Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: Yz20IdR0sxNOwf9Sn47fAZUqbJsbP/UUD6xqHC24WSc=
Subject key identifier: DB:A3:27:3F:F7:ED:54:0B:02:F0:55:66:DC:3F:94:25:AE:81:21:D1
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019CA945D46E29A49E425EB02B516423B274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 12:00:51 +0000
Manifest this update: Sun 01 Mar 2026 12:00:51 +0000
Manifest next update: Mon 02 Mar 2026 12:00:51 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: BAGMoic3Wyn+80D/l1UOgR9qT5mKgZx776RiV/bmwoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:d4:6e:29:a4:9e:42:5e:b0:2b:51:64:23:b2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Mar 1 12:00:51 2026 GMT
Not After : Mar 2 12:00:51 2026 GMT
Subject: CN=dba3273ff7ed540b02f05566dc3f9425ae8121d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:78:19:8e:b8:fe:09:04:50:8d:fa:84:47:75:
db:f0:40:7d:e7:3a:2a:8e:f8:98:42:1c:92:c6:1e:
a5:c3:7c:07:15:06:8c:54:a2:f5:c3:c7:2d:e0:9c:
b1:77:0c:10:9a:a5:b9:45:f1:ac:20:cc:ba:4d:0f:
f5:55:3d:56:13:5f:20:ab:69:ed:2c:59:da:cf:6b:
4d:39:6a:ee:de:22:87:ab:db:d9:d9:66:44:6c:3c:
e2:19:d5:52:e6:b0:a7:9b:9a:a5:6e:9a:37:42:d1:
2b:e6:94:fa:c4:f4:e0:40:0f:00:31:4d:c3:8a:24:
da:26:98:4b:28:13:32:3c:94:7d:c1:ef:4f:d5:97:
66:77:79:32:84:41:29:7a:39:49:bf:a8:69:d8:df:
12:d0:2e:7c:a7:2d:29:21:53:82:9a:d4:08:33:83:
70:e6:af:23:04:86:02:82:21:1c:72:40:e8:c4:43:
32:a0:c3:38:26:6b:98:ab:7b:b1:da:35:f4:4e:e8:
5d:8d:f7:95:87:c6:62:f6:59:1d:b4:98:0e:8d:27:
11:97:84:53:c7:23:cf:a5:0e:be:62:ba:b2:3b:ae:
e3:7d:32:b1:41:8c:d4:cc:5e:4d:f3:d6:d5:aa:f9:
b8:19:4c:f0:92:4c:db:55:67:bc:bf:2a:f0:e7:14:
00:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A3:27:3F:F7:ED:54:0B:02:F0:55:66:DC:3F:94:25:AE:81:21:D1
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b3:ae:13:60:fd:c2:20:ca:f4:c2:c3:d5:e6:f3:13:4b:72:
b2:3f:c9:8c:49:04:8f:81:eb:26:f9:b3:e4:92:bb:84:4a:4b:
2e:5d:fa:0f:66:ad:bc:be:22:dd:a0:d6:9e:81:fe:f4:25:cd:
62:2e:48:c8:7d:00:2d:b3:5a:cf:ea:5e:ca:1a:f0:0d:00:79:
e5:69:38:e9:82:fa:13:cd:0d:94:a3:e3:db:e1:c1:b6:82:10:
b4:cf:30:a9:ff:5d:2c:62:c2:ae:27:ea:74:30:56:50:36:a0:
f0:55:16:36:88:d3:3a:68:69:04:19:20:55:41:83:7c:9e:0f:
dd:3f:a7:3a:ae:58:64:06:b5:a5:1b:5d:72:1a:fb:7e:f2:38:
69:7d:60:af:34:c7:4f:fc:a8:ee:6d:a2:7a:79:dd:99:ef:60:
25:f9:55:ad:c3:f7:2d:85:a6:20:df:e0:0a:18:48:22:ec:5e:
3d:7a:8e:7f:98:5f:63:1e:89:9c:c3:64:50:06:81:e6:8b:4b:
60:f9:d6:c9:c7:de:aa:d5:dc:66:4e:bb:84:26:be:d0:f9:bb:
1b:ac:53:03:49:59:bc:f4:36:97:29:04:75:69:9a:05:d9:3a:
36:a7:1a:01:87:10:a2:6e:ef:3e:3d:99:e4:7e:34:b4:13:83:
be:0d:10:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:51 2026 by rpki-client