Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: MrIPFXQ0ZxSiBWK4z0Iz8F2KJtaI3UPCeblK+j7ABxk=
Subject key identifier: AB:18:BF:71:21:C0:E0:F0:94:B4:72:87:C5:5D:23:70:A2:36:6E:F9
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 019D27E02F5BE8507F286335D24F1F8390A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 02:01:36 +0000
Manifest this update: Thu 26 Mar 2026 02:01:36 +0000
Manifest next update: Fri 27 Mar 2026 02:01:36 +0000
Files and hashes: 1: 6E55Dxslc1xUwoydNHNZM4ZExZY.roa (hash: sNvH8Do1xMuJUTpDkj9TMIXCGe+B5BVTB4O2xk57j68=)
2: RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa (hash: 6bNU9Qy7gfD16SLkxQ7XrFRbn1WRdrTIHlp5cBAhhLU=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: Pvkgbmgp0YPzpiB1LvlroV7GKhPkrekYKJhz/mZ7GEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:2f:5b:e8:50:7f:28:63:35:d2:4f:1f:83:90:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Mar 26 02:01:36 2026 GMT
Not After : Mar 27 02:01:36 2026 GMT
Subject: CN=ab18bf7121c0e0f094b47287c55d2370a2366ef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:c7:95:09:dd:f3:95:ca:fb:22:32:43:1e:
08:ed:90:c0:88:a3:c4:1e:03:70:4c:f9:9f:72:ce:
7d:c6:f6:fb:53:ef:93:2c:9c:c8:72:c4:0b:f5:a7:
e8:e5:79:e5:af:ab:48:32:8d:12:56:e4:f3:7e:1f:
c7:67:b4:c9:d5:d8:d1:e9:93:d2:03:02:69:9b:6f:
4d:cf:b3:e9:f6:6a:a6:0e:71:5d:97:ac:82:ec:7a:
54:b1:84:7b:10:12:ca:c2:dd:7a:34:f9:92:b5:0d:
32:fc:4a:79:3f:bd:0c:ee:82:87:50:26:02:4c:a8:
7c:84:01:85:9a:83:0f:ef:d1:4b:af:86:95:30:09:
81:d6:c9:03:98:23:f1:9a:cd:e3:1e:64:30:86:13:
94:03:3f:89:b6:30:f4:a7:6c:ee:85:85:62:52:e7:
83:3b:25:20:7c:fe:cb:82:98:43:f3:5d:f7:b2:6b:
b9:12:57:fb:8e:c1:01:43:e0:b0:d4:f7:8b:41:2a:
99:95:b0:42:13:f6:e4:f6:8e:30:d7:fa:ea:a9:0d:
aa:52:9d:3f:e2:3b:b7:b7:5c:65:aa:b2:51:16:57:
0d:26:ca:6c:f6:f9:fb:38:20:01:88:65:6f:99:45:
66:2e:dd:24:a5:7a:e0:7e:26:96:26:a8:0c:e6:38:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:18:BF:71:21:C0:E0:F0:94:B4:72:87:C5:5D:23:70:A2:36:6E:F9
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1c:5d:53:21:22:68:8c:bb:3a:5f:54:8f:fb:6d:42:85:99:
e3:87:be:71:64:27:ab:46:ac:55:95:e7:fd:b5:c0:0f:1c:2f:
d0:1d:45:78:b7:d5:cb:ca:7e:d8:7d:b9:f9:1b:ac:85:6b:32:
62:7a:c0:75:4e:7f:01:e0:cc:cf:4f:92:65:16:69:15:1e:54:
f5:8d:fd:7f:40:2a:68:89:30:52:b5:31:6a:08:91:cd:69:c9:
0e:42:05:68:95:cf:a5:2b:e8:80:83:e6:ac:7c:9d:0e:28:5c:
a3:e4:f2:33:50:57:c0:b4:ea:23:38:e4:85:ec:d2:a7:b7:0a:
61:51:d6:f7:e3:3f:60:ab:07:f6:e8:3b:20:48:8a:b8:56:85:
00:4b:a6:c2:6d:be:45:cf:97:17:52:21:fb:f6:d0:ed:7d:94:
1e:87:ae:b9:90:e7:50:68:61:01:4a:08:39:f7:97:30:0d:15:
c5:51:c5:2a:fb:c2:43:6d:ab:c3:9c:ce:9a:45:09:9e:9f:e3:
d7:74:55:22:d0:bd:50:5d:4c:04:1e:c2:ee:dd:ec:ac:74:ef:
1a:ed:d4:83:be:7e:d4:17:cb:e5:29:f8:46:dd:ec:cd:ec:02:
d7:6e:80:3c:09:e4:46:fd:c0:7b:ab:68:c7:97:26:f8:46:2a:
64:31:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:29 2026 by rpki-client