Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json)
Hash identifier: ldWRVLqAECUDOdp/JZ+kxUIeILmc3YWNMjcclT7uXYg=
Subject key identifier: FA:B5:32:D0:2D:3C:1A:8F:6A:6A:B4:59:65:B5:AF:A3:87:A6:66:6F
Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4
Certificate serial: 01A139001FD7B0ED1816C7ABAF3449093E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 06:01:11 +0000
Manifest this update: Wed 14 Oct 2026 06:01:11 +0000
Manifest next update: Thu 15 Oct 2026 06:01:11 +0000
Files and hashes: 1: 3dXQNTeYEXwgMvCj--w5pPENAJU.roa (hash: 3G9QvRM4k9jqWeSWNLfEsowBkk0Z8XBxLLqfEHkaBDM=)
2: b9cInp7Or1qBr9PuhesAeLquPqQ.roa (hash: 4GENDH+hUgF++1KALJEHVMXlXhH/iPfvsuAOj33raco=)
3: hS7RgT3aGNpjDg2o5zlqkEAGb90.roa (hash: ruxCN88xcOgn5K5hz1rXwR19nQEArZ1nYrpc6XCrIWE=)
4: pUeHHF4pC4-zIRXO_grSASp1OfM.roa (hash: kn9V/PD8fwcG7V/Q9LK/O7MAEpNrkEsY4bQFNUkSntc=)
5: tm-0BywjpYQ_JdG102XSdl2PwkI.roa (hash: DKW7dfG1+ENLwCJlJJ+O62vn9P7SrAjIIPIC1AGnTVc=)
6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: A8Rq7v2tkvuDbNOU7paJOTDkrdf0p89Ef1PLU7V3+vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:00:1f:d7:b0:ed:18:16:c7:ab:af:34:49:09:3e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4
Validity
Not Before: Oct 14 06:01:11 2026 GMT
Not After : Oct 15 06:01:11 2026 GMT
Subject: CN=fab532d02d3c1a8f6a6ab45965b5afa387a6666f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ae:ca:b3:0e:28:c8:69:77:b6:10:95:c2:d5:
06:28:76:0f:91:b2:7f:20:18:77:86:ef:c6:a6:bb:
df:c2:ce:f1:2f:8d:3c:72:fd:ff:9c:66:52:99:d9:
52:41:49:c1:61:c3:02:3d:66:f0:d7:cc:1c:ce:4d:
36:8e:29:01:09:a6:6e:34:24:82:a9:55:af:f3:c1:
af:cc:35:ee:09:af:c7:8f:7c:d9:99:72:7f:48:bb:
a4:2b:d1:d5:a0:87:f9:b2:f5:0f:02:0a:ab:f8:05:
f3:38:54:4f:52:9b:a7:a5:2c:9a:c5:e2:36:13:76:
a1:67:c4:59:88:08:23:e1:3d:4d:74:d5:f5:e0:ae:
1a:a8:e8:35:ab:fc:d4:38:b6:23:5b:34:43:47:d1:
1f:cb:61:c6:d2:6f:64:5a:31:94:6b:9d:b3:16:be:
8b:1c:ce:f0:2f:7b:95:ca:19:5a:f2:2f:6e:e6:4b:
51:60:e5:66:de:4a:b7:00:95:1f:f5:2f:0d:6a:b1:
2b:18:90:f8:d7:36:66:5a:cd:0b:c9:a4:7c:e7:c7:
b5:68:ee:3c:1c:0b:f5:52:4d:71:51:41:35:ed:0a:
39:35:78:92:3d:91:fb:09:68:45:04:08:d7:71:6b:
0f:57:f1:5f:53:bc:fc:ba:35:b5:01:21:4d:a4:d1:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:32:D0:2D:3C:1A:8F:6A:6A:B4:59:65:B5:AF:A3:87:A6:66:6F
X509v3 Authority Key Identifier:
keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:22:55:2a:1a:fa:9c:ea:ac:03:a7:85:31:ac:4c:73:ef:6a:
db:a5:d5:58:78:bd:58:0d:ee:80:98:e5:ce:02:82:7b:8b:7c:
06:d0:82:79:83:56:4b:2a:8a:fe:28:41:7f:0f:2d:24:e3:d2:
38:c2:42:c4:66:ed:23:30:3c:c6:b7:c8:1b:9e:5d:b6:28:81:
6a:fc:a6:74:57:d3:69:3d:6c:03:46:0f:1a:af:47:1a:86:9c:
e5:54:94:3e:cf:8f:47:49:5b:3a:93:c9:23:cd:8a:6e:4e:e3:
7e:b7:d4:45:6f:50:b8:3e:e6:d1:eb:fd:2d:3c:6d:e4:a1:f4:
51:13:ac:0c:66:f4:d7:51:50:84:0f:b7:1b:5d:a1:7a:73:15:
1c:d0:9d:af:c1:8b:b1:d8:63:be:63:05:6d:e3:84:14:19:74:
f9:c7:04:37:6b:ab:55:a4:3a:6a:87:4d:7a:03:e0:45:5b:81:
52:4f:7f:f8:76:62:54:d0:cd:0b:c2:79:1f:52:f3:ce:b7:39:
e7:3e:39:03:7c:6d:f7:40:7b:e8:00:4b:d9:c1:f1:94:fa:45:
39:ca:13:ec:59:14:00:c5:ef:06:2b:ba:21:6b:f1:87:55:6f:
1c:87:60:78:9f:23:84:f7:b0:0d:36:d3:64:20:09:f0:df:ce:
f2:24:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:58:38 2026 by rpki-client