Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: kHhlBb7oy9SVDrPNk7ztLFFElEYRrIiDmCehe+SVUUg=
Subject key identifier: CB:9C:7C:6B:21:72:3C:20:7F:CE:74:39:BE:1E:12:F6:05:E0:66:50
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019F91DB22CDB8DBEB233C74DC46D715FFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1548
Signing time: Fri 24 Jul 2026 02:01:25 +0000
Manifest this update: Fri 24 Jul 2026 02:01:25 +0000
Manifest next update: Sat 25 Jul 2026 02:01:25 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: sZro6cwZslrZpUavim8eFYG6J77pi2+ZXAgI7sir+7c=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:22:cd:b8:db:eb:23:3c:74:dc:46:d7:15:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jul 24 02:01:25 2026 GMT
Not After : Jul 25 02:01:25 2026 GMT
Subject: CN=cb9c7c6b21723c207fce7439be1e12f605e06650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8d:6a:b5:35:44:82:ae:c4:50:9d:e4:ae:9b:
27:d8:29:18:2a:29:23:0b:e9:db:3e:24:0c:80:aa:
e5:18:23:09:5d:ac:65:75:a8:90:d0:1d:b9:f6:13:
38:ae:5d:b4:fe:32:46:54:fe:fe:6b:cc:07:47:82:
a2:3b:97:9f:08:78:f3:1f:60:b4:54:01:9c:c3:dd:
19:2d:35:a8:ef:1d:a0:5d:11:7b:17:d3:05:48:33:
ac:b4:cf:51:6e:e4:85:bf:59:5c:4c:89:7d:92:ea:
65:b3:4c:e7:b4:7b:46:b6:4b:03:6c:76:44:94:32:
b0:a0:c2:a7:14:69:78:b5:b0:1c:12:f5:31:bb:7a:
f9:39:95:ed:21:7e:3d:c1:ef:af:75:72:b4:57:b1:
46:62:51:b9:b6:00:82:1f:53:cc:94:94:57:1f:81:
67:bf:fe:2b:12:93:b2:75:a2:83:c7:19:0c:d5:a4:
04:dd:21:98:25:30:27:20:a0:23:3e:03:e3:f6:8b:
62:e7:92:d4:b6:49:d1:15:fb:f5:96:24:9a:2e:c6:
fb:5f:3f:59:63:c3:31:99:2a:dc:6d:41:f3:1a:7d:
a3:33:c1:fc:14:99:1f:2b:2d:9a:b1:50:71:7f:94:
4b:14:51:05:52:3d:a1:67:ac:34:9f:f4:6f:58:ae:
07:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9C:7C:6B:21:72:3C:20:7F:CE:74:39:BE:1E:12:F6:05:E0:66:50
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ea:3b:b4:b3:67:63:db:66:54:9e:e9:a0:6e:db:24:69:b0:
62:ac:9e:84:74:87:d9:1f:8d:3b:cb:8d:3d:47:c9:22:30:27:
c6:2d:5d:10:66:2d:79:3c:27:5d:2d:d3:ad:72:b3:d8:7c:11:
e9:a9:6c:2a:17:74:34:81:cb:42:52:2c:19:37:39:1e:7b:d1:
14:dd:52:fd:4e:05:70:5f:58:3f:60:37:81:12:ac:b3:70:79:
ae:39:27:84:e8:30:8b:e1:d2:6d:53:cf:c4:df:76:da:52:f0:
13:ff:4c:91:bc:0a:dc:3e:dc:02:32:35:4f:08:47:ee:66:5e:
26:a5:17:e3:4a:6f:33:ca:8f:94:89:cc:7a:c5:28:47:f9:71:
82:6e:eb:3a:45:17:0e:21:de:a6:e4:d7:61:a1:96:31:3c:c6:
59:4c:3b:8a:f0:0e:b9:63:a5:ad:ff:e3:f7:0e:b0:c6:f9:f1:
4b:16:c1:63:5b:4e:38:45:57:98:97:8f:12:f1:bc:82:32:dc:
62:b8:7b:bc:06:31:e2:09:d3:fa:5f:b7:66:29:b4:f1:ca:95:
d8:d1:fb:dc:c1:fa:96:99:09:13:f6:80:72:4c:db:90:3b:63:
d3:31:75:d4:59:cc:03:77:d5:2e:1d:b8:e1:02:bf:69:24:0e:
7c:d0:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:13 2026 by rpki-client