Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
File: un1KwTROw43OmXaNeKEU6_fxfYU.mft (raw, json)
Hash identifier: DuZDCjRLSO+6tYKcxDX/ATee+RerI4ayHylkvhAhWrU=
Subject key identifier: 17:32:30:E4:50:09:6F:A4:23:E5:AF:CC:7E:AC:35:E4:86:1D:86:08
Authority key identifier: BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
Certificate issuer: /CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Certificate serial: 01A186761CC415BB3A50B8E00009B6DBB59E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
Manifest number: 1183
Signing time: Thu 29 Oct 2026 07:00:49 +0000
Manifest this update: Thu 29 Oct 2026 07:00:49 +0000
Manifest next update: Fri 30 Oct 2026 07:00:49 +0000
Files and hashes: 1: o1To2AOAuoLP-nWNuTs68gOKGAE.roa (hash: IQkZrzowlCF0UtrbBWeIReby2n7O6GCUFgToo++Y5B0=)
2: un1KwTROw43OmXaNeKEU6_fxfYU.crl (hash: B+Ee+2ll8GfMgwMKAajaGa71iPyZiDxTcY5M/IF2awA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:1c:c4:15:bb:3a:50:b8:e0:00:09:b6:db:b5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7d4ac1344ec38dce99768d78a114ebf7f17d85
Validity
Not Before: Oct 29 07:00:49 2026 GMT
Not After : Oct 30 07:00:49 2026 GMT
Subject: CN=173230e450096fa423e5afcc7eac35e4861d8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2d:e8:d8:be:71:56:63:a3:e6:8c:d0:5a:c8:
bb:e5:71:1a:6e:4d:23:7d:ee:65:7d:a1:18:fd:2a:
d7:b8:64:e5:eb:22:85:89:07:b8:6e:18:7b:97:5a:
f5:dd:0b:b8:04:11:5e:d3:08:45:4e:72:46:0a:70:
37:84:ba:37:ef:a3:97:61:31:8a:0a:c3:e7:97:08:
d8:5f:ea:9d:be:c8:37:7a:80:64:35:4d:7e:0f:f2:
10:15:89:0f:d7:42:3c:df:1e:5b:2d:95:c9:35:58:
14:74:cd:91:31:67:95:47:8d:e6:0a:10:56:d1:89:
0b:7f:a4:32:f2:f5:84:de:b0:9a:dc:ee:1f:00:f5:
1a:90:34:bf:f0:b0:6a:2d:b6:b8:05:6b:0d:0f:80:
9e:f9:ee:62:28:83:01:9d:b1:bc:18:88:52:ff:2e:
5c:1e:48:e9:19:98:3c:9d:83:79:f3:5c:41:41:9f:
7b:34:63:c9:fc:cf:c4:94:79:45:23:46:d2:e1:fb:
27:aa:8e:22:68:32:27:04:48:a0:34:58:2a:47:b9:
e7:19:da:22:6e:96:f5:2d:7b:8c:ab:62:4e:e2:55:
16:1d:f6:ff:94:b5:47:f2:e5:5e:02:b9:d3:86:ee:
74:a4:74:fe:89:cc:4f:87:14:3b:91:ca:26:c3:b5:
e8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:30:E4:50:09:6F:A4:23:E5:AF:CC:7E:AC:35:E4:86:1D:86:08
X509v3 Authority Key Identifier:
keyid:BA:7D:4A:C1:34:4E:C3:8D:CE:99:76:8D:78:A1:14:EB:F7:F1:7D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/un1KwTROw43OmXaNeKEU6_fxfYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b66125-6844-4a87-9bb5-af42623ea431/1/un1KwTROw43OmXaNeKEU6_fxfYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:12:dc:b8:a9:f8:ac:27:25:ae:68:d7:6d:9a:78:4a:d3:17:
6b:3d:e0:c5:f2:76:86:bd:84:f8:17:cc:45:80:19:56:f7:7f:
e2:9d:19:68:67:bb:86:a3:bc:db:3c:51:e7:33:12:8b:96:86:
1f:b0:27:af:48:34:e7:92:7a:29:da:2c:74:3a:11:6d:de:da:
70:9e:c6:40:9c:9b:1b:0d:a8:e1:e2:df:d2:83:58:5d:ea:60:
e4:d2:c4:a8:85:fd:b8:ca:99:69:a7:b6:a0:d7:7d:7d:8f:b3:
ea:00:00:f1:c2:e8:ab:44:91:35:72:61:ff:35:42:86:be:0c:
fb:24:cc:38:aa:5e:8c:31:3d:9d:eb:00:7e:29:19:30:3e:fb:
8c:0a:7b:4b:e3:d6:34:d5:8f:a8:00:f0:1e:07:a6:40:fc:32:
21:a4:fd:bd:b3:c3:0d:a5:be:79:f5:a3:9b:2c:88:c5:af:cb:
11:bb:e2:ce:5c:9b:4e:8a:1b:a6:b5:2a:c6:ca:96:94:74:31:
13:8e:12:6f:a8:53:b7:06:fe:d8:87:cc:66:bf:a9:36:e0:5c:
12:4c:e3:6e:3d:86:03:5d:68:f4:d3:4b:fd:a8:05:be:68:1e:
f7:eb:47:17:01:e7:62:c1:e8:08:3c:1c:15:49:a1:fd:3b:b7:
ae:d6:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:48:34 2026 by rpki-client