Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: H0gTEaFRbo9IDnMT8Ev3GoU0PDmjdFCXkFpN9fFWz9U=
Subject key identifier: E0:41:89:12:98:2B:70:E8:DC:B8:D1:D2:F8:8B:0D:D4:45:44:BE:FE
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019D26CD470AE8D82E77BBCB867717DC5DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: BWBcClW2gdmlSA6EoZuWCJcYlpKNUUZB1vc0m4Sgt8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:47:0a:e8:d8:2e:77:bb:cb:86:77:17:dc:5d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=e0418912982b70e8dcb8d1d2f88b0dd44544befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:85:41:c2:c5:4e:06:89:fe:7b:2a:66:b7:
6c:5a:9f:41:0d:1b:e9:d3:11:5d:dd:44:90:0f:a1:
aa:bd:79:49:87:52:23:00:38:b1:d9:70:db:67:2f:
86:22:8f:3e:36:c1:3d:b9:06:62:51:27:b9:42:80:
4a:b5:2a:b5:c4:61:89:49:b2:9b:ee:48:79:e4:c4:
5a:09:a5:7b:01:ed:25:07:6b:88:ee:74:13:05:9a:
96:56:9c:d1:3d:0c:42:e8:03:ff:59:78:81:f2:e1:
e2:ed:f8:37:f2:64:0a:d2:0c:3d:fa:8a:9b:14:34:
6d:48:9c:a5:b1:c3:b4:ae:c7:c4:28:d0:bb:ec:5c:
fb:7a:99:f0:73:72:df:4d:9c:9b:78:9a:50:11:62:
03:5a:22:25:40:df:e4:39:28:80:c5:b4:ca:db:8b:
f3:af:80:25:2b:4b:79:24:25:af:31:81:89:3f:f1:
6f:6d:c8:92:0c:b1:88:60:af:74:14:23:3b:d5:61:
d2:12:c0:b9:90:91:ef:d9:3c:39:01:d5:35:49:88:
d9:b4:13:dc:ae:ac:30:05:7b:73:77:c7:ea:28:b9:
b2:39:be:bb:e6:ac:a0:99:fd:e2:9e:10:c7:3a:66:
86:3f:6b:ea:b9:12:61:2a:05:88:58:dc:0a:db:81:
a6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:41:89:12:98:2B:70:E8:DC:B8:D1:D2:F8:8B:0D:D4:45:44:BE:FE
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e9:20:e4:ac:93:b5:a4:c1:db:3a:93:ac:17:a5:c1:f2:40:
6a:e4:89:fa:52:70:7a:96:93:00:61:f7:fe:0f:b5:77:bf:01:
db:62:09:a2:a0:9d:2a:96:2d:a0:72:b2:e3:e7:79:e9:87:0f:
75:51:63:95:3c:24:25:ee:d6:47:5d:26:d8:68:9b:a4:fd:89:
9b:c9:cc:53:04:83:e0:b1:aa:ea:e8:1e:a1:52:da:36:2a:e8:
6a:30:df:66:39:6f:4e:66:7d:96:33:b3:e9:23:8c:37:68:1e:
35:9c:39:d1:e9:f0:5d:ed:7b:61:5b:1c:a4:73:5d:c9:12:21:
a4:ee:b7:c6:2e:f1:6d:1c:64:43:c6:01:29:65:3e:c8:a9:20:
ab:9b:42:bc:88:b0:15:a2:75:0e:13:dd:2b:07:ca:f1:2c:3c:
d0:a3:b7:08:b8:f0:78:37:40:3b:82:70:cb:b6:96:77:0d:0b:
40:5a:4b:f9:11:44:8e:e9:7c:92:a5:69:e5:21:57:bd:4d:d5:
29:09:76:bd:01:97:52:7d:c2:b5:ce:39:d3:55:e4:cc:f7:0d:
f9:d1:d6:42:dd:0a:a1:a3:76:bd:22:fd:6d:1c:6c:38:1f:68:
76:58:a4:b4:e3:4b:48:cc:18:03:6f:29:c4:b9:c0:5f:65:17:
93:5c:40:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:55 2026 by rpki-client