Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: P2y0LN0nnWko7fi44a1Hx3RXmM0e/t5qCkJv/wfTKDU=
Subject key identifier: 9C:14:2D:3F:C6:73:23:9E:A3:27:70:89:5D:C3:0C:37:2A:CB:A5:99
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019EBDDA9E42ACA34809E2C5BC069CDDB76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 0331
Signing time: Fri 12 Jun 2026 22:01:21 +0000
Manifest this update: Fri 12 Jun 2026 22:01:21 +0000
Manifest next update: Sat 13 Jun 2026 22:01:21 +0000
Files and hashes: 1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
5: nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa (hash: 7Orgw/1y3WPm4Dfr6xr3DA5k5wi24zwItPWXDbeu7SU=)
6: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: 9VM07CMEHgpg7WMLxhsZvZ5Eft4m/iEpeH6/aJ2qLHU=)
8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:9e:42:ac:a3:48:09:e2:c5:bc:06:9c:dd:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Jun 12 22:01:21 2026 GMT
Not After : Jun 13 22:01:21 2026 GMT
Subject: CN=9c142d3fc673239ea32770895dc30c372acba599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9b:8b:fa:d6:dd:bf:cd:3a:4a:40:48:5a:72:
19:3f:60:17:78:d9:84:75:b6:a7:71:fe:07:26:cb:
69:6a:b0:7e:40:ac:d0:da:12:14:14:fc:2f:f6:48:
45:3d:b8:11:03:da:0a:65:15:6e:16:f8:3b:d5:a7:
78:dc:16:4d:26:ec:e4:7e:33:a6:aa:81:90:b7:a7:
d1:80:93:ac:a1:0d:65:6f:8f:ec:be:9b:f0:95:33:
6f:1c:29:e1:ad:50:04:e0:11:4c:3e:5a:f5:8d:0c:
87:f9:30:d3:69:93:18:07:d3:c2:76:dc:60:aa:35:
63:71:0d:e7:48:8c:64:7f:19:2e:8c:52:09:7a:a3:
40:5e:ef:85:c9:eb:cb:51:78:f7:38:1a:0e:37:8e:
2f:66:05:17:4f:60:6b:c7:c3:1e:65:a7:17:75:66:
8c:06:08:61:47:e0:dd:ac:0c:c8:f8:f6:1f:f2:1e:
5a:85:8c:47:8c:dd:df:91:45:13:8c:12:b6:e4:09:
a4:f6:e1:0c:06:ad:95:07:44:04:6e:c3:ef:b6:3a:
0a:65:af:bc:55:7a:87:79:d2:5a:8b:13:3d:ca:b8:
4c:a1:e2:45:11:87:57:c2:0f:22:f8:c9:d6:21:4e:
b1:9e:84:39:29:ef:fb:d5:69:a3:1e:0f:24:81:a4:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:14:2D:3F:C6:73:23:9E:A3:27:70:89:5D:C3:0C:37:2A:CB:A5:99
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a2:fe:7e:3c:44:b3:44:39:8c:fe:24:95:22:0b:59:9a:1d:
98:82:35:95:89:d2:2d:11:37:cd:e5:73:6c:b0:54:9b:f0:59:
c3:21:37:b2:24:ee:0d:37:17:60:12:a4:7b:d5:fd:c5:e1:31:
46:88:47:96:61:a7:41:1f:5d:e3:5e:e0:93:ef:1f:86:13:4d:
7b:82:d6:cc:d1:fe:9b:a5:7f:ed:df:d7:20:38:f5:8a:5b:7b:
f2:27:cb:9d:21:90:84:12:f5:b7:d9:e7:ec:71:d3:97:4f:21:
66:5f:24:c1:4c:32:f2:e4:24:29:45:99:3c:05:5f:30:36:40:
ef:d8:02:bc:79:85:9a:b1:b5:40:d6:cc:27:41:a8:d0:27:01:
72:fc:fc:07:f9:ad:4f:0b:bf:b6:6f:8d:b4:c2:0f:76:13:fd:
d0:95:9c:f4:61:d0:b3:06:86:9d:56:3d:61:30:11:5b:56:31:
e9:b6:d1:af:51:ce:9c:c0:30:fa:81:cb:d2:de:b8:d1:96:57:
27:d8:55:e2:83:ba:8a:a5:46:fd:3b:1a:48:1e:ff:e1:d4:2e:
3e:d8:62:20:a7:7f:5e:d8:d6:20:17:c8:2c:d1:9f:57:c6:af:
55:08:bc:33:fc:1f:55:da:1b:4b:b2:fe:40:30:42:32:80:a8:
99:28:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:30:38 2026 by rpki-client