Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: kcMV6L+MDSR9ylmgDeropohDUlcmV3EhxrVCZZCRayI=
Subject key identifier: 5F:3D:C4:ED:61:98:8F:84:0E:66:28:5A:D9:AC:28:84:CE:EB:C6:17
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019F92ED02E4211888EBB1D19D2B2A011F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 01DF
Signing time: Fri 24 Jul 2026 07:00:33 +0000
Manifest this update: Fri 24 Jul 2026 07:00:33 +0000
Manifest next update: Sat 25 Jul 2026 07:00:33 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: nh8DTUUIaO8AglxfgQtIk6igC/pFmDa4Za/TEdf2zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:02:e4:21:18:88:eb:b1:d1:9d:2b:2a:01:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Jul 24 07:00:33 2026 GMT
Not After : Jul 25 07:00:33 2026 GMT
Subject: CN=5f3dc4ed61988f840e66285ad9ac2884ceebc617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8f:39:a0:bc:23:f0:ce:83:07:59:6e:e0:c8:
06:30:01:72:ad:e6:07:ec:f4:d2:4b:d6:d0:84:a9:
11:21:13:84:cc:67:0b:d6:fe:08:4f:24:9f:3a:29:
2c:30:b3:d1:99:b3:a0:8c:28:11:b7:25:54:3b:08:
b7:80:ca:f9:04:2b:3a:6f:cf:1d:55:2f:87:cb:db:
37:5f:58:85:8d:fc:ef:f5:1e:d3:b9:d0:4b:9f:4b:
60:de:3d:ff:77:e7:ad:e2:bd:78:8f:31:56:7c:09:
3b:d1:b2:a1:01:d1:1a:f3:2b:f9:bd:1a:31:bd:98:
c9:d4:c8:16:c2:0f:91:a0:06:f4:9d:0f:90:69:63:
a2:92:d5:8f:ac:1b:3a:12:4d:12:ae:fd:82:b3:69:
de:a2:6e:f2:8b:18:b5:cd:f5:b6:ac:c1:25:73:56:
5b:cf:0f:f4:3a:59:6e:69:2a:3a:5d:4d:ef:13:5a:
a0:52:3c:e3:0c:5c:48:dc:ea:0f:25:88:b2:07:d2:
8e:6c:a6:02:56:ff:94:74:16:c2:33:4f:11:9b:1f:
7d:37:b3:63:6f:38:2a:b9:6b:b6:0b:ec:3b:24:f4:
4e:10:2c:75:ce:b4:80:7a:56:08:e2:ac:3e:75:4d:
ac:fd:e4:77:5d:4d:c8:92:26:cf:ae:b9:e4:89:c6:
3d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3D:C4:ED:61:98:8F:84:0E:66:28:5A:D9:AC:28:84:CE:EB:C6:17
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:13:27:ed:c9:e5:10:a0:95:91:7e:e8:b3:4e:aa:8b:a5:d5:
a8:d1:e1:62:9a:41:5d:5a:ab:aa:0c:a8:76:64:5b:f9:70:14:
df:66:bf:21:65:62:e4:4b:d7:82:dd:29:e6:c4:f3:4e:a0:a9:
b9:0b:4a:c1:83:80:2f:1c:10:32:44:c8:bf:03:c9:f1:f1:88:
0b:15:f8:5e:2f:c2:2f:45:e1:e4:98:ca:47:08:c0:89:06:24:
5f:a2:85:1f:d8:0a:e0:45:b0:d7:35:b7:3d:ef:80:9d:32:dc:
a6:82:98:14:79:09:5d:c3:6f:ab:af:91:2e:8c:35:59:de:87:
97:3d:07:a5:bf:88:1a:5e:f2:5b:05:6a:74:f3:e2:a4:b9:ae:
67:40:90:17:80:85:88:9b:8c:14:6e:d6:6f:52:63:57:95:9a:
9f:af:9f:5f:a4:8c:ef:1f:ef:9b:89:3f:97:42:8a:da:55:06:
23:65:09:33:e1:1a:f3:d6:48:da:af:d6:62:ed:94:1e:8e:96:
a7:65:d6:89:77:ad:55:4f:5f:f8:ca:55:bf:86:9b:11:03:ec:
38:fb:05:10:b9:24:bc:bb:ca:14:5b:88:8a:b6:87:ca:c5:4a:
59:b7:cf:8b:1f:0f:c0:53:96:f9:7d:2a:50:b0:09:09:dd:1a:
66:69:2b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:47:28 2026 by rpki-client