Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: UL8/wos3LkAEaYosqEOcBDkfuX4Yn1l3HZG5Fe5XvOw=
Subject key identifier: 30:AE:C1:50:91:CD:EF:3E:21:F3:96:23:04:68:97:48:A2:AA:CA:B7
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01A0897A1B1E625CBAFEF16F0CB8FCF5B28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1100
Signing time: Thu 10 Sep 2026 04:01:15 +0000
Manifest this update: Thu 10 Sep 2026 04:01:15 +0000
Manifest next update: Fri 11 Sep 2026 04:01:15 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: A5uWn4pjfQjWLC9qjLICeLKn9jP9f+pXQTz4cqhd9Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:1b:1e:62:5c:ba:fe:f1:6f:0c:b8:fc:f5:b2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Sep 10 04:01:15 2026 GMT
Not After : Sep 11 04:01:15 2026 GMT
Subject: CN=30aec15091cdef3e21f3962304689748a2aacab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f2:c8:a4:0b:3f:46:4e:0f:df:2f:81:45:a8:
37:2b:73:b3:a9:71:0f:13:fa:3e:10:d2:df:e5:5b:
b5:03:18:52:c6:2f:ef:3b:2e:9c:a2:44:63:c6:84:
36:11:64:ec:34:92:89:0a:9f:60:e8:cf:a1:28:1c:
c2:81:2b:03:32:20:68:e7:85:e0:e5:1b:c7:ab:39:
98:88:6a:f1:e3:e6:c8:c5:d5:e1:3b:92:d3:4b:3e:
2a:24:c2:1a:34:d0:b3:e9:bc:e5:f2:4f:44:10:4c:
8c:24:96:70:f2:b2:ab:17:fa:cc:e0:ac:ef:41:04:
de:a6:d6:31:20:8f:db:3f:36:f5:c2:f1:13:ca:8d:
3d:ba:94:2e:44:66:2b:34:ae:c6:e6:58:84:67:d7:
4e:c3:68:eb:9d:54:fc:0e:f0:61:82:bb:f2:f7:47:
68:2a:61:33:f6:bc:56:2e:f2:70:53:14:d2:22:93:
dd:3e:be:26:a2:95:3c:ad:d5:b7:91:5a:80:17:0a:
a0:37:55:ec:7f:59:cc:ac:80:95:57:1d:4f:f9:0f:
22:6b:e5:94:4e:84:28:67:28:04:ce:aa:14:af:2a:
fc:fe:8a:a5:33:0f:81:29:86:fa:e0:63:f1:9b:1b:
73:45:80:cb:ca:a8:56:c4:8e:72:d4:73:46:e2:9d:
5e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AE:C1:50:91:CD:EF:3E:21:F3:96:23:04:68:97:48:A2:AA:CA:B7
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:11:94:0a:31:43:52:0d:1d:4f:52:d7:16:30:df:76:5a:48:
da:0e:f8:c6:21:a8:88:d5:54:3f:35:ed:6c:15:2d:4d:28:24:
6f:15:17:eb:b4:4f:e4:93:f9:bc:ce:c4:c4:ad:48:cf:4d:5b:
7b:d0:71:aa:05:fb:5b:d8:ef:0e:d2:96:a5:40:74:9f:9d:6e:
7a:39:09:85:c2:56:0a:88:18:b0:66:65:2a:f7:64:5f:54:bb:
b2:50:14:e2:0f:4d:ff:a5:46:65:74:99:65:f1:f2:53:b9:7e:
0a:68:21:96:f7:14:c5:8b:5d:c4:92:e8:b5:a2:72:ac:ce:80:
0e:87:8f:80:d7:bb:a0:af:df:e7:c1:ae:c1:d0:ab:ef:f1:5e:
f8:5f:6e:59:f7:84:72:f0:e9:23:31:8a:df:01:9d:71:02:4e:
a5:55:d6:ff:8a:b8:cc:14:ad:26:11:cf:b6:ac:64:79:8f:82:
11:d3:e5:cd:95:14:3d:2b:95:42:ef:01:41:d4:88:ab:91:d5:
33:a6:c3:9a:33:4c:34:74:c6:a2:cf:a2:66:ae:11:30:ba:30:
26:2f:44:9a:d7:e4:55:0d:91:51:c6:3c:ae:b3:d0:78:c2:ae:
bb:d2:f1:e5:f2:cd:8e:01:1f:9f:6a:6f:b3:0c:1c:31:b3:9f:
4c:01:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:34 2026 by rpki-client