Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: qasupqRGgfIdRnqFTb8pMVY2OpM9G9Il2fQr37puruU=
Subject key identifier: 32:53:4A:6C:0E:6E:A9:1C:D9:52:18:07:A8:E7:93:08:01:F4:BE:E4
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019D2695F300E740EA89AC3DDA4ACCB52583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:54 +0000
Manifest this update: Wed 25 Mar 2026 20:00:54 +0000
Manifest next update: Thu 26 Mar 2026 20:00:54 +0000
Files and hashes: 1: NyhSyCMRoKdRBo6gGVT4BydPhUU.roa (hash: hrd0GvTI0bFLstLvooU+LJ8QrF+EDu6C0hrzcyyARCs=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: +9HzRTFEpGI1H805oATUI32XGM+Rt1HF8Lky7fIRaHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f3:00:e7:40:ea:89:ac:3d:da:4a:cc:b5:25:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Mar 25 20:00:54 2026 GMT
Not After : Mar 26 20:00:54 2026 GMT
Subject: CN=32534a6c0e6ea91cd9521807a8e7930801f4bee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:02:27:db:7f:89:30:1b:a0:a8:9e:b8:92:14:
e5:65:0b:5b:00:13:25:d2:d4:a9:87:18:99:06:d2:
5e:45:51:f6:83:79:b5:0c:eb:92:3f:99:2e:86:a8:
51:54:1f:6b:6a:9a:ef:16:a3:67:22:06:01:89:2e:
83:a0:b0:51:9c:df:ab:e5:06:8a:fe:81:a0:ce:52:
fa:68:26:91:2c:5c:cc:2b:b5:a2:7c:26:25:43:22:
89:f6:e6:99:5f:83:f5:aa:de:24:22:d6:3d:02:17:
9d:69:6d:5c:8c:c4:09:90:6b:ca:41:f3:37:bc:a6:
fc:7e:7c:7e:10:aa:a3:f7:4d:6b:5e:20:72:72:05:
8d:0f:93:33:f1:0c:63:e1:7f:54:37:c6:d5:50:49:
be:82:79:7a:9f:5a:bd:af:64:bf:17:23:f6:64:2d:
dc:5b:d3:4f:b7:9b:39:8b:26:87:f0:a3:9a:9c:6b:
4c:19:01:74:f6:c5:3b:02:81:3a:50:88:d6:79:23:
2c:62:a8:a6:15:3e:1a:c4:26:a8:c8:32:56:ab:11:
b8:da:dc:7d:5c:0b:68:ec:51:a1:b2:7a:1b:8d:aa:
3b:ed:25:21:2c:8a:4b:24:38:79:a3:2d:a3:00:d9:
cb:00:a8:e3:bd:6d:15:d5:ba:c2:fc:78:2a:c9:46:
0c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:4A:6C:0E:6E:A9:1C:D9:52:18:07:A8:E7:93:08:01:F4:BE:E4
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:43:8d:46:d2:73:72:0e:c4:8e:96:7c:b3:8b:54:9f:3e:3e:
6f:11:8b:a7:e5:c4:94:01:5b:af:4f:bc:bd:36:5c:33:6b:ce:
0b:26:16:c9:ab:c0:75:90:03:a0:ef:45:a1:b0:94:03:58:f6:
8c:1c:de:07:a4:1f:3c:1b:5b:55:2e:ea:dc:d0:97:2f:39:9e:
72:c5:f6:c9:ed:a5:20:4e:75:2b:df:57:d4:9b:ac:33:5b:60:
7b:c1:67:5b:33:b3:17:91:ca:c8:31:a2:0c:16:77:44:89:54:
df:e5:83:1f:a9:76:44:47:4b:11:08:02:70:6b:1b:d9:53:73:
bb:72:84:bc:49:af:9c:ac:d6:59:23:6e:04:5e:29:c5:11:d4:
40:79:47:34:5b:79:df:45:98:13:e1:40:08:2d:42:42:b8:82:
1f:eb:c4:86:af:ac:6d:5c:b2:61:dc:93:b3:b2:e1:f1:88:43:
ec:e0:ea:2f:32:aa:af:0e:8f:ea:09:f4:af:02:65:34:c5:54:
67:ad:a4:a1:91:75:e1:6f:ce:0d:4a:53:55:c7:2f:ac:f9:16:
a0:4c:2e:e9:fa:61:89:ac:4f:2e:32:50:2b:b0:94:c8:2b:fc:
08:fe:4c:27:5b:d5:81:c6:03:a3:09:9a:ef:21:bd:e6:ba:3a:
4a:94:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:39 2026 by rpki-client