Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: JSoFBpx2tqBaxdyoMLfXUyeJApYUWc7/1r3/oxpPvSo=
Subject key identifier: 6B:A7:AC:55:A4:29:59:1E:92:A0:F6:1E:17:A9:E1:1D:F1:10:AF:F6
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019E1D905D56194A83C51CB79F4DCFB8C55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 17E5
Signing time: Tue 12 May 2026 19:01:00 +0000
Manifest this update: Tue 12 May 2026 19:01:00 +0000
Manifest next update: Wed 13 May 2026 19:01:00 +0000
Files and hashes: 1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=)
2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=)
3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: MwTbv+onzWROZ4XfXvcwJGxYi3y4rCGW3D1jSH8PqrE=)
4: u8aA0qjA-O7UgztUL0LUEuUa-vg.roa (hash: e32kTp0iMfkL2cHwmrb+4GT9jPTGLB332KvvWqfkeko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:5d:56:19:4a:83:c5:1c:b7:9f:4d:cf:b8:c5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: May 12 19:01:00 2026 GMT
Not After : May 13 19:01:00 2026 GMT
Subject: CN=6ba7ac55a429591e92a0f61e17a9e11df110aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:13:de:5a:e3:ba:d3:2d:bd:8a:1e:4b:03:84:
b1:51:33:9f:76:60:bf:25:c6:e2:e3:8a:44:99:c4:
2b:ab:49:04:de:68:e1:48:7c:ce:f4:c5:ce:80:d2:
c5:29:af:c9:b6:f8:57:27:88:2c:75:fd:06:0e:81:
0c:c3:6a:7f:38:96:2d:60:04:7d:64:34:eb:e6:a6:
e6:c1:dd:2c:7b:24:92:78:18:81:cb:07:a4:93:15:
1a:7a:95:38:4a:b0:f0:ee:a1:d8:e5:66:01:44:c1:
67:82:62:b1:8c:7e:5c:60:e4:56:9e:59:ad:d3:11:
66:f9:16:ad:81:b9:43:03:74:a7:37:a7:20:e5:fc:
44:9b:4a:3e:61:38:74:50:7d:49:40:fc:f3:c3:2a:
54:43:11:2d:3e:a4:02:2c:6b:17:fd:9b:05:9f:8a:
6a:79:34:71:1a:bc:ae:0e:34:8c:b8:ed:d6:50:b2:
73:33:ae:67:41:d6:dc:d6:5e:88:f8:14:80:99:cd:
3d:47:9f:49:75:81:2b:63:2e:92:1b:80:6e:5f:74:
59:98:63:81:33:4a:39:3b:c5:29:89:e1:c9:c6:f5:
9e:7f:3a:91:35:fb:32:de:d2:be:a2:37:32:7a:ee:
4f:a1:52:31:3b:4c:9b:be:b9:a2:80:57:5c:51:f7:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:AC:55:A4:29:59:1E:92:A0:F6:1E:17:A9:E1:1D:F1:10:AF:F6
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:51:80:f8:d0:12:54:6c:72:48:a5:42:e5:e7:72:b9:9a:43:
93:bc:57:aa:e7:e5:4c:17:6a:97:80:56:ce:c1:86:60:14:9b:
79:e9:69:ac:45:65:f3:d3:8d:2b:43:18:59:6a:5b:9c:fc:9d:
2c:2e:49:26:0e:ad:db:b7:ef:b9:ff:c6:62:ed:96:e6:d9:9d:
c5:cd:1a:4d:37:40:93:da:31:f6:fc:55:d3:06:91:f4:da:dd:
1e:99:47:b1:2b:c1:94:0a:2a:61:77:6e:e6:af:d2:9f:68:2c:
4f:1e:53:50:91:7a:7c:62:58:42:1a:01:46:09:63:89:a5:ab:
ac:8d:91:bb:ec:76:13:e3:ba:35:7a:06:ad:cc:28:c1:62:db:
89:31:de:e1:19:ce:68:3a:af:b0:86:b4:e4:2d:f6:b5:9c:27:
ac:82:38:e9:c1:00:e0:a4:9a:93:83:9f:6e:28:86:ef:06:94:
f9:37:bf:d9:ec:4a:c0:0a:85:c7:f5:59:8e:6f:0e:b2:41:6a:
15:13:19:ad:c4:43:d0:0d:b6:26:33:16:52:82:df:e4:ac:f8:
04:72:3a:13:b3:44:19:1c:9a:10:e3:28:49:8f:5a:fe:b7:57:
3d:e1:f1:00:84:17:d7:3b:59:38:09:0c:15:a0:a4:7d:b3:52:
5a:e6:a0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:11 2026 by rpki-client