Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: 5vzxhn/fz/4D+7i0E6H/iun6/+RhgwJORM1IA3AZHdM=
Subject key identifier: 03:51:E1:82:C3:BC:B9:A0:5A:4E:43:24:D2:C1:A7:51:45:7E:7B:4F
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 01A1250BD68A23BC558742B0A5EAA0F865C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 0472
Signing time: Sat 10 Oct 2026 09:01:34 +0000
Manifest this update: Sat 10 Oct 2026 09:01:34 +0000
Manifest next update: Sun 11 Oct 2026 09:01:34 +0000
Files and hashes: 1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
2: EOBtHTjA0ZDsrADWjmriNqh0ee4.roa (hash: TxDODlaafoC1OYemDEfnXQw9tVDBB6F8dgEKF8cHaBQ=)
3: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
4: MQH_dvgH12yVjtMmNX5zhHNaJNM.roa (hash: gE1pNkt0EIY5xF4y1Y6FsY5jWZyScuncAkQ397qfFGg=)
5: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
6: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: ZJH46/NndjrvYUjPhwlolvjGmTXfhvtiAktqpIltZmE=)
8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:d6:8a:23:bc:55:87:42:b0:a5:ea:a0:f8:65:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Oct 10 09:01:34 2026 GMT
Not After : Oct 11 09:01:34 2026 GMT
Subject: CN=0351e182c3bcb9a05a4e4324d2c1a751457e7b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:ed:d9:2a:65:99:6e:a5:83:b2:b1:07:c4:
e8:fa:24:86:41:fb:54:e0:e6:a7:71:28:54:99:6f:
17:9b:35:d5:9e:b7:12:bb:94:ea:2f:71:5b:71:53:
ca:79:0f:ae:d1:c5:05:97:fc:e6:10:ec:f6:b0:11:
60:0f:c9:9c:f2:eb:35:7f:32:96:3f:46:63:21:b4:
ec:2d:24:47:78:e8:88:af:78:67:13:6b:06:85:7d:
2f:32:ee:cf:35:59:71:b6:ac:37:9a:8d:75:bb:20:
d1:93:e6:e8:b0:83:6f:93:6f:42:d9:0b:ca:46:83:
1f:c5:ef:7b:9c:3e:32:e6:b3:54:e6:7a:11:f2:90:
9c:b7:56:f4:b4:22:6b:2b:17:38:77:9d:84:28:57:
fe:6f:d7:2b:21:bc:81:7a:7f:ce:d5:3f:f8:a5:1f:
e8:7c:13:23:82:81:ad:85:32:e4:f2:6d:09:dd:6e:
a5:15:44:6a:2b:76:31:b0:cb:39:56:78:d1:7c:bd:
74:b5:53:54:ea:5c:7c:d1:f1:61:42:87:41:4a:fe:
67:b7:5a:18:0c:9a:b2:6f:71:e7:54:78:1f:88:0a:
d7:b4:89:56:af:11:67:93:62:94:9c:1a:aa:7d:26:
c5:62:d1:9c:04:ed:f0:e4:4c:5a:77:95:6b:51:e4:
4e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:E1:82:C3:BC:B9:A0:5A:4E:43:24:D2:C1:A7:51:45:7E:7B:4F
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d1:56:c3:2b:35:37:cd:14:90:11:3e:bf:4a:37:67:93:f1:
e0:d3:ff:d8:52:52:14:7b:42:a1:a8:6a:c2:50:8e:09:31:e2:
94:a0:b7:58:2e:c6:df:e1:d3:46:95:e3:68:36:84:1a:e2:b5:
71:10:42:53:a6:88:af:47:c2:ed:1f:77:86:c7:4a:f9:ab:40:
e1:ac:88:0b:9f:b8:f2:de:b8:b2:ba:4a:55:40:d0:97:12:d6:
e9:46:25:e3:43:41:d3:cc:f5:de:21:33:c6:e6:18:16:34:71:
19:5c:bd:e1:9c:76:6e:06:e8:ce:4d:9f:80:bc:0d:ca:e3:f3:
e6:3d:e8:85:b7:e9:5e:4d:eb:0a:95:94:4e:ea:ca:75:f1:a3:
04:ad:03:7b:15:42:57:9a:74:d8:b9:07:9f:78:3e:57:f5:52:
1a:1f:56:91:69:9f:81:46:e7:be:aa:1b:b5:2a:cd:12:9a:3a:
2e:b0:2a:11:4c:df:4d:35:b8:a1:92:6e:00:e8:dd:7b:59:f0:
6c:21:00:a3:1d:e6:12:df:fd:89:6f:d0:db:78:b1:b6:26:b7:
a2:d1:fa:f9:e2:63:5d:81:90:92:02:ca:1e:5d:ae:8f:58:8f:
10:e9:90:1b:64:f5:90:f9:d2:6e:8f:62:a3:ea:37:91:99:b8:
7d:ff:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:56:33 2026 by rpki-client