Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: iXEgWoajBQ+9ZpIyT+utjnHae4lonNyEuZaKts/6yGk=
Subject key identifier: 7B:0D:CC:FA:A0:FC:87:F7:18:96:48:08:A6:70:0A:1E:E5:2A:26:8A
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 019D2B850AC29E1567D3775512316BA4812D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 119F
Signing time: Thu 26 Mar 2026 19:00:32 +0000
Manifest this update: Thu 26 Mar 2026 19:00:32 +0000
Manifest next update: Fri 27 Mar 2026 19:00:32 +0000
Files and hashes: 1: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (hash: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: /s+op9vURaUed8Ep+qjoY7XsGt99lJq4vtAfmunxbCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:0a:c2:9e:15:67:d3:77:55:12:31:6b:a4:81:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Mar 26 19:00:32 2026 GMT
Not After : Mar 27 19:00:32 2026 GMT
Subject: CN=7b0dccfaa0fc87f718964808a6700a1ee52a268a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:9c:18:72:07:ae:f6:14:ac:28:1a:57:0c:
ff:4c:a0:a7:67:4f:92:ff:0f:6b:13:a1:af:a0:da:
a4:2b:14:88:92:d5:9a:f2:58:03:d2:ac:76:0c:3f:
6b:ff:45:30:1c:c2:b4:da:43:fd:4d:16:28:8e:17:
9d:b9:71:85:f2:2d:91:33:f5:ab:15:a3:c7:82:27:
7d:5f:f0:72:0b:0c:fc:3c:e1:69:28:db:33:2d:38:
0e:76:0f:f3:f2:6b:99:39:97:a5:6f:c1:fe:e8:e6:
af:a3:c7:3a:3f:dc:c0:da:10:60:c4:88:50:b2:ea:
a8:97:f8:ef:fd:f5:3d:52:07:2a:3f:4e:ba:16:2b:
a1:8f:2c:81:28:88:ff:1a:6e:c6:35:b7:d8:73:34:
d3:20:7f:4f:61:c3:e7:76:2d:90:76:c0:5b:0f:d5:
5d:d2:a0:13:da:7d:13:20:a1:b7:3f:2e:3b:a4:a2:
b7:a8:08:5c:0e:4b:b0:2b:41:94:f0:2a:fa:89:be:
be:86:e1:96:9c:9b:81:08:6a:24:4c:3c:bd:e8:25:
68:2b:8f:12:04:5c:39:3b:fd:3a:c8:fa:41:4a:06:
60:22:c0:12:9a:f1:5c:f7:40:70:73:65:72:d0:dd:
70:14:c7:84:78:3b:15:3e:47:28:b6:4f:0b:36:0a:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:CC:FA:A0:FC:87:F7:18:96:48:08:A6:70:0A:1E:E5:2A:26:8A
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:70:a8:23:74:a4:0e:32:2b:c0:d5:36:66:f7:b9:20:6e:ce:
ba:51:92:1c:37:01:56:60:39:f9:87:f0:39:e7:41:be:05:14:
79:0e:c9:2d:41:fe:66:3f:9f:0a:05:d1:48:54:d6:05:4c:06:
26:39:71:bb:34:83:ac:1e:f4:b2:c5:7f:af:f9:ca:90:81:c0:
88:2b:0c:63:92:0a:4d:a9:96:ce:0a:8d:ef:2f:e8:0a:e7:8a:
98:6f:6e:51:2a:c8:8d:7b:86:a7:48:94:12:9e:9d:cd:ac:94:
ae:63:d9:d4:53:69:6c:71:64:d2:7d:4c:f3:b6:62:b4:53:fd:
49:29:25:3d:04:5b:b4:3d:85:3a:84:b6:15:12:ce:96:fe:b8:
f7:2e:38:57:fd:a0:2c:38:8f:99:7b:de:e1:6f:24:20:9e:a2:
96:e4:aa:ef:87:6f:50:28:2b:2b:d7:a7:72:80:e2:f0:f1:8b:
4f:e8:91:9f:57:be:72:5d:89:6c:88:86:18:d5:aa:17:31:7a:
e4:4a:dc:32:8d:93:b1:41:3c:6d:e9:e0:48:45:53:70:17:c6:
e3:75:90:c4:1b:e2:a5:77:91:23:5d:c4:68:bb:a2:7a:d0:51:
96:32:eb:fa:da:b1:3b:19:e3:ca:4a:3c:d0:ca:64:11:8e:70:
b1:24:71:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:16 2026 by rpki-client