Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: epFFsaEd1UTPi5dOB8qEWZ4ACVLZBydGRuzWQ0gt/oc=
Subject key identifier: C0:69:D9:F9:BB:5A:E2:DC:8A:9E:2F:FA:12:FF:19:74:67:9E:EE:D6
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 01A08AC3C962668B46C3ECA374AA99B31787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1A60
Signing time: Thu 10 Sep 2026 10:01:21 +0000
Manifest this update: Thu 10 Sep 2026 10:01:21 +0000
Manifest next update: Fri 11 Sep 2026 10:01:21 +0000
Files and hashes: 1: Gl6nscEbuwxlhw6IyHzvgXxRljA.roa (hash: AA68brDB6Rz3mYLHYI9epwbmVOwfLXw3fS9hyfIcyJM=)
2: pAa4twbgch_NoibL7fcENGRZDqc.roa (hash: bT577lKWRgaDRixbmeW8XPo7ur0o3DBiy64cY6iV2LU=)
3: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: 8oeDWs0YwFr/UVSN9oDKTvAtGUchiCmdAVf8COMm5hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:c9:62:66:8b:46:c3:ec:a3:74:aa:99:b3:17:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Sep 10 10:01:21 2026 GMT
Not After : Sep 11 10:01:21 2026 GMT
Subject: CN=c069d9f9bb5ae2dc8a9e2ffa12ff1974679eeed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:ed:f4:95:5c:f1:07:1f:43:2e:a5:90:cb:
ab:33:55:3c:91:b0:6d:b4:e6:da:c9:8e:1e:75:41:
f5:ba:46:5c:0b:0b:fd:ee:a5:a1:7a:96:39:a5:b4:
b0:e2:c4:63:df:f1:34:eb:a5:10:f9:92:d5:42:10:
15:82:34:6b:01:8a:20:6e:ef:80:da:aa:fb:44:51:
17:5b:9d:36:7f:e2:5e:0a:77:61:e9:ca:86:01:9b:
94:32:12:51:17:c9:15:17:c0:b9:7d:92:73:ae:e4:
54:6e:fc:f0:79:46:6a:ca:90:28:3e:e0:e3:27:79:
8b:5b:f3:bc:8d:fd:0a:a1:8e:63:57:08:4b:e2:89:
0f:e3:ba:fb:8c:36:e2:0e:c1:c8:47:8a:c6:b2:5b:
21:49:c2:89:4f:b7:ca:8a:7b:60:dc:c1:5d:18:09:
80:d1:90:c6:fc:bc:18:f4:a3:87:3a:d3:06:6b:3f:
c5:df:2a:78:0b:d0:3d:00:c9:bb:8d:cc:81:fe:50:
23:e1:a0:4a:bd:76:97:ab:01:29:a6:07:31:a9:f6:
35:b2:ce:83:15:76:50:15:56:24:29:fe:b3:45:5e:
b1:55:a0:66:b0:56:fc:7a:40:65:c4:03:14:fd:0c:
db:cf:68:f9:68:13:99:b3:14:51:bd:18:f3:3e:32:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:69:D9:F9:BB:5A:E2:DC:8A:9E:2F:FA:12:FF:19:74:67:9E:EE:D6
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3a:47:38:8f:f3:51:57:ab:38:1c:f1:84:ab:5d:59:56:30:
92:a3:73:af:e3:75:84:1d:95:37:12:82:3b:c5:63:7b:70:21:
ca:08:57:8a:43:a2:03:42:ce:bf:1f:d1:f7:90:a7:98:b7:cd:
af:f9:4e:5b:db:a6:fa:f7:e1:24:b5:04:2b:49:85:5c:03:d7:
31:e4:76:30:4a:ab:eb:d1:12:05:76:c7:d6:37:cc:b5:18:fb:
61:32:79:db:a4:6c:1f:06:6b:f9:48:3e:95:d8:44:4d:55:12:
da:9e:54:14:5b:99:53:80:79:fe:c6:3c:7e:a7:de:16:82:bb:
25:fc:d5:3b:e0:16:d5:cd:f4:5a:12:4a:42:f3:da:48:a5:da:
96:a5:7f:8d:99:0f:2c:0d:92:21:0e:08:2b:eb:c5:7f:e8:41:
33:03:9b:13:f2:b7:88:f4:d8:94:d3:6e:a7:f7:02:41:3c:f4:
9b:e8:45:83:6f:04:eb:53:31:36:06:64:25:cc:b7:a0:29:90:
d0:0d:32:7f:e4:8b:9e:c4:66:0d:06:de:0a:9d:bd:c8:1f:7f:
ea:d4:84:25:eb:75:92:a4:89:2d:35:86:da:5e:28:a3:0e:af:
69:9e:43:03:e3:da:62:13:21:ec:1d:81:ed:98:a4:8b:69:f3:
4b:1b:ee:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw8liZotGw+yjdKqZsxeHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwOTEwMTAwMTIxWhcNMjYwOTExMTAwMTIxWjAzMTEwLwYDVQQD
EyhjMDY5ZDlmOWJiNWFlMmRjOGE5ZTJmZmExMmZmMTk3NDY3OWVlZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqjt9JVc8QcfQy6lkMurM1U8kbBt
tObayY4edUH1ukZcCwv97qWhepY5pbSw4sRj3/E066UQ+ZLVQhAVgjRrAYogbu+A
2qr7RFEXW502f+JeCndh6cqGAZuUMhJRF8kVF8C5fZJzruRUbvzweUZqypAoPuDj
J3mLW/O8jf0KoY5jVwhL4okP47r7jDbiDsHIR4rGslshScKJT7fKintg3MFdGAmA
0ZDG/LwY9KOHOtMGaz/F3yp4C9A9AMm7jcyB/lAj4aBKvXaXqwEppgcxqfY1ss6D
FXZQFVYkKf6zRV6xVaBmsFb8ekBlxAMU/Qzbz2j5aBOZsxRRvRjzPjKTnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBp2fm7WuLcip4v+hL/GXRnnu7WMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjpHOI/z
UVerOBzxhKtdWVYwkqNzr+N1hB2VNxKCO8Vje3AhyghXikOiA0LOvx/R95CnmLfN
r/lOW9um+vfhJLUEK0mFXAPXMeR2MEqr69ESBXbH1jfMtRj7YTJ526RsHwZr+Ug+
ldhETVUS2p5UFFuZU4B5/sY8fqfeFoK7JfzVO+AW1c30WhJKQvPaSKXalqV/jZkP
LA2SIQ4IK+vFf+hBMwObE/K3iPTYlNNup/cCQTz0m+hFg28E61MxNgZkJcy3oCmQ
0A0yf+SLnsRmDQbeCp29yB9/6tSEJet1kqSJLTWG2l4oow6vaZ5DA+PaYhMh7B2B
7Ziki2nzSxvupw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:57:15 2026 by rpki-client