Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
File: u7hl_W36q6dxJJt-uujr1SgKDJc.mft (raw, json)
Hash identifier: S2fDnZIC+H61T/ZHH+9iapSOFR2uWUBrt6I7m8nLFLA=
Subject key identifier: 94:D3:48:F9:03:36:21:53:05:F2:9B:DC:37:52:78:80:8E:5B:8B:AC
Authority key identifier: BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
Certificate issuer: /CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Certificate serial: 019D292995A2D0B18DF303DA0EE46DE7BAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
Manifest number: 13D2
Signing time: Thu 26 Mar 2026 08:01:24 +0000
Manifest this update: Thu 26 Mar 2026 08:01:24 +0000
Manifest next update: Fri 27 Mar 2026 08:01:24 +0000
Files and hashes: 1: Bym-x8E18AtLf0ybpilnkQ7yGpo.roa (hash: R+XsuHoebGNFenykqVHPvxpXZ/5AsWEx8oTWF+hIAFQ=)
2: u7hl_W36q6dxJJt-uujr1SgKDJc.crl (hash: lq0clcGwTvrsuv1Ynh96KfufNQh26rOlwbwgKnREHk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:95:a2:d0:b1:8d:f3:03:da:0e:e4:6d:e7:ba:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbb865fd6dfaaba771249b7ebae8ebd5280a0c97
Validity
Not Before: Mar 26 08:01:24 2026 GMT
Not After : Mar 27 08:01:24 2026 GMT
Subject: CN=94d348f90336215305f29bdc375278808e5b8bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:85:a9:d0:af:15:70:b4:e6:d3:0d:9b:43:
4e:0b:17:37:2a:72:fa:47:df:c3:b5:e9:69:1e:25:
92:56:be:30:63:0d:95:36:c7:02:c2:68:59:f5:84:
fd:99:04:3c:40:66:8f:38:83:14:e2:98:e3:34:3b:
93:bd:b5:90:53:54:f0:6f:a3:9d:59:73:9a:eb:e5:
c7:e2:e1:40:36:81:f9:f6:e4:99:40:8d:8d:2b:88:
19:86:57:04:30:c0:6b:90:57:57:e2:e5:c9:2e:e6:
48:e0:25:6c:8b:8d:50:7b:72:34:88:5e:57:0e:a1:
7d:ac:2e:34:72:84:e4:23:fa:30:c0:1b:a1:8f:33:
5d:3e:7c:8d:fd:7b:ce:a6:c1:0e:07:d3:dc:ee:c5:
87:22:2a:e1:60:38:7b:8c:c9:a0:16:e8:02:4b:09:
15:23:7f:86:c1:5f:96:97:88:9a:2b:24:01:af:5d:
26:fb:ee:64:66:4b:33:bc:a6:6c:e9:72:6d:6e:f9:
10:a4:30:03:f0:02:80:48:3e:f2:92:59:38:0c:2d:
13:04:b1:04:6e:01:c8:c2:76:e9:b3:9d:de:3d:dc:
37:ce:2d:68:c0:19:ce:fa:5d:69:7b:a6:f7:ae:1d:
e5:28:15:42:58:f1:34:da:19:cc:5a:43:41:d7:1e:
b8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D3:48:F9:03:36:21:53:05:F2:9B:DC:37:52:78:80:8E:5B:8B:AC
X509v3 Authority Key Identifier:
keyid:BB:B8:65:FD:6D:FA:AB:A7:71:24:9B:7E:BA:E8:EB:D5:28:0A:0C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7hl_W36q6dxJJt-uujr1SgKDJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/43bb94-94c6-4dad-a372-5fcfa421975c/1/u7hl_W36q6dxJJt-uujr1SgKDJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5d:ea:1c:ec:7c:12:6a:b8:03:e2:09:7f:4a:e2:fd:fc:e7:
52:02:26:66:00:bb:b3:0f:e2:ed:88:ec:b7:98:c7:7d:22:88:
b7:eb:cd:4e:ad:ec:fa:51:ca:42:be:b1:82:51:8c:92:44:e5:
be:3a:dc:d9:1c:73:86:2a:86:7c:03:2b:6f:9c:f2:8b:61:c6:
89:de:e4:7a:ca:6c:d5:37:dd:38:f4:a0:2c:a4:da:ee:02:1d:
6b:29:91:25:0b:87:91:07:fe:f7:9f:e1:3f:ed:b4:0d:14:f6:
3f:db:8e:6a:ad:23:ac:60:f0:b3:6b:f2:1c:d9:74:23:15:1b:
47:e5:2b:9f:f4:ed:6a:3d:28:39:cd:62:82:f4:6b:11:62:8d:
be:13:2a:aa:1d:b1:1d:99:5a:e1:01:e5:69:72:4e:fc:fe:a5:
27:61:14:28:14:35:81:b3:64:06:bc:53:3f:34:e1:86:ff:8f:
07:f3:5d:7c:09:28:7b:81:a6:29:9b:f3:6b:b8:4f:9c:ae:7c:
f5:2e:20:7a:99:fc:99:db:7b:e3:44:3a:8f:c8:bd:20:74:a0:
be:3d:e8:b6:8e:44:1f:11:1d:ce:96:69:c5:2a:cd:5a:db:87:
ca:b6:c7:f8:18:b9:15:4f:28:0b:50:8c:e0:98:e7:bd:88:14:
bd:a6:b8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:37:22 2026 by rpki-client