Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: W5KR8gYkvC9dCwraXU+/dmIOnhQTkEFODxxff61QzlM=
Subject key identifier: 45:2E:8D:5A:72:AB:C5:6A:55:0A:F1:EE:08:59:DF:E7:4A:1C:31:19
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 019D26280E0B1B310E60D6527F33A19763C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 091D
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa (hash: 0GjE/GSpKOrR5lJaIX0JhjgnY5INn+Q+Cz2beD9Wkrc=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: ec1fe/fp3+WwxEj541bezkNqzM3Zmdp1+jvieR3haS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0e:0b:1b:31:0e:60:d6:52:7f:33:a1:97:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=452e8d5a72abc56a550af1ee0859dfe74a1c3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:2d:1d:82:eb:fc:c1:b9:9a:4e:cc:fb:b7:
87:c2:95:0e:de:79:fa:e6:a9:f0:10:57:97:67:81:
f8:5f:d5:49:d3:b2:50:1b:f7:a6:f7:2e:54:ed:07:
e5:05:6d:4a:d6:f7:66:ae:9e:bb:a2:8b:40:c3:67:
c3:17:37:b3:8d:63:b7:6d:49:b8:4f:a3:47:a2:03:
7e:ee:59:88:c0:bd:32:6e:29:c4:5e:78:5a:d6:70:
6c:84:ea:ff:28:89:5f:05:03:99:99:5c:06:8c:db:
bd:95:58:df:5a:f9:f7:2c:8a:43:84:81:b5:3e:fd:
13:4f:5a:98:0c:44:eb:83:52:ba:9f:15:fc:8d:eb:
e2:6b:83:76:11:2b:58:57:a9:f9:28:20:de:3f:b7:
27:81:b0:67:c2:c8:43:c9:38:bd:4c:f9:47:52:bf:
d7:ac:26:30:cb:5d:2a:f4:f4:a2:ef:2b:9b:4c:55:
e9:25:8f:7a:ce:8a:5f:e2:84:10:85:91:21:d8:35:
3c:a0:9b:8c:21:a9:66:c0:e5:5a:f2:e0:33:ea:1a:
98:ee:13:d1:1a:cb:b2:98:17:78:b5:76:26:ad:7c:
e6:6e:86:7f:9b:fe:21:a9:c8:8d:f2:01:cd:af:18:
d3:95:bf:3b:5d:e2:57:9a:aa:d1:c3:91:a9:f4:57:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2E:8D:5A:72:AB:C5:6A:55:0A:F1:EE:08:59:DF:E7:4A:1C:31:19
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:12:7f:b7:9b:06:b2:ab:40:8a:99:1e:38:21:04:46:5a:c8:
3c:4c:30:2c:df:ba:a4:75:f1:01:c5:f6:b5:8c:8c:62:5c:c1:
bd:ef:ca:5b:20:c4:0c:48:46:c0:36:a9:ec:b7:80:ab:15:99:
16:b0:ea:c2:88:b0:b5:74:68:e4:c5:66:ac:a8:11:0f:fc:64:
1a:9a:7f:9e:c7:b8:29:0f:1b:45:04:42:bb:3d:6c:29:cc:79:
24:20:18:4e:cb:3a:d6:98:7e:70:6a:e9:64:0c:c6:9e:f9:a8:
a5:ae:78:f9:06:f2:ae:a0:5f:b1:34:ae:db:45:54:39:88:e1:
86:c9:30:d1:7d:f3:15:1b:3c:28:3b:fb:fe:73:47:e8:c1:aa:
5c:1d:38:6a:2b:b0:49:ae:e4:bb:c1:2b:a6:e5:08:08:10:4e:
23:aa:5d:18:f1:03:dc:cd:0f:65:3f:5d:07:04:4a:72:4e:d3:
36:31:27:72:a1:36:86:2e:0f:7d:2b:46:28:33:fb:fd:7e:23:
96:8c:11:4c:1d:05:dd:ca:a0:9e:b2:d7:c5:4c:09:0c:c5:0a:
7f:25:ca:bc:aa:2d:bf:f8:20:df:21:f0:f8:79:e1:c7:e2:67:
d4:90:b4:41:3e:22:bd:63:72:91:40:d9:25:83:5c:4e:4f:c6:
ec:d7:97:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:32 2026 by rpki-client