Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: lnTUOcBJZXpt6zvEQr2V+eC4kkOJp9CjR6LnjRabF1w=
Subject key identifier: 78:2D:9E:17:28:96:D0:39:72:D2:F9:0C:8C:DB:49:4B:DA:2B:C1:D5
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019D299787CC3339E27EB2D08CC42C613F10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 189D
Signing time: Thu 26 Mar 2026 10:01:29 +0000
Manifest this update: Thu 26 Mar 2026 10:01:29 +0000
Manifest next update: Fri 27 Mar 2026 10:01:29 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: 5G3vi5E/l8ueNybFzEASWHH5f8CHB9i/+JH20KJmgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:87:cc:33:39:e2:7e:b2:d0:8c:c4:2c:61:3f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Mar 26 10:01:29 2026 GMT
Not After : Mar 27 10:01:29 2026 GMT
Subject: CN=782d9e172896d03972d2f90c8cdb494bda2bc1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:91:93:49:46:ab:e2:4f:13:44:75:d1:e6:
8f:29:5c:55:1c:2a:34:a1:54:a8:af:8d:db:6a:0d:
fa:d5:57:82:40:8c:b2:6c:8a:dc:95:8c:24:95:34:
0e:5f:3e:93:17:c3:c8:2f:77:2c:40:80:13:d9:f4:
38:eb:ae:f0:05:5a:e8:86:84:4e:56:36:8f:0b:49:
77:39:40:e2:76:25:fa:28:f8:28:90:0c:b0:d2:a1:
78:df:0d:7c:be:bc:2d:cf:56:bf:a1:cc:fd:11:29:
f9:a0:bf:b0:42:70:52:85:bf:08:f3:33:be:4b:08:
bd:da:31:aa:33:2c:51:55:c1:f3:b9:a8:d3:c3:1b:
b9:dc:6e:90:9e:1a:73:fe:4c:64:7a:5c:41:db:fc:
2d:3b:9f:15:73:ae:6f:71:4d:dc:a9:16:0a:df:52:
fd:46:f9:fd:cd:ba:80:17:1e:22:85:3a:82:f0:d2:
99:93:a5:52:8e:11:6f:a0:b8:2b:fa:d5:b7:c7:17:
76:73:ac:d9:4e:f0:02:ea:09:e3:8b:cb:e7:a4:48:
6e:cb:9d:f4:48:d4:e0:01:f2:2c:b6:e1:aa:7d:23:
b2:c8:8e:d1:ff:d6:bc:8c:c6:3b:53:5e:65:14:68:
e9:d2:5a:0e:66:52:99:cf:a9:10:bc:75:25:09:ef:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2D:9E:17:28:96:D0:39:72:D2:F9:0C:8C:DB:49:4B:DA:2B:C1:D5
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4b:ae:7e:af:83:ab:cb:62:3d:bf:77:54:60:e2:4a:61:e0:
d7:af:a3:43:9c:2c:f7:62:7e:4e:31:d9:6e:9c:f7:ec:03:53:
7e:20:d7:0d:2d:5e:d6:fc:73:5f:da:fa:08:ec:f9:27:94:90:
90:18:24:58:2a:c8:58:b8:14:b8:b9:ca:c0:4d:c1:7b:9b:84:
ee:48:26:50:65:1b:77:1d:d6:25:35:21:31:9b:90:91:b7:23:
6e:41:4e:1f:6a:3a:dd:dc:81:27:53:be:78:d1:95:7d:67:56:
43:4a:0a:d5:53:3e:69:41:b2:a1:97:9f:f5:2d:30:51:ae:d0:
e0:ca:65:d4:dd:28:a5:af:dd:80:7b:8f:7c:6b:2b:6f:be:09:
70:a1:52:b1:66:23:5a:56:80:28:c2:50:9e:bc:0a:b6:82:bf:
c6:94:27:77:f7:90:66:b0:dd:81:5a:57:f8:c6:9d:99:80:94:
a2:db:6b:b7:4c:79:08:e1:3c:f2:f3:24:90:52:fb:9a:40:e8:
46:0b:8e:f1:94:d4:e9:72:3e:dd:d4:35:88:c9:23:0b:a4:43:
74:fa:2d:a4:c6:02:c5:44:3c:25:fe:62:2c:35:8c:d7:c1:79:
21:45:77:8a:f9:65:94:80:57:c0:b2:fc:36:b6:26:72:d1:4a:
49:d8:a4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:39 2026 by rpki-client