Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: qWj8SCxbu3+m1WX3LtPHPF8ehynxA7aHSKqemSmoU3w=
Subject key identifier: 98:C1:75:61:23:6D:95:84:4F:B9:5E:6C:45:FE:84:80:10:6A:DC:EB
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 019E1DFE733539A817BC0B07C338C8810F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0529
Signing time: Tue 12 May 2026 21:01:15 +0000
Manifest this update: Tue 12 May 2026 21:01:15 +0000
Manifest next update: Wed 13 May 2026 21:01:15 +0000
Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: ieXIAelN10iWS0JRQHds396uCnbcLjCrta/V8kNMsBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:73:35:39:a8:17:bc:0b:07:c3:38:c8:81:0f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: May 12 21:01:15 2026 GMT
Not After : May 13 21:01:15 2026 GMT
Subject: CN=98c17561236d95844fb95e6c45fe8480106adceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:5e:d1:32:de:73:c6:80:c8:ec:00:9c:12:
a4:fe:98:d2:a4:2b:ae:65:83:51:88:26:b5:7f:ed:
39:2c:31:b4:cd:38:68:c9:39:20:55:e5:c7:8c:89:
67:e9:a3:d8:79:9e:01:12:18:13:39:c4:ea:62:d8:
c1:37:ad:2d:07:c9:5a:c2:f8:28:fd:6f:9d:5d:bc:
37:cb:1d:0f:72:b0:5b:44:fd:8a:45:17:5c:c7:45:
28:d0:25:2a:fd:44:a5:c7:72:b5:f2:68:57:7b:44:
39:e6:47:4b:5b:3b:93:c9:de:0e:1d:e1:08:ea:5e:
7c:60:26:17:28:28:16:2d:d7:93:0c:e5:38:fd:fa:
65:21:d8:16:ed:8c:6a:43:97:56:0b:a7:72:6b:68:
e3:f4:59:f5:b2:f3:c7:fd:7b:0f:a9:05:3d:eb:53:
4e:b2:da:8e:ae:38:66:2f:ae:83:87:7f:33:0d:b2:
ec:7c:8e:16:b2:d6:f9:26:c8:06:4f:95:1d:b6:bd:
0a:c6:1c:87:f7:c9:fa:52:97:f1:8d:fe:75:6f:3b:
ff:5d:78:3a:55:34:c7:85:fe:b4:c7:aa:c3:0a:d2:
40:86:a7:14:a0:7c:fe:e2:70:bc:48:2d:57:48:81:
49:26:f5:19:c2:a1:30:cf:b7:87:9f:d1:83:22:49:
62:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C1:75:61:23:6D:95:84:4F:B9:5E:6C:45:FE:84:80:10:6A:DC:EB
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:11:19:52:68:dc:69:44:aa:a8:b4:a4:97:fa:0e:d4:cf:ad:
b4:3d:f2:b0:cf:10:49:2c:ba:b9:3a:ab:64:e9:0c:65:18:22:
bd:75:d9:97:37:4c:38:19:df:44:09:10:ac:37:d8:2e:22:b7:
10:18:82:1d:fc:52:96:b0:5c:ec:5c:ea:c2:3c:d7:a7:09:9b:
88:3d:4d:02:03:1a:62:8e:dd:03:7c:bb:25:ca:1e:50:c1:43:
50:db:c4:04:b6:2d:a1:7d:80:65:c0:ad:54:55:54:b6:ec:db:
97:20:f9:18:e5:43:d5:f3:7c:8a:59:7a:64:14:0d:53:67:8f:
88:08:e0:74:2f:63:c3:2e:13:1a:1d:03:44:1f:b0:8e:fa:5e:
1c:08:54:e8:20:cd:88:1e:b4:52:df:d9:fa:96:07:f8:00:6b:
91:89:24:e8:34:db:7d:97:c0:7a:4e:39:a1:94:18:d7:01:de:
1b:ff:18:be:ac:75:83:ee:89:40:89:48:3d:73:f9:cc:f1:09:
91:de:70:89:be:21:1c:7b:76:6d:23:e3:31:d9:e9:31:a2:d7:
41:a2:a0:50:1c:e9:7f:e5:49:c7:b1:64:2c:fb:40:e6:f5:1f:
94:65:f0:39:f8:88:2b:7a:1f:e9:89:fb:56:9f:ca:63:2a:76:
7a:f6:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:35 2026 by rpki-client