Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: u6clqlcEC+ik5KqDlN2ZnNKfbYlasPhbKMWTUVeSyB0=
Subject key identifier: 9D:87:77:CF:46:06:25:6A:92:B1:FF:45:A2:55:80:01:1E:EF:63:C8
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019D28BBB99F525D133F273FB8185DDF706A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0A4F
Signing time: Thu 26 Mar 2026 06:01:24 +0000
Manifest this update: Thu 26 Mar 2026 06:01:24 +0000
Manifest next update: Fri 27 Mar 2026 06:01:24 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: xGs9w+ZMiYJmOW1jmMiD86kAuA6pWhNMpFkvryNiI9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b9:9f:52:5d:13:3f:27:3f:b8:18:5d:df:70:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Mar 26 06:01:24 2026 GMT
Not After : Mar 27 06:01:24 2026 GMT
Subject: CN=9d8777cf4606256a92b1ff45a25580011eef63c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:fb:87:5d:eb:8e:77:10:29:fe:5a:aa:c7:
8b:05:66:b6:a4:83:7e:f6:b2:e1:15:64:87:3f:a6:
ca:56:bc:ad:86:8c:d6:0c:73:8c:24:30:25:2c:34:
b2:42:fd:33:c6:47:f5:df:7c:4a:6b:ae:74:00:24:
f0:0b:d2:ee:56:71:e1:73:bc:7a:10:4e:28:eb:5f:
37:be:c8:e9:35:de:c9:7e:63:52:2b:37:91:0c:f0:
b5:11:10:bc:ec:e9:5a:36:aa:b2:fe:84:c7:56:8d:
dc:b6:7f:6d:e1:e7:33:c8:7b:f8:69:44:db:6c:0b:
2d:37:7f:58:db:87:ac:5a:9d:6c:18:b8:5d:94:40:
b9:63:cb:b7:d8:b0:c7:36:cb:ae:14:38:70:a3:a9:
a1:ef:11:d9:91:66:67:78:2d:df:c8:90:ba:c2:56:
c1:07:aa:7c:34:f5:dc:89:4c:dd:0a:47:0a:96:2a:
a8:d1:ee:83:5c:6b:8a:56:2e:b9:ae:4d:1c:36:28:
9d:b7:c8:f9:08:46:62:f5:70:e3:1f:6d:d1:0b:60:
94:62:d9:10:f9:72:19:bb:6e:85:29:b1:3e:d2:9e:
18:cc:a8:25:a1:b4:70:ee:e9:dc:0b:57:9a:ad:35:
82:c8:06:a8:81:9f:c5:3d:57:19:4f:08:b9:42:44:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:87:77:CF:46:06:25:6A:92:B1:FF:45:A2:55:80:01:1E:EF:63:C8
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9e:dc:4d:ff:8e:91:fa:23:d8:c8:d9:ab:56:95:8d:15:4d:
4b:06:40:46:ef:48:9c:05:d7:6e:2f:65:42:10:04:da:0a:2f:
c9:41:31:90:7d:e9:6d:c5:0a:cd:98:7a:6a:39:7d:ea:10:a9:
09:d4:3e:6a:90:d1:95:3d:47:20:5d:5a:91:20:57:cc:3e:50:
ad:23:5f:ad:35:87:b8:ab:52:7d:08:d1:c2:8c:9e:fe:12:45:
56:d4:d0:9d:74:0d:fe:26:6d:d0:43:ed:ab:5f:be:2c:8e:9f:
79:54:dd:c7:4a:d4:c5:38:22:df:df:69:77:0c:fc:e0:6d:38:
cc:c3:da:a6:a5:b2:0e:fc:47:b1:4b:b8:2e:3d:1a:46:e8:79:
4a:96:85:a5:df:cc:d7:64:b6:86:8e:78:b7:14:e2:73:d7:bc:
f1:3e:b6:c9:c0:8a:d4:24:57:c7:fd:4b:75:13:4f:7b:6e:f5:
ed:1f:5b:5d:07:72:6b:1f:39:5b:7b:34:36:1f:d8:65:7c:e8:
13:76:a2:86:52:ec:bc:74:fb:e9:bc:0c:bd:a6:bd:3b:3d:8c:
b1:1e:68:72:9a:cb:f4:f6:b0:2f:73:3d:4f:f8:b2:91:d1:98:
3a:11:8d:9f:2e:20:4b:59:3e:ea:01:83:c3:f2:98:fc:6e:13:
42:02:dc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:17 2026 by rpki-client