Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: xrD+GMbixxYkRFTh+jVAoQgTfRVcocTperZqvWEHNb8=
Subject key identifier: 6E:B3:C6:03:9E:7D:76:52:A4:40:B6:F5:B4:84:FF:64:3C:13:50:67
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019D9AAC3DD17127C70928AC8D1430DBC336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: fL+bWSnJsnTt7v+/Pn5ttD+rZCpqMCKkZCkiF9Oadm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3d:d1:71:27:c7:09:28:ac:8d:14:30:db:c3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=6eb3c6039e7d7652a440b6f5b484ff643c135067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:f4:ab:77:e1:95:04:92:61:d7:fd:34:b4:
55:48:08:5f:4f:c5:d5:4b:6d:d0:6b:db:af:c8:23:
33:42:99:18:8d:fa:15:df:ad:17:7d:da:78:bc:b9:
70:73:40:0d:53:87:6e:6a:00:51:b8:0d:5c:e0:36:
ca:26:b3:51:8a:bf:d1:bf:2c:70:aa:2a:53:52:46:
a3:d1:44:c2:21:1a:71:63:ab:3e:59:53:7d:10:76:
5f:7e:88:cb:4c:20:66:ad:df:4c:58:95:7e:7a:7e:
14:56:3c:c3:2e:52:4a:22:ab:7a:43:f7:de:8d:14:
6d:bf:9d:a0:83:57:08:97:d3:07:2c:82:4b:0c:72:
4e:09:7c:fb:6d:a0:48:b2:59:c4:ef:2e:a2:08:d6:
23:7b:cf:53:7d:fd:65:a8:da:c6:11:4e:82:c8:80:
49:06:f6:56:f3:a4:0b:c6:72:95:76:c7:bb:dc:e5:
93:97:0e:1f:0e:97:88:eb:d0:5f:75:ca:23:7a:86:
a8:ca:7c:52:74:ed:5f:6d:eb:3e:bb:e8:d4:ee:48:
4e:a1:29:26:ce:6f:df:92:05:ca:b6:1c:7f:62:dc:
8d:99:64:43:8a:bd:ab:f7:a2:97:68:ad:0f:35:be:
1e:f0:d6:58:d5:19:a6:18:4e:1e:35:69:36:50:0a:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B3:C6:03:9E:7D:76:52:A4:40:B6:F5:B4:84:FF:64:3C:13:50:67
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f3:cf:dd:47:57:1f:24:e3:4a:1e:df:40:99:89:9f:d8:a4:
bd:90:e2:82:ed:bf:7d:b3:78:18:7e:2a:73:51:57:37:1c:70:
30:60:74:f3:5d:f7:f4:fb:1a:df:16:07:da:ed:f3:c5:c7:98:
d7:eb:b2:cc:66:46:0f:13:51:82:b6:5e:31:18:b6:82:c3:d4:
f9:d2:a8:f0:92:0d:b5:56:e3:98:49:5a:8b:7d:6e:a6:8c:29:
36:27:55:f0:ec:5a:90:0b:3b:3c:46:3e:a5:5e:80:e7:a9:e8:
da:a7:56:4e:12:36:30:1d:6d:a5:cd:87:91:2f:ee:75:b7:cd:
54:7f:55:9b:ee:3b:33:5e:87:32:63:5e:a8:3b:dd:a4:07:7a:
ad:9d:35:8e:5e:2a:a2:35:45:c4:75:b7:aa:a5:7c:32:3d:36:
2b:2c:76:fd:4b:f0:6f:8e:1c:fd:8c:4e:2f:11:f7:ff:e3:f7:
d8:9a:d8:0d:ea:bf:27:6f:be:b9:20:e1:d3:9b:83:d8:ae:52:
de:53:80:8f:cb:19:c0:2b:45:94:58:32:2b:d5:57:16:2d:1b:
6c:95:69:00:ea:16:a3:0f:98:ff:01:a5:5a:43:bb:a1:a5:b8:
38:55:86:b0:5a:76:6b:b6:e8:d1:58:de:6d:20:8e:5e:1a:a7:
5d:9f:88:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:33:46 2026 by rpki-client