Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: qKyqX3P1le6nUUQGJL4J3gPPEbU0zCCiQEjLAI8cv8o=
Subject key identifier: C3:D2:D5:02:43:99:14:6B:C7:64:F8:B4:2A:93:8B:D6:D6:17:8B:B8
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019F90C7CD876E47CB9F2D7E2B4A3BD8F321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0B8E
Signing time: Thu 23 Jul 2026 21:00:41 +0000
Manifest this update: Thu 23 Jul 2026 21:00:41 +0000
Manifest next update: Fri 24 Jul 2026 21:00:41 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: /dBh8muMhMgtiIJuA532SGdr8pqX1d8nTkKziDq+POw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:c7:cd:87:6e:47:cb:9f:2d:7e:2b:4a:3b:d8:f3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jul 23 21:00:41 2026 GMT
Not After : Jul 24 21:00:41 2026 GMT
Subject: CN=c3d2d5024399146bc764f8b42a938bd6d6178bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:83:1f:d8:bd:ab:70:5f:b2:b0:b5:60:5b:
17:d1:04:5b:5a:82:50:76:4f:e8:8b:05:38:01:c7:
fa:c4:ea:78:07:5f:80:60:47:dd:30:ff:e2:23:2f:
68:db:4e:a7:2d:42:be:aa:c6:d9:26:db:dd:89:74:
0a:fc:da:62:a0:e2:38:10:65:d3:64:35:75:95:9f:
27:f9:62:72:66:0f:c8:79:0c:12:e5:1e:b1:c7:95:
84:37:dc:36:78:05:25:ab:05:a3:6d:e8:50:ee:4a:
aa:06:c0:65:32:57:75:42:04:3e:fb:de:87:4d:c1:
cc:70:e3:2d:bb:4f:5f:32:e6:3d:a4:10:59:c5:97:
00:c3:bc:97:26:37:df:1b:3e:53:e6:da:ba:6d:09:
e7:c1:3c:77:8e:48:3a:5b:54:80:df:74:36:71:e1:
92:b3:01:10:57:2e:0e:2f:f8:07:f0:90:0c:e3:ca:
69:0b:6c:31:af:6e:c7:fa:09:a0:ba:44:84:b7:84:
1e:65:7a:86:12:cc:58:92:77:c4:70:35:57:54:19:
68:07:72:52:85:1a:49:2f:98:fa:c1:39:c3:30:39:
9b:6e:80:a0:02:aa:e0:b4:ef:32:85:5d:03:27:1c:
a6:f9:fa:16:ec:ea:6b:49:c0:f2:15:9a:b4:16:09:
81:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:D5:02:43:99:14:6B:C7:64:F8:B4:2A:93:8B:D6:D6:17:8B:B8
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d3:dc:c9:97:dd:88:33:1a:ad:8c:6b:4f:1d:ed:83:00:3a:
03:3e:84:62:8d:11:ba:12:23:b8:bf:94:dc:6f:b7:fb:92:1a:
ad:d5:da:61:82:62:88:4c:1b:22:75:1e:e8:c4:cb:e5:70:0c:
05:eb:eb:b7:89:2c:68:ae:a8:ad:9f:91:42:d2:08:42:2f:bc:
d9:1b:3f:4e:bc:43:b3:01:b1:1c:3c:f1:22:c9:de:fd:36:71:
44:4a:10:68:12:06:91:90:1f:d3:74:72:de:55:f5:7b:6f:21:
af:aa:2a:4a:fd:ea:9f:7d:26:c3:7b:96:55:55:f8:b0:7c:a5:
cd:22:0e:22:61:6d:f5:7a:06:02:f9:50:12:a4:1f:a8:1b:99:
19:a4:a1:b6:88:bb:90:63:2d:96:97:3a:51:33:4c:3c:78:25:
0b:77:94:05:ff:96:c9:5a:25:5b:d1:3e:df:12:08:f3:df:55:
b0:21:e6:c9:9d:bf:e5:48:a1:23:eb:99:49:d8:15:93:39:f8:
41:ef:a7:66:70:1d:9e:69:b9:ad:92:c9:09:a4:b7:37:da:58:
d6:d5:eb:79:86:64:9d:ee:99:8d:51:96:a7:37:96:64:3c:8e:
d2:6d:4a:8d:65:3d:6d:b2:b6:9a:88:2d:3d:1c:c4:41:a5:0c:
6d:51:2e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:50:09 2026 by rpki-client