Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
File: u9zIw3chdOR7rIuTLlvse0ex2Ss.mft (raw, json)
Hash identifier: XgvAIjEXEM30jgInquf0S6g4Xq6p61Sf0fsPGoLcGMg=
Subject key identifier: A4:AC:81:EA:EA:55:8A:47:E8:E1:13:E2:0E:61:6E:A1:81:73:3D:55
Authority key identifier: BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
Certificate issuer: /CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Certificate serial: 019CAAFD7C639006EEDB721341C473F2F902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: NyhSyCMRoKdRBo6gGVT4BydPhUU.roa (hash: hrd0GvTI0bFLstLvooU+LJ8QrF+EDu6C0hrzcyyARCs=)
2: u9zIw3chdOR7rIuTLlvse0ex2Ss.crl (hash: w9DbJhPyMYvi9ZplLqFSw5+bRhqS/0K0xIM3PUs7B7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7c:63:90:06:ee:db:72:13:41:c4:73:f2:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbdcc8c3772174e47bac8b932e5bec7b47b1d92b
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=a4ac81eaea558a47e8e113e20e616ea181733d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4f:3d:c7:9e:ab:9f:06:86:7f:ab:21:6c:5c:
fc:ea:ba:05:66:27:da:98:80:bf:91:6e:a9:c6:6c:
7a:0f:c5:68:eb:7e:58:7a:a0:07:ac:55:d3:5a:c2:
75:cc:57:59:0a:84:3c:e8:f6:43:d7:0e:c9:55:37:
be:ed:f7:d2:aa:d6:5b:6e:98:4f:a3:f3:a8:bd:ba:
b8:62:36:df:53:72:96:0f:30:f1:79:c9:2c:be:ee:
ab:d9:59:02:53:05:71:d0:9e:ff:a4:4c:49:b7:f8:
1a:e1:cf:af:4b:5c:ef:83:b0:d9:9b:c5:81:0c:2b:
a7:7b:39:b3:f2:c6:23:74:a6:5e:87:31:74:9f:36:
8d:e9:5b:99:14:12:70:65:45:cd:6f:99:54:51:5a:
c1:c9:28:0c:57:d3:cb:eb:33:18:33:8c:28:84:62:
db:e2:a5:f9:69:49:37:92:27:6b:a3:17:75:bd:32:
95:c2:fe:30:10:5d:f9:6f:7d:37:5d:d8:d3:bf:8a:
cc:d5:24:61:d6:19:20:ab:29:79:60:db:6b:bc:ca:
f0:06:0f:05:d3:da:80:02:0b:43:f4:e6:b5:59:02:
67:84:60:0d:0a:54:af:2d:fb:f8:6b:46:2d:6f:8f:
49:32:c8:4f:d0:78:16:cc:f2:ab:df:cc:c0:4c:a5:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:AC:81:EA:EA:55:8A:47:E8:E1:13:E2:0E:61:6E:A1:81:73:3D:55
X509v3 Authority Key Identifier:
keyid:BB:DC:C8:C3:77:21:74:E4:7B:AC:8B:93:2E:5B:EC:7B:47:B1:D9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9zIw3chdOR7rIuTLlvse0ex2Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b62c33-cc9c-4baf-a0ee-ed142e464335/1/u9zIw3chdOR7rIuTLlvse0ex2Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:71:97:19:08:6e:07:5f:71:a6:86:42:17:3e:f2:dc:bc:
e1:ff:98:2a:66:a5:1e:5f:e7:ed:b9:96:0b:d8:c5:8c:1b:cf:
b7:6c:42:70:21:79:43:c3:9a:df:d0:8b:6f:9c:ff:e1:8e:d4:
71:70:5e:f8:5a:f0:d9:f2:ca:cb:79:cf:86:4c:c3:5a:3d:bc:
85:74:21:23:61:7c:85:5f:49:d3:e1:3d:f2:c5:c5:48:72:62:
6d:6f:51:20:d7:17:10:19:82:96:f1:bd:13:ed:55:29:68:89:
a9:7b:aa:ea:28:7c:9a:37:2f:ae:d8:2c:f3:1a:63:69:21:b2:
fb:64:5d:8a:de:a8:fd:14:81:23:19:fb:bc:c1:bc:13:e0:26:
ca:c1:01:5d:8d:ce:6a:03:e1:7d:bb:8a:26:93:f5:6b:85:db:
58:c5:6f:ab:39:e5:d2:20:83:77:1d:91:5e:70:96:65:13:0d:
a2:5d:20:4d:f9:93:b3:03:5d:25:3f:9e:01:42:47:2a:0f:1e:
a3:a8:29:93:6e:50:7c:73:e2:e4:d3:b3:61:85:86:3b:a9:3e:
4f:8f:85:9e:a3:78:d3:5c:01:86:9c:50:ab:f7:d3:81:88:25:
5b:60:b6:48:11:5c:bf:5e:53:28:1b:08:c7:0e:9a:92:ae:b4:
ba:97:c7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:59 2026 by rpki-client