Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File: u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier: LqDV7TWYq0oeWxjZDtmFENHOIIRy/5RlQymYk32wBAQ=
Subject key identifier: 5D:DB:11:0E:0A:5E:A8:D3:7C:03:92:94:D7:4F:4D:83:73:7D:95:6D
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer: /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial: 019D2584156B73F80278461F7CBF19AD6E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 15:01:46 +0000
Manifest this update: Wed 25 Mar 2026 15:01:46 +0000
Manifest next update: Thu 26 Mar 2026 15:01:46 +0000
Files and hashes: 1: WWavc8lOmqMwEjW_aU8CllF7Aco.roa (hash: Sd3+DPrjEKOyDN5png2cZhRDsDV7HJMh5rBTkl4M/gc=)
2: p41RQcYNbaPi2saEgef3YI5x8B0.roa (hash: 7eEqYaOedzxXA/oXZBR0kzMmPS0dy4WRxb1ICMtpctQ=)
3: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: DckyUNhYxTv6a7cAn5+buiW4768tTmQ0TmU4e0a1r8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:15:6b:73:f8:02:78:46:1f:7c:bf:19:ad:6e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Validity
Not Before: Mar 25 15:01:46 2026 GMT
Not After : Mar 26 15:01:46 2026 GMT
Subject: CN=5ddb110e0a5ea8d37c039294d74f4d83737d956d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:7a:bc:19:2a:cd:1d:18:f3:69:19:01:1a:
63:8d:0e:bc:4f:a9:3b:44:c1:ed:7c:5c:bc:cf:e1:
73:d7:e4:7d:cf:56:d3:fd:0c:c3:7d:4a:a4:82:64:
db:35:01:30:d1:47:35:fd:e7:c4:05:1b:d0:67:83:
6f:e9:d6:20:79:4a:6c:63:df:45:da:fd:3d:8c:89:
be:cd:73:ee:bf:38:cf:27:e8:e0:c9:05:e2:bc:15:
25:3e:6f:5d:6f:e7:69:81:d0:0e:87:12:58:57:ff:
e5:fc:b0:42:3a:be:88:9c:16:0d:c6:e4:a0:2a:97:
e7:97:ce:c7:d6:4b:61:2b:58:23:53:67:66:60:84:
a3:9d:8d:13:ac:3a:14:b3:86:8d:65:f4:0f:cf:1e:
e7:06:8a:bf:fa:4f:6a:a4:dd:bb:df:64:d7:a1:e5:
81:28:aa:2f:d7:dc:76:11:46:4c:81:e0:61:25:25:
4b:be:e1:6e:a0:d4:25:f5:d9:10:49:01:5a:f7:b1:
d6:69:2f:6f:cc:98:1e:7f:d3:ee:bb:33:f9:2c:86:
99:91:f5:e8:75:57:37:74:ac:2a:4b:ff:1a:66:3c:
57:57:b2:ee:94:20:8e:d4:f2:5d:b8:54:df:b0:4f:
d0:22:4b:6f:69:92:a7:e9:fe:3c:17:f6:41:e6:75:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DB:11:0E:0A:5E:A8:D3:7C:03:92:94:D7:4F:4D:83:73:7D:95:6D
X509v3 Authority Key Identifier:
keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:1c:9e:59:ba:19:c9:84:9a:2a:6b:2e:2f:65:69:f5:5d:
34:09:6d:3a:31:ed:b2:1f:9e:9b:7f:af:a2:0d:6a:c5:ec:69:
39:ed:c6:6b:2c:8e:1e:c7:93:58:a4:f1:4c:a3:8b:de:f0:ab:
3a:d0:fd:d8:f1:76:46:fc:5f:a3:36:c1:66:50:96:70:9f:60:
6c:d6:46:bc:ea:13:e7:e4:5e:2d:22:36:86:ab:03:23:6c:c5:
c6:76:37:93:11:3e:8e:51:f5:cb:fd:86:db:63:4e:e2:1f:3a:
14:fc:80:b0:63:ab:3d:84:16:6f:57:3c:10:88:fa:34:b0:08:
1c:71:5a:a0:12:9e:a2:56:e0:11:3b:23:43:cc:16:93:8e:65:
20:74:d1:2a:f9:0a:b3:fe:1a:3c:9e:fa:41:d8:01:c1:09:ec:
b8:53:d4:72:06:47:d2:0e:f2:6a:76:a6:16:d6:77:8c:43:81:
38:a3:24:15:69:c0:9c:43:e4:13:ad:c4:1b:21:66:3b:27:3b:
44:5f:1e:71:db:45:2f:de:1b:0f:c1:fa:89:ea:67:80:4c:bb:
e1:e8:69:a4:02:6f:14:84:9e:9e:93:83:33:d2:79:28:54:49:
3b:db:a1:d8:8d:ce:ab:07:71:6e:52:ca:b2:c9:0f:05:e2:0c:
dc:0e:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:12 2026 by rpki-client