Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: EkKOk/nHwXUYCbkeVq+3QqcEXVQG19+TfoPYXogfaJk=
Subject key identifier: FA:9D:33:AB:6C:1F:4F:D0:EA:3A:0A:45:C2:98:2E:E6:ED:04:5F:D9
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019E1FB5A80904DAFD81D954ED3121B6D835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 05:00:59 +0000
Manifest this update: Wed 13 May 2026 05:00:59 +0000
Manifest next update: Thu 14 May 2026 05:00:59 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: wIom3tXPbXOOLYDN7uSLhzkNb7NNjm8SWFOSkmd7DUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:a8:09:04:da:fd:81:d9:54:ed:31:21:b6:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: May 13 05:00:59 2026 GMT
Not After : May 14 05:00:59 2026 GMT
Subject: CN=fa9d33ab6c1f4fd0ea3a0a45c2982ee6ed045fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:7e:0f:81:76:54:84:a4:7d:70:7f:f9:a1:
25:f4:9b:c5:fd:bd:c6:e5:f6:3c:64:f5:be:f0:36:
b8:c2:44:e7:32:cf:d0:d8:e2:0e:ae:79:21:9b:41:
e9:80:4f:e0:51:9f:fe:34:8a:20:9b:67:d5:42:0d:
1e:e5:94:d1:37:0e:17:68:69:d4:b6:81:11:53:cd:
57:f8:2f:30:01:df:38:24:1e:e1:8e:dd:01:65:bd:
0c:ff:d9:52:ec:0e:42:4c:9f:46:79:c8:62:4a:83:
09:02:b4:43:07:8d:97:4b:62:00:72:7b:62:e5:48:
da:73:85:dd:dc:b6:17:5b:40:b4:7f:66:e1:8b:56:
69:31:99:98:04:37:cd:d5:47:f8:a7:11:e0:fe:32:
52:3b:c9:e0:56:a6:4f:d9:41:d5:fe:f0:aa:84:b4:
b0:31:4d:c4:b9:a6:f1:e9:9e:fc:74:96:0f:12:56:
6a:89:7b:ac:25:9b:98:7c:43:a3:49:93:fd:dc:8f:
b7:0d:68:c3:7a:73:c4:8a:4f:51:9a:0a:c4:fb:f9:
f6:c5:24:99:2a:ee:3d:d2:a6:12:14:e4:5f:d5:15:
33:06:2a:13:d0:6b:58:29:eb:10:3f:4b:be:08:97:
47:b0:f5:cc:17:f5:a1:53:90:bb:26:01:4c:f4:dc:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:33:AB:6C:1F:4F:D0:EA:3A:0A:45:C2:98:2E:E6:ED:04:5F:D9
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:34:a5:df:81:b3:0d:81:4c:ee:50:fe:c9:aa:7a:eb:45:06:
51:0f:e3:bc:68:30:9a:00:43:78:19:96:6f:52:2f:66:a1:e4:
f4:ed:05:37:0a:cf:ea:f0:fb:bd:35:37:d3:17:3c:f3:0c:33:
79:e6:71:76:ee:59:bc:66:07:75:59:66:ac:2b:24:45:8a:e5:
01:4f:51:8b:ce:54:c1:dc:de:dd:77:92:fc:ea:34:48:f0:a5:
9a:ec:89:2f:2c:7b:42:d3:80:37:d8:41:4e:b7:2e:0d:74:85:
66:30:b5:e6:16:8b:85:a5:29:bd:dd:db:1a:b8:0c:9c:c7:df:
2f:a6:92:cf:75:3c:b0:b6:d6:e3:1d:73:d2:0c:db:b1:20:b2:
32:5d:aa:75:c5:50:d6:30:b6:ca:66:c3:e5:fd:e0:a9:e1:52:
81:86:46:66:f4:74:26:05:f6:5f:18:11:4b:78:7b:81:d5:f1:
40:ee:6c:76:3a:54:74:e9:f6:79:5b:54:d9:dd:1d:ed:f8:d2:
63:97:9f:19:d1:0f:8a:03:f5:36:b8:82:8e:df:dd:f6:91:b1:
25:f7:b0:b4:9e:f3:68:a2:8d:ab:d9:14:67:d5:25:18:5d:61:
73:e4:8d:5c:ae:ad:b9:54:41:3a:39:fd:08:bb:cc:e4:c6:63:
c7:ff:70:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftagJBNr9gdlU7TEhttg1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx
OGU5MDMwHhcNMjYwNTEzMDUwMDU5WhcNMjYwNTE0MDUwMDU5WjAzMTEwLwYDVQQD
EyhmYTlkMzNhYjZjMWY0ZmQwZWEzYTBhNDVjMjk4MmVlNmVkMDQ1ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfl+D4F2VISkfXB/+aEl9JvF/b3G
5fY8ZPW+8Da4wkTnMs/Q2OIOrnkhm0HpgE/gUZ/+NIogm2fVQg0e5ZTRNw4XaGnU
toERU81X+C8wAd84JB7hjt0BZb0M/9lS7A5CTJ9GechiSoMJArRDB42XS2IAcnti
5Ujac4Xd3LYXW0C0f2bhi1ZpMZmYBDfN1Uf4pxHg/jJSO8ngVqZP2UHV/vCqhLSw
MU3Euabx6Z78dJYPElZqiXusJZuYfEOjSZP93I+3DWjDenPEik9RmgrE+/n2xSSZ
Ku490qYSFORf1RUzBioT0GtYKesQP0u+CJdHsPXMF/WhU5C7JgFM9NzDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqdM6tsH0/Q6joKRcKYLubtBF/ZMB8GA1UdIwQY
MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt
MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi
LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzSl34Gz
DYFM7lD+yap660UGUQ/jvGgwmgBDeBmWb1IvZqHk9O0FNwrP6vD7vTU30xc88wwz
eeZxdu5ZvGYHdVlmrCskRYrlAU9Ri85Uwdze3XeS/Oo0SPClmuyJLyx7QtOAN9hB
TrcuDXSFZjC15haLhaUpvd3bGrgMnMffL6aSz3U8sLbW4x1z0gzbsSCyMl2qdcVQ
1jC2ymbD5f3gqeFSgYZGZvR0JgX2XxgRS3h7gdXxQO5sdjpUdOn2eVtU2d0d7fjS
Y5efGdEPigP1NriCjt/d9pGxJfewtJ7zaKKNq9kUZ9UlGF1hc+SNXK6tuVRBOjn9
CLvM5MZjx/9wTg==
-----END CERTIFICATE-----
Generated at Wed May 13 10:53:44 2026 by rpki-client