Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
File: u8JktaZJT4kPoxT2H9fSdYfjWDA.mft (raw, json)
Hash identifier: pCSWDkovnRBMQ+aB0Q4i9d9Q1zpwZDP7lY7FxBORa84=
Subject key identifier: 26:54:6F:73:20:27:CB:3D:8A:2F:9B:A9:CA:64:7E:FA:13:08:DC:58
Authority key identifier: BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
Certificate issuer: /CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Certificate serial: 019D25BA5E16901D38BF6192FB149E89C927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 16:01:03 +0000
Manifest this update: Wed 25 Mar 2026 16:01:03 +0000
Manifest next update: Thu 26 Mar 2026 16:01:03 +0000
Files and hashes: 1: K8HecFRRKEjS3qKmvuFAnvz_-uc.roa (hash: vesVSy2mT3SX5WV3LlmG2YI3Cv5I/bjZoprTrOQYHHA=)
2: u8JktaZJT4kPoxT2H9fSdYfjWDA.crl (hash: g6Vd1MnfDIZLwu2j8xx0WOl7Loysg6nbI20EPaNoSJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:5e:16:90:1d:38:bf:61:92:fb:14:9e:89:c9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc264b5a6494f890fa314f61fd7d27587e35830
Validity
Not Before: Mar 25 16:01:03 2026 GMT
Not After : Mar 26 16:01:03 2026 GMT
Subject: CN=26546f732027cb3d8a2f9ba9ca647efa1308dc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:f9:06:98:6f:fc:1c:9f:b0:cb:28:66:cd:
0e:d0:d2:3a:77:f9:58:10:1b:6a:89:e6:78:9d:75:
78:ac:fb:2a:fb:f2:cd:ed:70:06:21:8e:02:67:e5:
d8:f2:34:50:e6:57:90:81:6a:3f:b3:85:88:94:4b:
69:dd:93:ff:34:66:97:28:30:5a:e9:26:b0:48:ab:
cd:c7:c7:23:98:08:42:05:eb:8b:1c:4c:52:e4:be:
8a:49:21:e0:4e:5a:a5:08:ec:42:42:78:49:3f:c4:
c3:bf:04:bb:85:d9:d3:0f:ae:dd:a9:e4:aa:9a:ce:
07:35:7d:7f:3c:0e:aa:f8:c2:27:22:0c:6d:5b:45:
80:39:08:e8:8d:07:0b:e9:32:1e:a2:fc:c7:5d:65:
4f:18:b0:0d:f4:02:e0:0b:70:5f:29:81:fe:1a:cb:
4a:97:10:4c:61:14:76:08:70:87:7a:52:c6:50:cc:
ca:76:81:b6:21:02:ab:e9:b8:6f:a5:b8:6b:cd:1f:
0a:bf:32:9b:38:97:70:9e:6e:41:f5:b7:24:a9:bf:
b6:10:fe:0d:d4:bb:d8:22:03:59:b1:ae:9d:98:1e:
db:ef:81:7a:b4:93:e1:06:9a:ee:90:0f:3a:d9:9e:
34:79:bd:69:39:cd:ea:1c:05:d8:bd:bf:b5:a8:86:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:6F:73:20:27:CB:3D:8A:2F:9B:A9:CA:64:7E:FA:13:08:DC:58
X509v3 Authority Key Identifier:
keyid:BB:C2:64:B5:A6:49:4F:89:0F:A3:14:F6:1F:D7:D2:75:87:E3:58:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8JktaZJT4kPoxT2H9fSdYfjWDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/ea4e64-6d70-4bfd-909d-f0546cfab061/1/u8JktaZJT4kPoxT2H9fSdYfjWDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9d:52:9b:a4:52:fb:8a:0d:f8:f3:4d:74:de:2f:2e:2e:cc:
82:28:69:aa:6f:df:90:74:85:e8:f8:61:e6:be:1b:d7:52:a3:
36:59:a2:ad:42:b0:97:65:cd:f9:b0:0a:54:ab:28:b9:11:b2:
46:8c:b6:62:4d:10:4d:b3:9f:e6:74:6c:7f:74:58:cf:fc:2f:
3a:f9:88:83:73:c2:35:5e:aa:fd:40:50:c8:96:43:84:96:12:
fa:6a:85:84:9f:15:24:dc:85:12:c0:d0:42:6a:6d:94:86:81:
6c:40:62:f8:8e:37:a2:22:66:df:0f:57:40:c8:a6:de:d8:07:
fd:fb:44:1c:15:5f:4f:45:e5:4f:e6:bc:fe:e1:71:19:d7:c9:
1e:63:87:21:bb:6d:0c:33:07:27:dd:a0:a2:78:79:dc:ad:05:
fb:c6:02:5b:a1:6d:25:0b:50:44:6f:1e:55:3f:49:c1:a6:c9:
61:4d:61:b0:02:3b:d7:43:d6:af:80:2a:4d:b1:29:4b:5f:ed:
12:e4:bf:65:ac:5b:97:eb:32:a5:65:92:ee:b7:01:f2:2d:63:
f7:f0:2b:db:a2:c2:94:39:d5:d8:2e:1e:2e:05:7a:72:2f:ff:
23:7b:00:84:e0:5d:c3:ae:0b:24:8a:eb:de:20:e5:65:d0:d5:
ca:16:0e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:27 2026 by rpki-client