Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
File: u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft (raw, json)
Hash identifier: zcaFNGddmdfeNK2sK8JBl+wgFVC9qXSbdXKQTtZ+KLM=
Subject key identifier: 16:F1:08:A8:E2:C9:AD:03:CD:A4:25:D1:30:BE:F6:D5:15:80:57:40
Authority key identifier: BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
Certificate issuer: /CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Certificate serial: 019D28F2659680CA8D6201AFC7F18A4CEFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
Manifest number: 0662
Signing time: Thu 26 Mar 2026 07:01:07 +0000
Manifest this update: Thu 26 Mar 2026 07:01:07 +0000
Manifest next update: Fri 27 Mar 2026 07:01:07 +0000
Files and hashes: 1: 8YcVP3VklLR5i4GG8rnBQdHA76g.roa (hash: WsvT6kIFgDTr5dW65eaLGj20QeNg4nV6eveWdjaSMx0=)
2: u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl (hash: f7eSSHJ9YY4jjrhibdF6g6IhpHXFY0BK7rQLyFQFYw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:65:96:80:ca:8d:62:01:af:c7:f1:8a:4c:ef:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb936933dc3aa03b3daa06e5b3873f35bdab55d2
Validity
Not Before: Mar 26 07:01:07 2026 GMT
Not After : Mar 27 07:01:07 2026 GMT
Subject: CN=16f108a8e2c9ad03cda425d130bef6d515805740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:58:f9:0a:8a:53:7d:28:63:c1:ec:65:af:cd:
6a:96:7a:c4:31:2a:96:d1:a4:91:c5:b1:b5:a2:83:
08:cd:38:d3:e0:d1:8e:09:31:38:4d:5e:6d:b5:b2:
94:1c:b5:ca:07:d0:3b:40:43:4d:c4:3d:f7:c5:71:
52:60:3a:d9:85:14:88:ee:d6:80:97:1f:07:cc:b1:
87:bf:2d:80:cf:8c:d4:2c:0b:37:90:c9:16:09:33:
a9:a4:46:f0:ab:6b:a3:42:5a:76:c0:38:bc:1d:ae:
e9:41:7c:93:1d:8c:c7:6c:6c:77:2f:34:69:80:98:
0b:e4:3f:20:65:ef:9e:d6:f9:42:9c:f4:42:23:cc:
20:78:2e:20:22:59:8a:71:c5:95:3b:cc:1e:97:94:
65:dd:d1:2c:40:12:0d:15:48:be:0a:c1:47:0c:5d:
39:b7:9d:6a:f9:4c:7e:65:4a:a8:f2:12:4a:b0:70:
21:14:9d:87:7c:f7:f1:be:0f:0d:54:6e:f1:85:d0:
17:35:bd:a1:15:e6:78:aa:21:ac:66:72:4b:2b:b3:
0a:c7:00:b3:f0:79:96:15:bc:d6:b4:47:77:2f:c9:
f8:b1:88:95:2e:cf:ed:54:2d:f6:6c:8f:4d:a1:7a:
01:9a:55:8b:58:30:c0:9f:e6:6f:33:5b:72:5f:10:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F1:08:A8:E2:C9:AD:03:CD:A4:25:D1:30:BE:F6:D5:15:80:57:40
X509v3 Authority Key Identifier:
keyid:BB:93:69:33:DC:3A:A0:3B:3D:AA:06:E5:B3:87:3F:35:BD:AB:55:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5NpM9w6oDs9qgbls4c_Nb2rVdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0ca59b-32d1-46a2-be48-0c33e1264d7f/1/u5NpM9w6oDs9qgbls4c_Nb2rVdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8b:34:4f:a3:63:e7:33:01:2f:b5:66:5b:59:25:e5:46:f2:
ea:7f:e0:e9:4f:c4:87:68:29:34:e4:4e:4e:2d:33:46:ef:9d:
c0:36:3b:94:e1:4b:bd:11:4d:48:8d:41:e8:5e:d4:82:f0:ac:
a1:28:29:bf:8a:ac:0a:e3:25:eb:54:e3:f0:9c:10:34:65:ad:
7b:83:d6:8c:6f:09:cb:6d:a3:c3:32:16:81:83:a8:e2:4a:44:
9f:10:bb:df:71:94:f7:40:68:be:a7:91:09:c8:46:3b:e7:e3:
6c:33:b5:c3:db:a6:c9:b2:37:23:29:81:6c:53:21:04:5b:3a:
0b:a1:3e:6e:ec:13:1b:cc:55:14:41:df:61:53:f2:52:b6:82:
6e:29:c1:04:16:d4:a7:dc:d3:90:6d:1a:f9:f7:61:d9:54:94:
51:96:d2:09:65:40:8a:58:49:6a:ea:8a:15:4c:93:54:a5:ba:
51:6b:88:b9:cc:8d:45:9b:1a:96:61:3c:90:ac:a4:dc:b8:83:
00:07:a4:fb:d0:b8:f1:3d:79:66:fb:1e:aa:e9:f5:12:df:17:
fb:ed:16:de:f5:46:ea:27:a2:56:5a:28:4a:83:22:91:d7:6b:
c8:14:cf:ac:2d:ed:88:33:a8:b8:9f:2f:74:93:de:dc:cc:13:
e9:27:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:19:46 2026 by rpki-client