Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: bmOr75GhPMn2a7zKGpmdISNA/cLuDjZeVKprkAepgJ4=
Subject key identifier: D0:9B:B4:DF:2F:25:A3:E6:1D:4B:C7:A9:A2:A9:ED:91:6E:A5:EB:06
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019D2884483433BECDFD30924254C248689C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 05:00:50 +0000
Manifest this update: Thu 26 Mar 2026 05:00:50 +0000
Manifest next update: Fri 27 Mar 2026 05:00:50 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: BcX1zWmRZ5d3JazTaJJ8wVePjcB13ijS7pbcluuTO0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:48:34:33:be:cd:fd:30:92:42:54:c2:48:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Mar 26 05:00:50 2026 GMT
Not After : Mar 27 05:00:50 2026 GMT
Subject: CN=d09bb4df2f25a3e61d4bc7a9a2a9ed916ea5eb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3d:e2:55:1f:53:de:69:b6:a5:a7:79:02:9a:
e4:c1:7f:9d:9c:f2:8e:fc:74:33:6c:00:c7:7e:5a:
ff:a4:b3:e5:03:53:dc:8e:e7:f7:67:e7:21:ee:d7:
f7:92:48:7f:db:02:1c:bf:05:ea:02:25:ec:99:13:
fe:49:fb:fa:93:d5:8a:6d:bc:87:a7:c4:16:79:87:
8f:bb:4d:60:96:90:a4:3b:50:95:79:cf:cf:a9:00:
27:45:51:f2:66:81:b7:10:79:30:ad:56:af:ef:99:
ed:1c:ac:41:42:0c:29:c7:67:1d:cf:9a:42:67:8b:
5b:db:ca:2f:b6:82:ed:b7:44:cf:dd:d3:ad:2c:4e:
2f:d2:bc:b2:9a:aa:ec:82:45:2c:02:69:39:e2:1c:
b0:55:4f:f4:91:e2:2d:36:e5:31:a8:ba:b7:4e:10:
ce:f0:2c:f9:aa:ac:cc:b2:ce:84:a9:f9:88:cd:b0:
40:99:43:b7:04:f4:69:14:2a:52:21:ba:9e:14:1a:
46:c9:95:8b:d5:46:8d:c6:3f:30:f1:25:72:4a:eb:
84:a1:ce:1b:53:ed:0b:ef:f6:a6:88:16:ec:4b:71:
aa:aa:69:0b:36:2a:83:1e:db:7b:c6:7a:18:ca:51:
37:a8:4d:b3:09:28:44:8b:9b:02:e9:d1:1a:01:59:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:B4:DF:2F:25:A3:E6:1D:4B:C7:A9:A2:A9:ED:91:6E:A5:EB:06
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:79:5a:eb:75:e6:c5:85:0b:94:e3:ec:00:c1:ec:b0:a1:3e:
54:c1:74:bc:44:9f:b8:55:82:6a:64:ad:a6:08:24:bf:63:4b:
81:8c:2a:c9:32:12:6e:9e:6b:35:0a:30:ad:5f:0e:be:3c:d8:
78:74:f1:3f:9f:06:20:5c:5c:0a:4d:76:f5:67:28:9b:a2:d4:
a0:d2:b7:f3:4f:a2:e3:e9:18:b8:fa:62:ff:59:ad:e5:9e:14:
56:48:cd:b5:b9:ab:6c:83:53:76:b1:04:7a:c7:f4:1a:8c:32:
29:bd:c6:ad:4a:47:67:ed:f6:59:f4:ee:32:93:0e:4b:2d:31:
b4:54:75:a5:b1:5e:c0:b7:74:7d:78:0b:67:27:b4:42:a3:81:
45:7f:74:5e:a8:68:af:58:ac:71:6d:3c:f9:1c:81:43:24:4b:
1d:17:69:b6:e3:ae:1b:41:72:8c:b0:70:d0:45:e7:34:17:8f:
d4:bb:72:c7:26:96:82:72:23:82:9e:89:27:de:aa:3e:26:df:
fd:11:f4:ab:22:8f:02:fb:4e:61:9b:71:a6:ac:0d:26:bb:a2:
ca:03:fb:60:a0:03:78:be:94:85:2e:a8:79:0f:76:cd:ed:96:
18:a0:5e:20:d7:0e:4c:05:da:de:57:6d:8d:d4:38:c4:71:53:
04:b3:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:38 2026 by rpki-client