Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: Vrri0tft7LWkDmf2zBylwXgXtwMp4+WWa0THYUX2jbE=
Subject key identifier: FA:09:5F:B4:8C:7A:82:AC:25:0B:5B:06:FA:E3:9B:DA:9A:8A:68:D3
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01A118CFB1357372D487C1D957EFFA23C70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0C59
Signing time: Thu 08 Oct 2026 00:00:26 +0000
Manifest this update: Thu 08 Oct 2026 00:00:26 +0000
Manifest next update: Fri 09 Oct 2026 00:00:26 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: QNH/b4h9e2sBkS1zAS/8SUWSNFrzwEOPrM+vQPiVPbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:cf:b1:35:73:72:d4:87:c1:d9:57:ef:fa:23:c7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Oct 8 00:00:26 2026 GMT
Not After : Oct 9 00:00:26 2026 GMT
Subject: CN=fa095fb48c7a82ac250b5b06fae39bda9a8a68d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:04:e9:04:0c:d9:1c:9e:65:78:8f:9c:c1:
ad:77:17:0a:8e:4c:a9:0f:42:08:56:3d:da:2c:32:
eb:8a:0b:2d:44:8c:e2:04:70:b1:65:e8:08:7c:97:
21:79:60:4f:07:a8:54:e3:3c:4e:51:2e:f9:48:04:
12:82:1d:60:a2:61:c4:c5:97:ba:a2:56:67:74:de:
87:e0:41:be:25:f0:fa:a7:06:65:a7:a6:b0:c9:4b:
5d:ab:ba:2e:37:bd:6f:12:38:3a:92:ed:5b:53:70:
5d:f3:52:5f:2e:0e:c4:f5:a6:f3:94:cc:2f:42:5b:
4d:f5:da:d4:17:a1:8e:65:38:f8:32:7d:dc:d5:dd:
4f:c7:e5:56:f9:b3:3d:84:e0:41:02:19:02:31:d6:
c6:0f:26:aa:59:26:67:27:07:2c:2f:e8:ca:2b:8a:
e6:bb:59:cf:f1:64:5b:63:77:7c:e8:01:14:8b:4f:
1e:57:ba:68:95:8e:66:b5:04:09:2b:43:b1:13:14:
4d:b0:49:b8:b6:3c:4f:b0:8f:c4:be:d9:13:74:79:
52:c6:fe:94:5e:b4:e0:fd:44:26:01:47:58:6c:36:
e8:29:2c:41:67:60:7c:83:ce:69:0b:21:78:1b:b3:
8c:f2:db:d1:67:60:04:d3:fa:c4:f1:12:f1:69:1d:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:09:5F:B4:8C:7A:82:AC:25:0B:5B:06:FA:E3:9B:DA:9A:8A:68:D3
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6a:42:6d:e7:16:55:67:7f:a6:94:d4:4c:b8:15:22:4a:ab:
e0:78:ad:24:da:43:da:2b:60:71:6b:74:f2:5e:7e:91:f9:29:
28:5b:91:01:68:da:64:27:90:f0:0b:84:c1:d0:cb:2e:75:a8:
19:9f:ce:39:fc:f3:90:2e:99:f9:24:5b:48:39:52:d1:bf:09:
ab:13:11:ee:2b:20:ec:d3:43:03:b5:a0:07:35:2e:35:b6:e3:
a2:09:a4:96:6a:e3:b0:79:8e:b1:65:21:d3:cd:84:0e:00:43:
1f:4b:2f:7e:a0:69:1f:23:de:91:2b:ff:2b:34:c0:b3:62:bd:
7a:03:dc:b1:19:4c:98:8a:cf:7b:aa:dd:a3:7c:70:69:bc:4a:
a9:22:f4:f0:b5:b9:a9:e1:0a:62:a0:a3:54:c4:05:a1:6d:de:
e6:9b:7a:aa:c5:18:fb:6e:43:95:f5:eb:67:ac:84:06:5f:eb:
9a:e2:04:1e:7d:2d:63:c3:38:e9:ad:6d:04:44:f2:63:47:05:
d4:e0:d3:a2:d0:40:58:2b:e7:d0:a4:36:d6:e5:5e:1b:97:6c:
24:e4:3f:53:e3:8e:7a:ba:89:11:76:19:24:68:39:51:6e:41:
15:7f:eb:7c:4d:56:d8:33:b7:6b:2b:94:ee:6e:ae:c2:20:0d:
71:8f:f1:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:35:31 2026 by rpki-client