Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: 3d67wM6k6Q2SOy4X0Gdl2VVd1QtiHxeC0lb1KLFHi1c=
Subject key identifier: 19:DC:88:17:8B:21:5D:1F:14:AB:01:C3:74:B2:D8:BB:C7:60:4A:2F
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019E1F115038CA916998CDDA7ECD4DD9AF0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1488
Signing time: Wed 13 May 2026 02:01:28 +0000
Manifest this update: Wed 13 May 2026 02:01:28 +0000
Manifest next update: Thu 14 May 2026 02:01:28 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: //cDzASA2p2fmCXpWy+8m7wm5UX198AAV4pyjAeDQcg=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:50:38:ca:91:69:98:cd:da:7e:cd:4d:d9:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: May 13 02:01:28 2026 GMT
Not After : May 14 02:01:28 2026 GMT
Subject: CN=19dc88178b215d1f14ab01c374b2d8bbc7604a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:25:60:61:11:e1:c0:c9:0c:2a:e2:04:12:2e:
51:6d:0c:1a:37:e8:d5:93:45:1d:75:88:a2:39:da:
d3:63:dd:a1:10:ff:58:f8:be:7a:10:72:c2:52:d1:
76:a0:31:96:ce:52:32:37:e2:29:fd:1a:d1:61:83:
c4:2d:d8:56:18:e1:a5:e2:24:95:f5:df:d1:eb:97:
bd:b4:d9:47:10:2f:1f:aa:a7:0c:7b:ce:ac:fe:05:
16:6b:3a:96:1f:cf:0c:bd:e8:4a:72:11:ad:cb:dc:
33:85:da:f4:73:d3:61:e7:a0:06:79:ab:2e:ba:4f:
29:4e:f6:6f:95:a0:f8:c8:fe:ff:ba:7c:94:16:94:
d4:9b:20:16:06:1e:c6:e0:f0:02:48:36:14:52:0f:
3a:5e:70:2a:a2:26:09:79:18:d1:54:f9:e9:79:8d:
77:a9:11:84:36:e7:73:f0:37:48:50:95:21:61:50:
f4:b8:7f:0b:09:a5:3e:1a:45:9b:70:c3:e8:94:d0:
d6:67:23:13:d1:78:2f:7c:0c:32:f5:b2:8d:4f:02:
ab:b3:3b:85:80:2e:b9:22:13:8a:aa:4a:3e:a3:87:
40:62:f2:13:32:f0:52:58:9b:fa:6f:80:5b:9a:6b:
87:45:3e:d2:dc:df:22:49:16:7e:5a:f8:79:c3:2f:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DC:88:17:8B:21:5D:1F:14:AB:01:C3:74:B2:D8:BB:C7:60:4A:2F
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:0c:f2:c3:bf:c4:07:7e:b3:9e:9d:e7:01:d1:4b:ff:a5:22:
c5:b7:e2:80:a8:89:2e:ff:5c:29:9d:9a:f4:30:b1:e6:78:44:
6b:ce:f8:af:fd:95:4b:68:a1:c7:6b:e8:f8:b4:cf:a3:7b:98:
69:aa:f1:26:41:07:1f:68:1f:36:d5:00:1d:ea:29:0a:f7:ac:
bb:0e:1e:b4:08:cb:bb:f7:2c:16:5e:88:cc:f1:99:9c:4c:2d:
00:f1:04:15:16:fe:ce:f3:6e:56:1d:05:48:4a:f9:fa:87:15:
ba:1b:67:7b:31:af:b5:c2:d0:c5:54:d0:9c:cd:39:77:70:36:
92:62:09:45:11:59:e9:49:3d:14:0e:9c:ea:fd:69:22:23:82:
52:47:da:e1:dd:11:07:55:6e:a7:10:7b:62:20:55:71:12:52:
c5:92:da:bb:4f:59:10:89:2b:cd:06:3d:98:d2:b9:f2:27:c6:
99:f0:03:50:4e:ab:25:81:43:36:ad:ea:9f:20:bc:03:e5:d2:
f8:cc:6d:5b:09:bd:26:32:f3:0d:e9:de:a2:65:eb:4a:61:9a:
32:9b:01:63:9e:4c:16:f9:08:82:5a:e4:0c:ac:b9:48:e0:47:
20:83:76:bf:65:5f:c4:4b:fe:7f:04:1c:fb:eb:da:8a:5c:8a:
05:ac:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:07:09 2026 by rpki-client