Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: 5GQie9xaFkUU1YSwGei/YTR5VghBcvhrfuXZIGJBZf0=
Subject key identifier: B4:CC:B8:AA:FB:7E:37:09:66:7F:6A:8D:0C:4C:17:2D:0B:41:D6:B5
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 019D25BA1E861C814BC4AB30C9A7F4E10C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 0787
Signing time: Wed 25 Mar 2026 16:00:47 +0000
Manifest this update: Wed 25 Mar 2026 16:00:47 +0000
Manifest next update: Thu 26 Mar 2026 16:00:47 +0000
Files and hashes: 1: AZMCEzr7sQUflIjUGb4dyJfXWkE.roa (hash: tLGKtI9IlbDmLitqyc6zJTxWyS6ivdCRkCF6bD5jbY0=)
2: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: oclyaY2F6SdXadTorAMcBle4az2Pmqmo1eccnFeLPZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1e:86:1c:81:4b:c4:ab:30:c9:a7:f4:e1:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Mar 25 16:00:47 2026 GMT
Not After : Mar 26 16:00:47 2026 GMT
Subject: CN=b4ccb8aafb7e3709667f6a8d0c4c172d0b41d6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:a8:20:13:c6:06:71:1a:78:ac:fc:87:73:
21:85:6b:a6:69:77:70:40:e5:c8:10:27:11:85:99:
7f:5d:6b:21:be:e9:a4:0a:e1:95:43:30:3a:7f:f4:
44:16:69:d5:8f:b8:35:b0:b0:47:4d:81:12:ad:19:
fa:83:9c:69:05:88:75:f7:94:98:da:62:8d:20:5f:
48:49:b6:0c:fc:99:ae:37:f1:de:43:de:89:53:cc:
e2:93:4f:72:f9:c1:9a:74:cc:76:c8:09:3e:7f:80:
72:e9:c3:2a:26:d7:e2:be:17:3b:e9:2f:bc:6c:aa:
c3:bc:57:01:fd:66:25:ae:f9:2f:94:78:16:4e:49:
cd:38:94:f1:dc:76:50:e0:f5:c1:f5:33:68:8a:27:
4e:73:d3:22:63:e8:9f:18:93:56:a8:8d:62:fc:94:
5e:00:59:de:ff:8d:9f:3b:cf:62:51:b1:a9:fe:a2:
cb:dc:d8:51:4d:89:22:cb:07:f8:95:c8:02:90:73:
ea:cd:5d:23:23:49:4d:b8:b7:d1:cd:96:83:98:8c:
95:de:0c:b3:a3:c5:ed:a4:32:87:6d:a7:e3:74:8c:
08:80:12:cf:6f:52:30:d8:e3:17:3b:00:a1:47:7a:
97:c2:57:56:d2:7a:e4:da:a7:cb:3c:96:15:ca:7a:
bf:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:B8:AA:FB:7E:37:09:66:7F:6A:8D:0C:4C:17:2D:0B:41:D6:B5
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fd:f6:64:2c:78:af:73:b2:8c:7f:ff:db:c1:4d:7e:8e:c3:
44:37:c9:06:4c:07:aa:8d:09:f4:ac:34:10:a6:f9:d2:ed:3e:
e6:dd:d6:86:1f:c0:26:29:5d:28:94:4d:8c:a8:2a:cc:9a:b5:
32:56:02:1e:98:3d:23:10:62:5a:60:df:52:59:21:0d:ca:fe:
65:6f:85:3c:c4:cc:6d:5a:d8:50:a5:f5:45:59:44:79:4a:31:
86:6b:c9:9c:61:84:28:16:cf:48:dc:39:64:e9:7c:17:49:7a:
19:e5:df:fa:57:2f:d8:9a:75:b6:75:f4:d6:d2:22:13:f1:d1:
4c:ef:4f:58:4e:39:72:2d:e4:1a:d1:8f:37:c6:0b:18:ce:23:
b6:f1:77:ef:aa:61:eb:61:80:4b:15:64:f5:44:5e:b8:f4:69:
6b:90:b1:fa:da:bf:f4:19:8b:42:06:b6:44:b1:2a:5e:cd:22:
02:87:58:ff:98:f2:9e:0e:cc:80:fd:17:70:94:6e:f4:0a:e1:
04:c9:79:d6:0e:7c:36:36:eb:54:ca:b8:15:6a:31:90:9f:61:
ef:a5:01:ce:58:b1:2d:51:09:2f:44:0a:9e:e5:66:bd:8b:08:
60:2a:cb:85:c1:80:1a:5b:c2:3a:85:9a:c3:a4:8a:4e:0f:73:
91:73:12:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:36 2026 by rpki-client