Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: T9N4EqHO/Dxfsktobql3boa9uHHhlgaWqhGMDOajWYk=
Subject key identifier: 01:2D:C5:B5:53:F8:0D:34:B3:A2:17:84:CE:F7:7A:1F:D3:B4:AF:25
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019E1DFEA9C2B8D498D637F0F2872EC0AF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0ACE
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: IISl4HcUVENbzqZUQQMs5ukQHIfkhqtdS1RLFkfl7yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a9:c2:b8:d4:98:d6:37:f0:f2:87:2e:c0:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=012dc5b553f80d34b3a21784cef77a1fd3b4af25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:85:ff:c5:b3:5e:fd:01:e6:72:1b:fc:ec:
12:07:fb:21:7c:96:14:5a:03:0c:81:10:b6:d8:7f:
46:70:b5:df:fc:6a:1c:bf:09:ba:3f:14:ac:9d:cd:
ee:c5:31:69:94:e1:b4:13:da:8a:de:44:43:89:dc:
df:1f:c5:a6:49:0e:77:2c:d4:32:fb:d6:f4:b8:56:
83:e7:1d:bd:1b:3c:2b:d5:99:04:0a:c7:31:54:d5:
27:2b:ef:0f:46:29:0d:f0:ba:65:45:60:ce:72:ea:
1e:ec:81:ab:22:4c:80:47:83:8e:c2:d3:55:92:56:
a1:b6:f8:d9:0d:fe:6b:02:eb:1d:2b:e4:f1:25:9a:
57:c2:37:bd:82:e7:93:71:c6:92:2a:4c:4c:76:82:
7a:4d:c5:b3:2d:ee:6c:37:fc:58:89:d3:f2:34:02:
68:ef:72:25:af:7c:f9:e3:35:e4:20:3e:61:eb:50:
df:18:ba:8d:b1:ad:0a:6d:1c:ca:e9:20:76:9c:ba:
2b:01:42:24:42:1f:a9:a6:25:e9:77:6a:16:18:69:
e8:52:97:f1:a8:bb:ee:5d:d7:07:cf:15:f6:33:c2:
b0:fc:69:c4:9d:f9:15:87:f0:d1:3d:12:76:9e:14:
95:9a:74:e8:13:41:8e:95:17:66:ff:63:57:a1:a0:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2D:C5:B5:53:F8:0D:34:B3:A2:17:84:CE:F7:7A:1F:D3:B4:AF:25
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b7:c6:a5:c7:df:13:7e:c9:13:e8:15:c5:4b:49:ac:5c:6c:
7d:13:ab:bf:99:8a:70:c1:e6:d7:19:60:31:65:3b:71:91:c5:
a3:a8:a3:00:85:fb:cc:5b:da:13:c6:cb:10:cb:a1:76:97:3f:
e0:cd:7f:9a:83:d8:01:e7:da:3e:d0:99:ea:0f:9a:94:dc:84:
0a:8e:5c:7b:7f:d2:bd:48:4f:d6:53:4e:8d:f1:75:3f:2a:ed:
71:b5:a3:ce:6b:13:94:8e:d7:91:21:03:83:d9:07:c2:15:57:
0a:62:d8:2f:9b:d7:6d:db:20:db:60:24:bc:4a:aa:37:36:46:
bf:79:b1:c6:7b:c0:f5:c0:46:1c:47:87:1b:6b:78:99:73:f7:
56:3c:99:a0:ea:40:82:b1:53:86:6e:0b:91:99:26:8e:45:bb:
ad:51:cf:35:d2:36:b3:be:e7:e5:af:7a:bd:15:51:1a:80:28:
b3:ab:1a:aa:dc:35:13:f6:32:35:68:8a:2d:4b:90:9c:30:dd:
59:73:4b:5a:6f:7f:c1:1e:ef:1e:de:93:28:48:11:52:2d:d1:
ed:9a:ea:7c:ec:6e:61:73:ca:5d:ef:84:6e:67:cc:54:24:98:
96:91:d8:3a:79:c9:2c:52:98:46:1a:df:23:52:0b:ba:1d:d4:
81:b4:08:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/qnCuNSY1jfw8ocuwK8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDJkYzFkMmM4ZmJkYzA4NTE2YWIwYmIyMDg4YzM3ZWIw
MDI4NjMwHhcNMjYwNTEyMjEwMTI5WhcNMjYwNTEzMjEwMTI5WjAzMTEwLwYDVQQD
EygwMTJkYzViNTUzZjgwZDM0YjNhMjE3ODRjZWY3N2ExZmQzYjRhZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LyF/8WzXv0B5nIb/OwSB/shfJYU
WgMMgRC22H9GcLXf/Gocvwm6PxSsnc3uxTFplOG0E9qK3kRDidzfH8WmSQ53LNQy
+9b0uFaD5x29Gzwr1ZkECscxVNUnK+8PRikN8LplRWDOcuoe7IGrIkyAR4OOwtNV
klahtvjZDf5rAusdK+TxJZpXwje9gueTccaSKkxMdoJ6TcWzLe5sN/xYidPyNAJo
73Ilr3z54zXkID5h61DfGLqNsa0KbRzK6SB2nLorAUIkQh+ppiXpd2oWGGnoUpfx
qLvuXdcHzxX2M8Kw/GnEnfkVh/DRPRJ2nhSVmnToE0GOlRdm/2NXoaAHeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEtxbVT+A00s6IXhM73eh/TtK8lMB8GA1UdIwQY
MBaAFLvS3B0sj73AhRarC7IIjDfrAChjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTct
MDY0MzdlYzQ2NmI4LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84MjhmOTktODNiNS00MGFkLWE1YTctMDY0MzdlYzQ2NmI4
LzEvdTlMY0hTeVB2Y0NGRnFzTHNnaU1OLXNBS0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLfGpcff
E37JE+gVxUtJrFxsfROrv5mKcMHm1xlgMWU7cZHFo6ijAIX7zFvaE8bLEMuhdpc/
4M1/moPYAefaPtCZ6g+alNyECo5ce3/SvUhP1lNOjfF1PyrtcbWjzmsTlI7XkSED
g9kHwhVXCmLYL5vXbdsg22AkvEqqNzZGv3mxxnvA9cBGHEeHG2t4mXP3VjyZoOpA
grFThm4LkZkmjkW7rVHPNdI2s77n5a96vRVRGoAos6saqtw1E/YyNWiKLUuQnDDd
WXNLWm9/wR7vHt6TKEgRUi3R7ZrqfOxuYXPKXe+EbmfMVCSYlpHYOnnJLFKYRhrf
I1ILuh3UgbQIqg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:28:01 2026 by rpki-client