3a:6b:cc:bb:40:c3:2c:99:2a:77:
b3:ff:34:d5:e4:80:ee:b0:05:8d:64:77:5a:d2:da:
6d:14:f5:99:9f:85:8e:59:b1:c4:d4:01:c8:e9:ac:
84:54:10:c6:8e:73:01:9c:e5:09:05:8b:59:fc:b3:
32:6d:71:c6:b4:65:26:7e:90:29:3b:0a:9e:f3:4b:
0e:03:45:c1:f8:77:25:8f:f6:75:17:f9:cd:fc:ea:
b8:5f:9c:25:df:ed:03:1b:f3:11:3a:64:25:dd:8f:
d3:4e:08:09:8c:28:06:aa:c1:d8:d3:54:44:6e:1f:
05:fd:92:3e:d1:ee:d8:37:a6:7a:92:06:14:c4:70:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4E:12:04:B7:74:BA:BE:07:7E:DA:B7:1D:91:0E:94:FC:F2:56:47
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6d:ce:b3:81:ce:95:c3:fe:50:51:0e:1e:66:74:9f:fc:ae:
99:c9:60:8f:56:8b:7f:ab:8b:2d:34:47:61:0c:72:a5:07:6a:
c1:82:e6:80:ee:4f:b0:a9:e2:9c:16:63:bc:1a:c6:70:7a:fa:
b9:c2:37:9b:4b:3f:c9:8f:35:b5:62:0f:3e:d1:7a:4f:ac:b1:
1e:a8:0a:7a:7b:50:8b:7c:d7:06:35:53:6b:da:58:5c:d2:9a:
57:96:6b:4f:5d:0a:9c:ce:9d:86:67:59:b6:e1:39:e7:f6:23:
7f:46:7e:be:bb:8c:c9:eb:f4:b9:59:d2:d6:98:f5:51:01:99:
e5:56:c5:b5:65:9d:02:2c:96:ea:16:3d:4f:de:48:d7:a1:09:
d8:94:6f:57:cf:ae:4f:61:28:5e:36:83:c3:3f:8b:89:9a:63:
6b:ed:77:69:be:bc:fd:ff:25:56:26:86:0a:51:f8:48:d4:5b:
b8:a7:c3:9f:b0:54:b5:a2:b6:43:81:5c:cd:9a:f5:f0:c2:73:
48:c9:af:ac:39:3c:76:87:b2:a8:06:d3:a4:82:4e:a6:40:de:
56:87:76:63:77:b9:3a:01:b0:a1:27:56:cf:c0:83:ad:3d:7b:
86:a9:66:c3:e9:d5:c5:f1:f9:ca:cc:8e:fc:48:41:2b:ea:9d:
1c:bd:76:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDVXUvKgfnds1NmF5F2JOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTFiZDZiMGQ1ODllMWEwZjkwYmFkZjczNTAyMDcxNGYw
ZWNmN2EwHhcNMjYwOTEwMTYwMTE5WhcNMjYwOTExMTYwMTE5WjAzMTEwLwYDVQQD
Eyg2OTRlMTIwNGI3NzRiYWJlMDc3ZWRhYjcxZDkxMGU5NGZjZjI1NjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW7CQm1iFjtxItL0NqYdCPdDW3Ix
hhqCKAoY56bYCh62lanpqKDfPkdRMrvmpmFQWFx200Kp9dOPBhJzaa1nvike7S4C
U0xsiiLzUYGcxwoK68D0yJA/+7nNwJT7DzMjBXpuzjXb+0gYWk3Ncbn0m0Qt9PUN
OyheOGaUSDprzLtAwyyZKnez/zTV5IDusAWNZHda0tptFPWZn4WOWbHE1AHI6ayE
VBDGjnMBnOUJBYtZ/LMybXHGtGUmfpApOwqe80sOA0XB+Hclj/Z1F/nN/Oq4X5wl
3+0DG/MROmQl3Y/TTggJjCgGqsHY01REbh8F/ZI+0e7YN6Z6kgYUxHBbPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlOEgS3dLq+B37atx2RDpT88lZHMB8GA1UdIwQY
MBaAFLvhvWsNWJ4aD5C633NQIHFPDs96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2It
NjE3ZDE3YmUzMDA0LzEvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS84MTVlMDgtYTVjZi00ZjAxLTkwY2ItNjE3ZDE3YmUzMDA0
LzEvdS1HOWF3MVluaG9Qa0xyZmMxQWdjVThPejNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnm3Os4HO
lcP+UFEOHmZ0n/yumclgj1aLf6uLLTRHYQxypQdqwYLmgO5PsKninBZjvBrGcHr6
ucI3m0s/yY81tWIPPtF6T6yxHqgKentQi3zXBjVTa9pYXNKaV5ZrT10KnM6dhmdZ
tuE55/Yjf0Z+vruMyev0uVnS1pj1UQGZ5VbFtWWdAiyW6hY9T95I16EJ2JRvV8+u
T2EoXjaDwz+LiZpja+13ab68/f8lViaGClH4SNRbuKfDn7BUtaK2Q4FczZr18MJz
SMmvrDk8doeyqAbTpIJOpkDeVod2Y3e5OgGwoSdWz8CDrT17hqlmw+nVxfH5ysyO
/EhBK+qdHL120Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:00:22 2026 by rpki-client