Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: 9GbI1w36CxJgeTOcmVdpv+HpMp15NYecT29TN6DGd+o=
Subject key identifier: A8:86:96:04:2F:5B:B2:6E:FE:3A:90:2A:F0:DC:53:26:B1:04:7E:B3
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019CAC7DEA99D548A45E21774969B711C6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 021C
Signing time: Mon 02 Mar 2026 03:00:59 +0000
Manifest this update: Mon 02 Mar 2026 03:00:59 +0000
Manifest next update: Tue 03 Mar 2026 03:00:59 +0000
Files and hashes: 1: GRbOxMtystP_abdOU7IPfTRksLo.roa (hash: Qf9umPgPmRu2Fd9xEaKBzrLeI8Nv9dYFfVdW3Z8loMI=)
2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
5: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
6: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: 6v1NpdVSeyu95oOo0DmGj6VU+OcIldaMwq+/x1jCLcc=)
7: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:ea:99:d5:48:a4:5e:21:77:49:69:b7:11:c6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Mar 2 03:00:59 2026 GMT
Not After : Mar 3 03:00:59 2026 GMT
Subject: CN=a88696042f5bb26efe3a902af0dc5326b1047eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:52:cd:92:8c:60:23:7a:f2:50:0f:8e:d7:c5:
93:43:f5:9e:21:15:91:35:39:ce:e6:60:89:a5:f5:
44:04:ef:fd:a7:52:70:6a:b3:66:1a:31:d3:6c:23:
c0:fd:44:4e:bb:e6:28:9f:7f:bf:ec:09:07:f3:13:
f0:dc:ea:cf:2e:c0:41:b1:bd:49:b1:98:82:51:5b:
a6:c8:90:49:d3:33:72:65:1f:94:8b:04:f9:91:2f:
6b:be:6f:89:1e:43:6d:f7:7d:da:2e:57:e9:40:fa:
e4:49:9a:9a:37:c4:29:1b:75:e8:5e:0a:4b:a0:50:
00:76:9b:08:84:06:81:f9:19:71:e6:88:94:53:00:
43:1b:e8:bf:f4:7a:b1:2e:0c:c8:51:ec:35:16:89:
36:f0:c9:a2:7f:31:c3:3f:de:6b:95:e0:44:29:e9:
67:24:78:43:42:a6:23:36:e5:89:3a:d6:3a:15:63:
ba:10:c4:43:e2:21:5d:94:c2:41:df:fd:d2:4a:61:
bd:06:92:c3:0b:9f:9d:cb:02:72:fb:ad:c0:05:9d:
74:fa:1a:ab:22:ea:f8:8e:ff:ec:7d:4a:54:f9:39:
c6:a2:57:e5:86:5a:a3:ec:c7:b9:68:ea:53:cd:2a:
eb:bd:97:00:e3:ec:3c:14:31:fb:09:bd:ee:55:ab:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:86:96:04:2F:5B:B2:6E:FE:3A:90:2A:F0:DC:53:26:B1:04:7E:B3
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:0f:7e:48:7e:80:28:22:aa:4a:51:90:60:3a:17:41:0e:62:
0c:e2:67:f4:7f:c9:d6:56:98:c4:b3:10:e7:0c:ca:1e:e1:ee:
82:da:e2:91:5c:e7:66:c0:f2:79:82:7e:78:5a:bb:31:4b:71:
dc:0b:39:fd:de:e9:66:4b:17:61:fe:2c:60:a1:82:4a:36:6b:
b3:6f:d3:65:53:d4:c6:3b:4c:e8:b0:18:8e:06:c2:b7:72:4c:
2f:f9:af:51:5a:c3:82:bb:82:db:d0:43:a2:b6:71:ae:dd:12:
ed:2e:8a:53:e4:d3:5f:30:1e:51:da:d0:cb:73:5a:b2:56:18:
6f:e1:5d:12:12:03:56:c3:1e:b5:08:a0:92:12:db:20:b7:ae:
2d:f4:cb:47:0b:e3:1e:31:24:61:10:51:9a:7a:48:06:d7:d7:
25:0e:26:10:60:e7:d6:24:60:ab:86:83:b0:84:14:06:93:35:
f3:e7:19:fc:6a:c5:ca:bd:61:5a:30:77:54:14:80:60:0a:02:
6c:3c:ba:62:31:1b:fb:6b:ac:0e:45:96:0f:be:a4:7c:ae:7f:
c5:84:21:a0:26:70:af:48:21:fc:bd:f3:db:a9:29:c2:5c:58:
20:41:2b:a1:4a:44:36:cb:2f:fa:c0:45:03:08:af:e6:dc:d4:
83:03:f2:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfeqZ1UikXiF3SWm3Ecb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz
YjI0YjYwHhcNMjYwMzAyMDMwMDU5WhcNMjYwMzAzMDMwMDU5WjAzMTEwLwYDVQQD
EyhhODg2OTYwNDJmNWJiMjZlZmUzYTkwMmFmMGRjNTMyNmIxMDQ3ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilLNkoxgI3ryUA+O18WTQ/WeIRWR
NTnO5mCJpfVEBO/9p1JwarNmGjHTbCPA/UROu+Yon3+/7AkH8xPw3OrPLsBBsb1J
sZiCUVumyJBJ0zNyZR+UiwT5kS9rvm+JHkNt933aLlfpQPrkSZqaN8QpG3XoXgpL
oFAAdpsIhAaB+Rlx5oiUUwBDG+i/9HqxLgzIUew1Fok28MmifzHDP95rleBEKeln
JHhDQqYjNuWJOtY6FWO6EMRD4iFdlMJB3/3SSmG9BpLDC5+dywJy+63ABZ10+hqr
Iur4jv/sfUpU+TnGolflhlqj7Me5aOpTzSrrvZcA4+w8FDH7Cb3uVavTSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiGlgQvW7Ju/jqQKvDcUyaxBH6zMB8GA1UdIwQY
MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt
ZGZkZGIxMzY0MzYzLzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz
LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQ9+SH6A
KCKqSlGQYDoXQQ5iDOJn9H/J1laYxLMQ5wzKHuHugtrikVznZsDyeYJ+eFq7MUtx
3As5/d7pZksXYf4sYKGCSjZrs2/TZVPUxjtM6LAYjgbCt3JML/mvUVrDgruC29BD
orZxrt0S7S6KU+TTXzAeUdrQy3NaslYYb+FdEhIDVsMetQigkhLbILeuLfTLRwvj
HjEkYRBRmnpIBtfXJQ4mEGDn1iRgq4aDsIQUBpM18+cZ/GrFyr1hWjB3VBSAYAoC
bDy6YjEb+2usDkWWD76kfK5/xYQhoCZwr0gh/L3z26kpwlxYIEEroUpENssv+sBF
Awiv5tzUgwPygQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:04 2026 by rpki-client