Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: K/A55tg9Kx35dHzCWscT59XFfdJnh39A1hx/htldInI=
Subject key identifier: E2:D3:25:F6:CF:2E:4D:D7:D9:AB:4D:CE:5C:71:E5:C1:3F:1F:B6:ED
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019D2884A354BA89140B40B130573D310B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:01:14 +0000
Manifest this update: Thu 26 Mar 2026 05:01:14 +0000
Manifest next update: Fri 27 Mar 2026 05:01:14 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: qkYiUpWDsgTQb3Y6yA7g9thJG6zuYi1ekcz6JneMGH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a3:54:ba:89:14:0b:40:b1:30:57:3d:31:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Mar 26 05:01:14 2026 GMT
Not After : Mar 27 05:01:14 2026 GMT
Subject: CN=e2d325f6cf2e4dd7d9ab4dce5c71e5c13f1fb6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f0:47:89:04:6d:39:a0:f1:95:2d:99:f3:b0:
73:23:bf:9d:6b:ce:3d:34:23:f4:6b:49:74:57:8e:
9f:29:68:8e:30:d9:ec:23:6c:39:86:a8:77:a6:ed:
b1:ad:22:f0:38:9c:ed:a6:3e:cc:df:22:5d:a3:5f:
e5:e9:a3:e7:af:49:1a:d7:38:d9:75:14:31:80:56:
c1:6b:c9:77:ff:3e:d2:2f:6b:a5:77:ba:41:04:a5:
88:a6:0f:93:da:5d:43:7f:8d:f5:1b:25:46:35:46:
45:2a:ab:41:95:cd:e0:98:af:08:3e:e6:91:eb:c3:
25:4e:46:04:1c:25:6c:2e:a9:a6:8e:4e:ea:ba:c8:
d3:6c:2e:33:eb:91:a3:dc:4b:0d:e4:d7:2a:a5:1a:
ec:fe:80:51:91:81:b0:49:f2:3b:a7:8e:dc:a0:b7:
3a:39:10:7c:b6:0f:10:f9:aa:d5:b8:e3:5f:71:f6:
40:7d:ed:6d:43:64:50:59:81:ac:f3:7b:34:24:dd:
98:3f:27:1e:9a:48:63:1d:98:56:96:ab:c6:c4:c8:
19:75:47:56:dd:4a:1b:1e:13:63:be:72:ec:a5:2d:
48:bf:8b:85:4e:eb:d4:12:63:96:60:08:67:f5:a1:
2d:4d:e2:d4:c4:61:ec:ba:09:43:dd:3c:d5:1f:8f:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:25:F6:CF:2E:4D:D7:D9:AB:4D:CE:5C:71:E5:C1:3F:1F:B6:ED
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4c:bd:d8:26:6d:fc:3b:9b:28:a1:22:f1:b4:ba:53:28:97:
06:70:a5:9b:c5:fb:a6:08:3c:08:40:87:f9:4a:2f:a9:41:85:
43:0c:2e:b3:0a:14:82:1c:47:8e:bc:c4:e8:f0:f9:84:cd:d6:
9f:9a:fc:99:8f:f0:48:bf:a4:71:1e:ac:d2:af:4c:6c:8e:7b:
0b:87:76:c8:6a:fa:18:a7:81:0e:8b:e1:4f:f6:b0:8a:24:fe:
35:0d:77:7d:b7:ab:aa:a9:6d:b5:f6:01:d4:ca:f2:21:3a:a6:
4f:1c:b5:4d:10:08:37:92:57:b5:81:07:6e:b2:23:c5:83:32:
a0:f8:e2:5f:02:96:5a:e7:24:26:59:6c:eb:dd:79:36:48:08:
c4:65:c3:4f:5c:1d:d2:7b:78:56:27:0b:db:64:7c:01:59:0e:
40:27:72:71:7c:b0:9f:87:e0:ea:07:12:da:b1:ef:32:c1:bf:
6e:92:ab:45:da:94:4f:0a:17:dd:f2:37:0b:f3:06:f4:a8:f1:
81:9a:9a:f1:36:3c:99:84:29:6f:c9:3f:fe:2a:b7:f8:e1:d6:
00:f4:ad:d0:21:ca:81:44:ba:80:78:c1:4b:54:33:d5:1d:fe:
11:b4:a7:25:e9:b1:76:9a:73:73:ce:62:c6:e9:27:c2:45:f9:
76:bb:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:06:14 2026 by rpki-client