Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: y24E+RmowWlVBigDW2dhNln1BjJeX6zvJK0zDOV0pzs=
Subject key identifier: 37:D1:71:35:77:A9:41:02:E7:AA:04:21:58:B0:E1:53:58:9A:AF:CF
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 019D98BDAB120FA38775C0E583B6E3C35C71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 04E4
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: DF50k6wPeztywcdDZDcAG/qgVE++NZEBLmfCWixqAC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ab:12:0f:a3:87:75:c0:e5:83:b6:e3:c3:5c:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=37d1713577a94102e7aa042158b0e153589aafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d7:25:1a:87:04:33:8a:47:5d:42:62:99:26:
88:30:eb:5d:a5:6a:02:59:a1:f3:26:f9:60:24:25:
fd:2d:a4:50:98:a5:7c:95:c1:e5:80:2c:dd:61:75:
b5:17:cd:80:3f:fa:bf:79:3b:08:7e:fe:2c:c2:ca:
6c:59:71:13:b0:1c:21:1c:91:32:99:dc:4c:27:dc:
35:5b:e4:de:fd:5b:3d:b4:cf:d5:22:2c:2a:33:31:
6d:4f:53:eb:80:ee:92:70:67:84:a7:3b:b5:c9:3e:
0d:72:42:e3:b3:ff:3c:71:c9:30:43:46:7d:04:96:
6a:42:8f:32:d1:f7:b5:97:2b:7f:2c:f9:11:9f:4c:
ad:c3:13:a1:31:b3:eb:9c:5e:cf:65:8f:25:29:88:
92:d5:b5:5e:67:c8:5e:58:25:ca:8a:4b:37:33:b4:
89:9d:57:ec:7a:5a:f3:00:09:12:9e:a3:4d:f4:ea:
2b:26:6a:60:eb:ea:ad:f8:21:5e:45:94:c2:f4:73:
38:4e:17:74:25:18:ac:c6:ba:fa:7d:75:00:57:dd:
f8:3e:e6:5d:87:e7:d1:32:94:7c:14:de:84:7f:82:
f9:26:80:fc:53:a1:01:d4:90:e5:d1:9f:2e:83:13:
25:59:f1:d9:03:0e:70:94:44:e3:b1:6c:3b:a9:86:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D1:71:35:77:A9:41:02:E7:AA:04:21:58:B0:E1:53:58:9A:AF:CF
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:02:32:eb:95:d4:d2:85:67:a7:f7:c2:96:02:b2:bd:e6:a3:
c5:0c:30:9b:db:10:82:d8:54:d2:2f:76:65:17:c6:5f:f4:06:
7a:bf:04:de:eb:a0:eb:93:87:b6:a2:ca:9d:f5:2b:16:e0:c7:
1c:56:b9:2a:d8:09:0d:da:fc:f6:5c:7b:29:4b:0f:2f:03:cf:
b8:27:75:b9:a1:bc:75:f1:c6:cf:62:f5:9c:2c:9d:6f:83:ef:
ba:3e:af:70:84:c3:33:b2:eb:68:e7:93:56:69:f7:e4:1e:06:
a4:22:3d:79:80:fe:81:6f:30:5a:1f:6f:0b:a5:d4:a1:84:e8:
8b:b2:18:9d:fe:63:18:c3:32:95:49:29:93:23:44:78:b7:fd:
10:9a:81:08:92:ac:66:93:93:5a:26:2c:b4:2d:ab:a9:1c:b1:
0f:d7:2a:18:f1:d2:08:92:92:fd:90:77:b2:07:11:21:fb:b0:
a3:01:57:9b:33:3f:d2:7d:83:f8:34:08:93:43:2a:49:c5:b9:
e1:db:c2:0e:79:7d:42:ee:2b:1b:3d:f5:b9:d4:77:24:e1:d1:
37:50:f7:ba:70:17:10:0c:37:7a:38:a8:cf:17:24:38:86:3f:
d5:72:84:a0:fd:48:7a:8c:38:bb:0c:f5:ea:b4:65:b2:61:14:
6c:3a:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:18 2026 by rpki-client