Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: dMv4l8L26LmNe+pv3ZhrgR3zAAyycQEO95OFIvqhSPc=
Subject key identifier: 3D:31:62:92:C2:FC:B1:74:A2:FF:85:AB:8A:D1:41:AD:2C:69:A5:5E
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 01A0C7B367BE90ECDD3830C9F4AC7B244BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 068A
Signing time: Tue 22 Sep 2026 06:00:18 +0000
Manifest this update: Tue 22 Sep 2026 06:00:18 +0000
Manifest next update: Wed 23 Sep 2026 06:00:18 +0000
Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: fwUjZYp69eEf9j0CHbIVugNCAlsz69ms4XVyc6r7t5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:67:be:90:ec:dd:38:30:c9:f4:ac:7b:24:4b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Sep 22 06:00:18 2026 GMT
Not After : Sep 23 06:00:18 2026 GMT
Subject: CN=3d316292c2fcb174a2ff85ab8ad141ad2c69a55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:f5:99:1b:a1:ca:03:37:fd:64:2d:b1:9b:
85:28:51:89:86:1b:6d:df:1c:ac:77:9a:a7:18:6b:
cd:60:e6:cb:b6:4f:c5:c3:5b:9a:35:87:4a:d8:89:
6a:67:58:16:53:af:cf:0e:c8:3c:da:b9:ec:1d:61:
81:2d:b3:d7:b2:28:ea:b2:93:8d:a0:fc:59:ab:c8:
86:aa:da:0d:c8:f1:3a:5b:88:8a:40:9b:91:97:c5:
4f:2c:2f:38:53:7b:02:1f:f3:39:bd:f9:1e:19:7f:
08:8e:76:5e:e3:fb:1b:07:7f:62:96:7e:3c:ab:00:
c9:7b:11:28:f9:e0:4b:f5:ad:40:94:95:28:e8:88:
be:e3:22:27:d6:bb:7e:2c:1e:c0:bd:05:20:62:b7:
72:8c:a9:1d:d1:bb:d3:3e:4f:48:93:b0:c4:43:9e:
6a:52:07:10:01:da:6b:03:f3:7b:ee:06:97:e6:21:
c8:76:d8:46:fe:2c:85:67:b2:bc:88:ab:1c:0d:22:
ae:17:52:41:95:f5:87:27:c2:af:f0:f4:1f:55:3f:
e5:f6:7e:fd:42:a6:08:c7:cc:1b:b7:19:da:65:dd:
e1:00:ca:6d:62:72:98:57:94:dc:12:9f:e5:41:e9:
56:e4:d0:51:6d:de:1b:d2:43:ba:fe:d4:2c:12:a9:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:31:62:92:C2:FC:B1:74:A2:FF:85:AB:8A:D1:41:AD:2C:69:A5:5E
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9b:04:d1:fd:34:10:69:9e:5f:41:1a:1d:85:38:df:87:5f:
e6:b9:a1:6f:66:db:45:e2:ae:46:a8:93:b3:cd:d2:ff:fc:4a:
f4:69:16:f4:03:67:51:37:7b:ef:b1:fd:c7:e8:db:b3:f2:c0:
35:a0:6f:52:14:3f:b9:a4:07:91:39:4f:4b:e0:46:af:d4:c1:
eb:d7:80:9b:c5:e0:a5:b8:d8:f6:d7:92:d6:cc:bb:03:60:b6:
b1:79:0f:5d:43:be:1e:ae:bd:1a:14:a6:01:e6:fc:a5:70:5c:
7a:1b:2d:ac:6f:ac:03:3f:97:38:f3:59:39:2b:b4:61:f5:2e:
28:06:37:69:02:1d:2d:76:92:70:1e:49:4d:af:e8:4d:e1:dc:
ad:46:36:b3:f6:49:92:a3:70:a6:b3:49:70:9b:e1:e1:58:d1:
72:3b:6f:9a:34:38:42:e4:74:d6:d5:80:0d:32:57:9a:24:63:
0d:c1:d8:94:28:ba:c9:cd:a1:cd:e8:22:b8:42:00:23:fa:8f:
ca:5d:da:31:4f:4d:4e:4c:21:a9:44:4f:bc:b8:e5:ae:b4:a0:
ce:22:de:4a:95:eb:02:99:6f:4f:26:3c:ff:f2:6b:86:a2:b7:
02:95:ed:1e:49:f6:97:1d:f9:f3:36:99:57:c7:57:9a:33:0f:
cc:9b:a5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:39:59 2026 by rpki-client