Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: BGHpBBXvpP+AjHNmW/HxQ0lKkdQQtaQk3EOh0r1HUTA=
Subject key identifier: BC:B6:39:16:6A:52:7D:7D:04:D3:6D:5B:CA:14:EB:6D:86:6A:71:67
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 01A1DEDECDE513888FB3EB381C6DA3DBC763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1679
Signing time: Sun 15 Nov 2026 11:01:45 +0000
Manifest this update: Sun 15 Nov 2026 11:01:45 +0000
Manifest next update: Mon 16 Nov 2026 11:01:45 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: muYuMEzWI3gDRfyyFJxoVjIGEWWLBNw9dph3qQWzCp8=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:cd:e5:13:88:8f:b3:eb:38:1c:6d:a3:db:c7:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Nov 15 11:01:45 2026 GMT
Not After : Nov 16 11:01:45 2026 GMT
Subject: CN=bcb639166a527d7d04d36d5bca14eb6d866a7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:5f:8e:dd:e8:85:cd:24:c2:86:93:23:7f:
03:41:b9:1a:f2:9b:9d:e4:b2:ec:a0:c6:c4:c6:25:
03:65:8b:fd:fa:38:9d:15:77:9c:9c:7e:07:72:51:
6a:f5:6d:19:85:8f:02:d6:71:d4:13:f3:a1:2f:a6:
9a:e1:1d:27:29:23:c5:ff:48:a4:50:58:08:d1:77:
05:6c:bf:50:22:73:14:c9:9f:56:45:c3:ed:b1:2d:
a2:ae:42:05:e4:cc:ed:d2:62:a5:7b:f0:7a:d0:46:
f5:ed:0a:7e:c4:0a:0e:23:22:8f:a4:8e:74:f9:8c:
41:9e:61:9d:a2:29:c0:df:72:0b:d6:7b:76:33:c0:
93:ca:e5:46:1a:2f:cf:e5:8b:c0:7e:fd:cc:d1:44:
74:ed:eb:f8:48:2e:e8:3d:11:49:18:9a:6f:26:15:
c2:65:9f:86:3d:9d:e7:40:f6:e7:21:af:a1:a2:fc:
79:52:6d:2f:62:39:07:c3:b9:7b:2f:e9:ce:59:9e:
5b:74:51:47:cd:6a:17:e2:b2:cb:79:0c:80:d0:d9:
8a:4d:16:53:3a:78:04:38:70:ee:ec:fb:ba:e2:b6:
76:2c:c0:83:db:1e:f6:45:f4:2d:68:5d:4d:10:fe:
8a:27:03:4c:7a:6a:34:64:0f:2b:34:4e:08:7c:97:
53:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:39:16:6A:52:7D:7D:04:D3:6D:5B:CA:14:EB:6D:86:6A:71:67
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:fe:7f:65:c7:1f:4d:e5:ad:2d:f3:d6:33:11:86:03:46:e3:
88:75:84:68:73:04:94:b1:67:9b:4b:7e:c1:88:55:29:06:7b:
ca:7e:2a:2e:d8:60:c9:c1:b4:a8:25:09:73:12:06:a3:52:d6:
0c:b0:f8:6a:35:52:d6:a5:08:9d:5d:26:b7:8d:a1:17:d1:a9:
79:3f:fa:97:a1:a4:34:b0:df:52:4d:ba:30:26:33:62:a5:1e:
8a:9f:65:79:6e:b8:93:14:c7:f9:45:b4:3b:cc:1b:57:fa:dd:
7b:1b:d8:f1:35:c3:ce:de:1f:67:b6:73:df:33:5d:82:cf:bc:
89:fb:a8:d6:84:0c:92:b4:7b:ba:44:e7:ed:d2:54:29:f7:8b:
67:0f:79:64:58:c1:03:18:79:63:77:4e:46:4b:60:03:71:85:
46:0a:32:b3:81:c0:03:c6:68:6b:c1:14:3d:6e:77:66:5f:cb:
d1:8a:8d:03:5b:88:54:39:9a:f6:89:a7:4b:b6:8a:cf:52:09:
78:9d:66:03:24:1d:8e:75:31:98:20:31:14:ba:9c:ae:8c:6d:
5e:0e:bc:28:12:84:e7:92:39:ad:1c:bb:6a:f9:7f:60:73:f0:
66:6c:7d:30:1e:f1:d1:39:98:02:65:78:1a:93:4f:f6:84:72:
cc:78:5d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:23:13 2026 by rpki-client