Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: Rq4qTHlzZU83S0rShtSjooWwcwq+/q2gShD5wTnYOv0=
Subject key identifier: CB:E6:61:FC:C5:7D:8B:68:2C:4B:40:CA:98:48:47:5A:0C:D7:79:F6
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019E20235D0F06FA3B2F1869F5079EA8FFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 07:00:48 +0000
Manifest this update: Wed 13 May 2026 07:00:48 +0000
Manifest next update: Thu 14 May 2026 07:00:48 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: L3g89gDlZLtJoo/hdaMS/P+Cat5YNYM1RHpbdQdwWVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:5d:0f:06:fa:3b:2f:18:69:f5:07:9e:a8:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: May 13 07:00:48 2026 GMT
Not After : May 14 07:00:48 2026 GMT
Subject: CN=cbe661fcc57d8b682c4b40ca9848475a0cd779f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:21:49:2d:25:ef:3b:07:45:b7:46:37:d6:
7c:fc:3f:cc:ff:7a:9e:1e:f7:ef:fe:41:8d:46:59:
7f:0f:e5:13:11:15:1d:cf:db:04:38:5e:4a:fd:c3:
93:00:b0:7a:7f:6f:4a:3a:02:b4:e8:31:36:ff:ad:
c8:77:a9:d4:26:32:28:8e:97:f8:fb:10:06:2b:de:
a1:7a:7d:5e:02:66:32:96:90:f9:ea:ea:3f:e1:06:
c4:bd:fd:25:fd:58:a6:5f:25:1a:1a:62:9d:fa:3a:
ba:ae:bb:99:f8:87:9f:6c:85:6d:12:bf:7a:ec:f2:
92:77:3d:76:73:06:5b:70:9d:7e:df:bc:93:8e:64:
71:ca:9a:0f:1f:28:58:0c:59:be:f3:4b:c4:d7:5a:
06:d2:ca:87:3d:66:d8:a8:e5:f4:95:0f:46:8a:87:
35:e9:2e:18:0a:33:4e:e8:d3:73:e9:32:4e:1f:09:
4e:fd:4f:e8:fe:20:e9:e2:6c:a8:a1:e7:47:85:47:
27:94:e9:aa:4b:5a:d4:06:33:5e:71:03:7e:42:6a:
01:54:f5:9f:58:46:58:24:cf:ac:de:e9:f2:90:ff:
42:e5:9d:b6:ac:d4:6b:9e:86:36:42:ff:58:7f:c4:
b3:53:c9:46:0f:f5:fe:69:0f:55:54:46:9f:c4:67:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E6:61:FC:C5:7D:8B:68:2C:4B:40:CA:98:48:47:5A:0C:D7:79:F6
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fa:ad:78:04:da:ca:91:fc:3e:65:a3:58:54:ff:e2:dc:01:
c8:bf:03:d3:af:e4:01:59:45:08:e2:33:93:4f:20:6d:41:ca:
0e:c6:4d:24:51:63:ca:d9:3a:05:14:04:df:2f:59:ed:51:4f:
f6:88:93:d9:de:b1:a2:3f:b1:06:56:a0:6f:14:f9:20:05:44:
31:8d:65:f0:0c:90:93:49:d5:54:d3:a6:b9:0f:98:e7:f0:0e:
e4:ba:9f:6c:22:1d:67:a4:07:8d:6f:4d:cf:f4:d5:e3:4b:46:
6e:54:39:9a:66:c9:d1:b8:5c:ca:23:1d:b0:12:aa:4b:a9:b6:
5b:f9:e8:64:79:b8:4c:2f:d4:eb:e3:f6:6d:03:fa:b3:a3:f4:
38:1d:ba:d1:06:77:f2:7e:07:84:28:22:a5:1e:28:fb:ab:01:
dc:0f:60:98:cf:a2:19:81:77:0a:67:ab:61:01:76:18:5b:83:
65:d0:7a:1c:8e:12:ef:b2:3d:dd:5e:39:1a:b6:a1:92:fb:25:
a9:58:70:0a:ae:8d:29:6a:32:b1:d8:ee:ec:e0:b8:ee:8b:c3:
a9:b1:7f:1b:71:c0:b3:2e:35:47:0c:84:ad:6f:fa:2f:71:76:
c6:d7:1d:c5:8c:f8:cd:90:d5:e7:0d:2f:5d:27:7c:9b:02:1c:
a7:19:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:42 2026 by rpki-client