Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: /bU4PNYBPHDFjTzRocy88Z3bXjIIje3Q64mkRSWanTQ=
Subject key identifier: 66:06:49:1D:66:13:BD:EE:D6:C0:EE:1F:BB:0A:F5:D7:46:CA:D8:7C
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019D27A87768B233CEF1F4BEA1D2A4D29387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 189C
Signing time: Thu 26 Mar 2026 01:00:45 +0000
Manifest this update: Thu 26 Mar 2026 01:00:45 +0000
Manifest next update: Fri 27 Mar 2026 01:00:45 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: tAemIb2+x4b6R/LViab9CnM0N4jbMQu235zH6Eu8rXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:77:68:b2:33:ce:f1:f4:be:a1:d2:a4:d2:93:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Mar 26 01:00:45 2026 GMT
Not After : Mar 27 01:00:45 2026 GMT
Subject: CN=6606491d6613bdeed6c0ee1fbb0af5d746cad87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:b8:f8:bd:67:4a:22:3b:11:8d:a7:08:30:
72:67:1c:3e:04:11:a2:59:14:cd:7d:53:ae:80:1f:
5a:31:4c:7b:18:67:b1:d9:f6:1e:28:4b:5e:d9:f0:
67:c6:b6:0b:1b:1f:1c:5c:1a:59:ac:87:28:29:b0:
7f:9e:c2:77:6c:f8:06:6e:34:e5:18:c8:5f:2b:07:
5e:06:24:19:e6:7b:2b:f1:4d:68:d9:c1:e5:49:04:
d8:9e:60:ec:1c:b7:32:ba:b0:a3:7e:a3:b1:6e:1c:
fe:39:4e:e2:dc:4c:a1:4f:c2:3b:52:44:40:be:fb:
01:ce:2b:39:e1:5e:15:66:1f:f3:38:1b:3f:ee:26:
b0:eb:41:04:53:cb:0b:aa:c1:73:30:47:a7:94:42:
98:d7:3e:0d:14:1a:e1:32:ba:4f:42:a1:70:48:a6:
f7:de:9c:3f:45:26:fe:e0:43:e5:35:54:19:d4:2c:
ac:3c:9a:de:30:e6:63:33:e7:89:39:25:79:dc:a4:
02:da:0d:2f:f0:ce:c2:54:ef:93:b7:84:43:33:31:
a5:b6:da:c4:81:ef:a4:d7:df:19:32:f8:ef:d0:30:
44:18:7f:dc:b2:e0:6a:a8:e5:02:ef:d5:52:98:8f:
e2:db:96:ee:a4:2c:f7:c3:6e:d1:08:de:d7:27:02:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:49:1D:66:13:BD:EE:D6:C0:EE:1F:BB:0A:F5:D7:46:CA:D8:7C
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d1:04:73:9a:a6:f7:0f:35:01:af:b6:79:0b:27:76:3f:3b:
a7:87:fd:b1:6f:46:65:e9:72:da:92:e7:42:c3:06:52:e7:7f:
68:62:76:bd:9d:74:95:f2:3e:04:7e:d2:0e:e7:5d:7b:0e:20:
d1:e1:15:ab:00:3a:c2:27:e9:87:05:d3:e8:ae:f7:a7:40:70:
21:96:88:1a:d7:8a:d1:7d:f9:8a:78:22:b7:56:0d:d0:44:fc:
5f:30:1c:97:5c:6a:93:dd:30:40:fd:30:eb:2a:3d:b1:79:63:
2e:04:43:95:c7:9c:ad:65:c6:e6:9d:c8:c8:26:94:e5:c3:9f:
7e:01:39:f3:32:b1:65:5e:4a:cc:85:d5:1e:fc:b2:df:6f:82:
5e:53:ec:26:d5:59:d5:ca:1f:78:b5:72:d8:35:19:5b:76:4a:
92:d3:ae:f6:5a:3d:11:cd:e9:9e:2c:6b:ac:72:af:b1:42:2e:
2f:82:ec:01:f9:4d:b2:e7:7c:2f:a8:71:ae:96:58:46:ff:91:
17:b8:35:cc:0a:c4:47:ed:c3:0a:a6:25:e8:de:51:8c:69:63:
ab:11:6b:bd:aa:d1:13:5f:56:59:89:f8:e6:68:87:85:df:ff:
c6:73:69:c5:48:ce:8c:48:c5:05:a0:e0:68:67:0f:a9:6b:a7:
4a:ec:f6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:28 2026 by rpki-client