Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: 9VNZuBT6/BRnFPbiV0QdWM5r7I/QOq229J7ued18fVQ=
Subject key identifier: 5F:07:67:00:74:4F:7A:00:0D:FD:54:EB:3D:C8:A0:44:90:3F:E0:F9
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019EC111E2375B4F8B36353EC461F8225D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 1970
Signing time: Sat 13 Jun 2026 13:00:35 +0000
Manifest this update: Sat 13 Jun 2026 13:00:35 +0000
Manifest next update: Sun 14 Jun 2026 13:00:35 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: TrtluuHmU+LsxJ4ntinCU1/nYXueTCouqD5MAPLRrvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:e2:37:5b:4f:8b:36:35:3e:c4:61:f8:22:5d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jun 13 13:00:35 2026 GMT
Not After : Jun 14 13:00:35 2026 GMT
Subject: CN=5f076700744f7a000dfd54eb3dc8a044903fe0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:ac:78:6a:d2:70:20:fe:92:39:68:2a:b3:
96:4f:fc:16:09:bc:f6:ed:59:7c:74:64:4e:f9:a3:
3b:b4:61:3f:b7:02:75:ae:1a:6b:cc:ac:39:a4:9c:
11:cd:06:1b:46:96:a3:b1:ea:95:32:89:58:9e:3f:
9c:6c:17:40:cc:db:95:dc:89:a5:65:a4:af:2e:c2:
78:57:13:92:b5:4e:51:f9:d4:ed:7e:cc:4e:03:e5:
62:cc:15:f9:ef:59:d0:37:7f:f5:d0:16:b9:f1:3c:
be:b5:66:97:c0:76:6f:28:a6:04:5d:62:eb:d2:9b:
76:7b:58:a4:84:75:f6:d3:79:99:6b:d5:b4:2f:a8:
b7:34:f3:e7:0c:99:87:53:b8:05:91:54:66:ab:ed:
eb:41:d0:dd:8a:7a:9d:c1:d8:2d:70:a9:0e:57:b6:
24:d9:91:4e:74:07:6e:db:72:ab:62:2e:f8:da:09:
cc:56:99:92:28:01:c7:c5:31:d9:6e:72:f0:ce:06:
28:9e:01:fb:61:c3:fa:2d:19:34:34:11:17:c7:0b:
99:79:45:4d:bb:7a:e1:2e:f2:d3:8e:79:e9:ca:78:
e7:78:80:1a:9b:12:06:24:f5:80:ef:b0:01:71:bb:
44:56:08:33:04:95:4b:6d:41:a2:a6:92:df:ae:b4:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:07:67:00:74:4F:7A:00:0D:FD:54:EB:3D:C8:A0:44:90:3F:E0:F9
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:bf:46:9f:33:65:83:29:c0:de:dd:b7:b5:64:f4:42:69:11:
5c:e4:af:c3:d2:e4:67:e3:2e:94:c4:65:4d:13:7e:d4:e2:20:
09:ad:ed:c7:fa:d7:03:ed:0f:1c:e8:af:0d:05:00:b2:8c:74:
5f:eb:f9:bc:f2:c6:2f:d6:d5:d6:0a:49:84:75:93:fc:4a:6b:
06:64:54:07:16:1b:b0:50:74:b4:07:a3:de:8f:b7:44:33:36:
93:a7:e0:e8:a9:38:8b:06:eb:4f:7b:b4:a6:7c:83:68:77:f7:
5a:01:37:a9:37:ab:c6:46:fc:ca:14:f6:9c:1c:71:7a:c9:a4:
70:3f:2b:9c:6e:4b:ba:f7:e7:a1:37:91:9b:c8:38:15:7d:47:
38:2f:c7:eb:dd:c1:83:d5:a2:db:20:cc:e3:7c:94:59:ea:7c:
c8:b0:ba:b9:1b:93:55:21:ba:2b:00:0f:c8:5f:b4:3d:da:1c:
36:e4:f2:88:8f:74:72:5f:cf:e3:cb:13:c6:d9:2f:7f:2f:40:
d4:d1:fa:49:80:3d:3a:6b:43:5a:4b:ea:ee:55:36:48:8f:1c:
65:3c:69:33:b3:ad:d4:92:ad:9e:7d:0e:db:67:02:f9:a0:d6:
87:86:60:18:ea:a2:67:62:15:58:5b:db:4b:1b:c3:7b:2d:5e:
c2:38:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:53:55 2026 by rpki-client