Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: Lm/4w14rprcePRDlk1SKDfdChjOVjxzNQ26KJHlv/XA=
Subject key identifier: 25:70:E0:99:E7:59:E6:BE:04:7D:CF:FD:04:FA:02:E3:CF:BF:56:4E
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019D322C2D68E4464BB1FC130AB888B4B8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 02:00:49 +0000
Manifest this update: Sat 28 Mar 2026 02:00:49 +0000
Manifest next update: Sun 29 Mar 2026 02:00:49 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: K7MDdRv7iZFa9TqALXTMi8ZLTpTHVQ0VpaqA712Tz9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:2d:68:e4:46:4b:b1:fc:13:0a:b8:88:b4:b8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Mar 28 02:00:49 2026 GMT
Not After : Mar 29 02:00:49 2026 GMT
Subject: CN=2570e099e759e6be047dcffd04fa02e3cfbf564e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:c9:52:21:1f:8e:b0:48:9f:f8:ef:5c:47:
17:c8:7e:22:51:87:71:9e:cc:26:20:e5:f3:23:3f:
20:cb:39:6e:43:9d:9e:00:b1:3b:57:32:6c:0d:d1:
6d:d4:25:0e:42:e7:37:1f:e4:38:55:4d:d0:17:9c:
69:37:52:ba:9a:f4:aa:0d:3f:d0:96:bf:3e:a1:0b:
3d:5a:10:1f:f3:34:3c:e2:17:65:58:cf:a5:bb:c7:
c3:8a:e9:13:a5:a5:72:62:32:cf:19:96:b1:14:df:
b8:b3:fe:69:b2:98:2b:5b:ee:1a:55:e8:20:b1:db:
7d:29:88:46:77:97:7c:65:7a:82:aa:8f:ba:eb:9a:
c8:d4:99:a9:ee:15:ca:ae:43:6f:4e:42:f8:44:62:
d1:19:e3:63:e3:6e:aa:8b:13:ec:39:9c:98:39:95:
ee:79:76:5a:48:1a:49:86:74:a7:5f:d3:d9:96:f9:
81:b8:e1:b4:99:22:43:64:09:87:f8:a5:ab:14:0c:
77:77:a8:49:b6:4b:e1:54:c3:90:a7:63:a0:bd:73:
21:4e:dc:23:6c:ac:66:56:76:54:7d:eb:19:0d:a1:
40:da:bc:6a:16:30:20:25:51:5f:c3:df:71:c5:91:
b2:3f:21:af:bf:62:f3:80:7f:12:43:6f:1e:d5:71:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:70:E0:99:E7:59:E6:BE:04:7D:CF:FD:04:FA:02:E3:CF:BF:56:4E
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:08:72:2f:da:4a:ac:69:ad:cf:5a:de:e2:68:aa:bd:dc:97:
50:3e:ba:ae:eb:d7:2a:f9:9f:60:a9:ff:0b:eb:68:79:9e:39:
0e:1b:25:52:62:c4:f4:d7:15:6b:5e:29:fe:e4:53:e5:e1:f6:
8b:7f:c7:9f:bf:87:ba:31:c6:74:3e:48:0b:b5:9f:86:39:6c:
30:78:5c:bf:10:35:24:9b:71:26:d1:45:4f:95:6c:72:c5:b2:
68:0b:0b:19:c3:ec:c1:36:52:89:83:10:49:57:d8:f6:00:66:
ec:b7:fb:71:42:92:f9:32:79:e3:d8:28:59:e9:7c:81:55:f8:
10:50:51:78:4e:a4:6c:be:16:82:23:ae:f8:bf:e6:99:61:91:
95:ec:78:f2:32:2d:c3:d8:01:a4:1e:8c:41:46:23:1b:a6:1e:
9c:aa:05:6e:66:32:0f:b0:f7:83:fc:43:4e:b4:db:62:70:a1:
2a:28:3c:42:f3:df:fe:72:2b:48:a3:eb:41:e9:bc:39:df:0d:
9a:dd:69:48:32:c7:7a:07:73:34:a4:3c:70:61:17:fb:6f:44:
a5:cc:fc:64:02:c9:14:59:04:71:51:0b:4b:bd:6f:d8:15:c8:
22:a3:f8:03:f8:e1:26:2c:8d:a2:41:bd:7d:94:77:1a:37:0e:
66:79:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:36:45 2026 by rpki-client