Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: OdmwmrsGMjmQw1twL+8B2CJFB7Bmcag5q33+JyVqSeI=
Subject key identifier: 37:56:27:9D:06:32:87:27:BF:23:15:BC:46:47:37:41:1D:B1:47:18
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019FA93E5C25038F80AAFC92ADE642E5FA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 03AB
Signing time: Tue 28 Jul 2026 15:01:03 +0000
Manifest this update: Tue 28 Jul 2026 15:01:03 +0000
Manifest next update: Wed 29 Jul 2026 15:01:03 +0000
Files and hashes: 1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
2: EOBtHTjA0ZDsrADWjmriNqh0ee4.roa (hash: TxDODlaafoC1OYemDEfnXQw9tVDBB6F8dgEKF8cHaBQ=)
3: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
4: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
5: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
6: nVbWh0pJuYoykDM3Ufm0vUQu0IE.roa (hash: 7Orgw/1y3WPm4Dfr6xr3DA5k5wi24zwItPWXDbeu7SU=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: 1kZFVrvM1A5tTQJOtz9M5lH6Sm8KE9PmT9wCXcm8M/M=)
8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3e:5c:25:03:8f:80:aa:fc:92:ad:e6:42:e5:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Jul 28 15:01:03 2026 GMT
Not After : Jul 29 15:01:03 2026 GMT
Subject: CN=3756279d06328727bf2315bc464737411db14718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:f3:fd:46:23:85:23:5d:d5:61:56:f8:94:
af:69:60:e1:ce:d0:c5:5e:93:ea:0c:03:ae:d4:e0:
95:1a:8b:eb:91:cd:2b:6a:a7:57:ed:46:d4:58:07:
90:fa:58:54:cc:07:2b:8a:4a:96:3b:24:c4:12:74:
67:49:f2:8d:e9:92:74:8c:bc:69:be:10:b0:11:cd:
21:8a:88:21:7f:71:a1:bf:84:ed:63:ea:5d:04:d1:
ec:24:ca:5e:68:97:50:b6:af:cd:58:19:e3:d6:ff:
92:f4:bf:f9:40:55:bf:68:2f:0e:a1:46:e8:0f:e8:
6d:62:05:e1:73:49:c6:73:9e:fe:87:70:05:03:b7:
c5:e9:24:2c:ce:04:49:c9:7a:3e:e7:ea:9f:b9:ae:
73:19:43:1b:bd:18:e7:5d:07:b0:2c:00:02:12:44:
99:84:e4:a8:62:83:58:51:c9:88:a6:02:86:b0:d7:
f6:d1:b7:d6:5c:3b:5c:ef:f5:e3:71:6f:be:65:21:
8e:ab:f6:d8:e2:a5:36:0d:61:97:bd:d0:b0:43:f1:
27:9d:79:f9:7c:68:a9:fc:f6:c2:83:19:8c:83:14:
cb:44:1d:93:a1:6f:e1:0d:b6:f2:f9:64:4d:4e:c8:
12:e1:d8:f4:07:11:77:8b:09:75:b8:3c:66:e2:2a:
67:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:56:27:9D:06:32:87:27:BF:23:15:BC:46:47:37:41:1D:B1:47:18
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9a:a0:97:34:ef:3c:d7:2b:11:fc:ec:09:19:60:f3:34:76:
c9:98:41:a6:63:8e:09:1a:06:09:12:6d:7a:80:98:83:f9:2c:
05:c4:1b:73:51:af:1e:51:1a:16:e1:40:6f:87:fc:77:3c:0f:
ba:62:78:32:32:cb:27:8c:6b:34:32:81:64:83:29:1d:5e:55:
b1:74:8d:d1:8e:65:3c:a4:fb:47:12:98:44:5a:ce:0a:aa:93:
77:98:db:9b:35:cf:05:6c:80:d6:0a:63:ed:21:56:f5:24:60:
74:f9:1b:e4:de:5e:97:13:f8:51:7d:a0:f5:b2:19:b8:bd:7a:
e3:99:41:dc:70:59:d5:61:a7:09:db:51:cd:a8:44:53:f4:3b:
bc:96:6b:a4:96:e8:b4:25:0f:7b:81:b5:a4:83:74:1e:67:0a:
f4:35:65:d9:fc:eb:ec:b8:b1:22:00:ed:fd:5d:bc:41:f4:0c:
04:15:fa:70:de:f9:a1:c0:41:4a:fc:b7:ca:21:7f:02:f3:dd:
6e:90:71:a8:8a:48:0e:6a:6a:e7:6c:59:a6:ea:74:c4:81:7c:
93:a4:2e:82:49:38:81:29:b9:bb:fd:86:8d:a5:61:8a:f0:80:
40:71:de:48:67:29:fa:5d:38:6d:0d:e0:98:ed:34:61:5c:ef:
42:6c:2a:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPlwlA4+AqvySreZC5fpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz
YjI0YjYwHhcNMjYwNzI4MTUwMTAzWhcNMjYwNzI5MTUwMTAzWjAzMTEwLwYDVQQD
EygzNzU2Mjc5ZDA2MzI4NzI3YmYyMzE1YmM0NjQ3Mzc0MTFkYjE0NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yXz/UYjhSNd1WFW+JSvaWDhztDF
XpPqDAOu1OCVGovrkc0raqdX7UbUWAeQ+lhUzAcrikqWOyTEEnRnSfKN6ZJ0jLxp
vhCwEc0hioghf3Ghv4TtY+pdBNHsJMpeaJdQtq/NWBnj1v+S9L/5QFW/aC8OoUbo
D+htYgXhc0nGc57+h3AFA7fF6SQszgRJyXo+5+qfua5zGUMbvRjnXQewLAACEkSZ
hOSoYoNYUcmIpgKGsNf20bfWXDtc7/XjcW++ZSGOq/bY4qU2DWGXvdCwQ/EnnXn5
fGip/PbCgxmMgxTLRB2ToW/hDbby+WRNTsgS4dj0BxF3iwl1uDxm4ipnowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdWJ50GMocnvyMVvEZHN0EdsUcYMB8GA1UdIwQY
MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt
ZGZkZGIxMzY0MzYzLzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz
LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZqglzTv
PNcrEfzsCRlg8zR2yZhBpmOOCRoGCRJteoCYg/ksBcQbc1GvHlEaFuFAb4f8dzwP
umJ4MjLLJ4xrNDKBZIMpHV5VsXSN0Y5lPKT7RxKYRFrOCqqTd5jbmzXPBWyA1gpj
7SFW9SRgdPkb5N5elxP4UX2g9bIZuL1645lB3HBZ1WGnCdtRzahEU/Q7vJZrpJbo
tCUPe4G1pIN0HmcK9DVl2fzr7LixIgDt/V28QfQMBBX6cN75ocBBSvy3yiF/AvPd
bpBxqIpIDmpq52xZpup0xIF8k6Qugkk4gSm5u/2GjaVhivCAQHHeSGcp+l04bQ3g
mO00YVzvQmwqsg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:37:15 2026 by rpki-client