Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: Gawjnx/sGSTNOIeFkO5wf2bvpnziXmeVvDypa5EYvJc=
Subject key identifier: DD:14:D5:D5:9E:90:E9:E3:B7:57:06:20:9A:8C:17:3B:07:B6:C6:D1
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019D9A072D4380B02273B5DC73ED67DD4464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 0297
Signing time: Fri 17 Apr 2026 06:00:54 +0000
Manifest this update: Fri 17 Apr 2026 06:00:54 +0000
Manifest next update: Sat 18 Apr 2026 06:00:54 +0000
Files and hashes: 1: GRbOxMtystP_abdOU7IPfTRksLo.roa (hash: Qf9umPgPmRu2Fd9xEaKBzrLeI8Nv9dYFfVdW3Z8loMI=)
2: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
3: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
4: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
5: nue0zLCdoQpgxGStseN2fkjSnI4.roa (hash: VSsTvgcmCl/+CH4M98aAryux6Otm4nE6txZTSh2dlVw=)
6: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: D+W3fVkj3ME37pvCAuoQLHGcT5au2GXiKYXOKrgpG8g=)
7: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:2d:43:80:b0:22:73:b5:dc:73:ed:67:dd:44:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Apr 17 06:00:54 2026 GMT
Not After : Apr 18 06:00:54 2026 GMT
Subject: CN=dd14d5d59e90e9e3b75706209a8c173b07b6c6d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:0a:e1:58:60:26:34:8e:f4:10:19:19:02:
c3:d1:37:0d:ab:a6:f9:a9:5e:c7:62:6c:8d:ef:67:
ac:a5:b3:07:bc:37:f8:75:d7:89:cd:75:f7:6c:33:
0c:71:9f:ac:cd:cb:35:1d:e1:98:6e:48:d3:ec:9c:
c9:7f:28:97:68:b2:f4:d7:c9:96:2b:53:0b:fa:fd:
10:ef:96:94:aa:33:3c:31:2d:26:3c:67:8a:50:77:
8e:cf:96:05:cb:b3:78:0b:b7:50:06:9a:51:97:24:
b5:1a:8d:11:86:b4:06:e1:80:94:3a:30:02:ec:75:
b3:69:5c:cc:25:05:89:5e:f4:cd:9b:26:da:2c:a9:
62:e7:97:4c:7c:30:68:58:19:43:8a:9e:7d:54:df:
0a:d6:9a:52:2a:ee:98:94:57:1b:7a:74:82:fd:3d:
81:e3:7f:73:f0:be:8b:9c:d0:ff:33:82:d4:23:0d:
89:1a:47:1b:31:71:a2:39:4a:25:2b:67:11:60:47:
de:aa:b1:1d:83:40:c1:b8:e8:02:d9:5d:b2:8b:5d:
83:34:9c:6e:2b:07:48:cc:76:1e:87:aa:d5:af:2d:
17:e3:43:db:c1:7e:42:b5:4c:78:8a:0e:82:20:4d:
0b:d8:33:f3:01:84:b3:dd:a1:79:e1:5c:fb:9e:66:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:D5:D5:9E:90:E9:E3:B7:57:06:20:9A:8C:17:3B:07:B6:C6:D1
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:6b:d8:9f:af:da:6f:5f:b0:83:56:c4:5c:fb:7a:eb:a8:84:
01:9c:eb:bd:c2:07:85:9b:d6:b4:54:5f:55:5d:c6:52:e8:65:
6c:5d:0e:16:dd:dd:48:60:71:49:16:92:f2:63:6e:5a:02:94:
c5:96:76:7e:e8:e0:2b:4d:52:1e:79:05:d7:03:15:5c:eb:14:
73:3a:c5:d1:76:c4:42:37:f4:0a:35:77:36:7a:21:9f:6f:b3:
f4:3b:bd:b6:b4:a8:e0:ab:a0:9f:7c:e9:3b:e9:d6:f7:6e:2b:
31:45:b0:43:82:c2:2d:b8:c5:bf:3f:56:da:3a:a1:82:10:9d:
72:26:e1:f4:d6:e5:6e:0a:5c:a7:99:9b:6e:a9:4c:64:04:25:
d6:0e:59:47:72:ef:52:6e:bb:1d:6c:45:98:44:0c:0b:8d:d4:
86:7f:bb:74:4c:78:3e:fb:f5:67:a9:12:b3:d5:b7:40:64:92:
59:23:29:82:03:e2:80:aa:3a:84:4d:f7:ca:b7:cb:9a:91:e8:
19:0f:a6:e2:c2:c3:58:af:4d:8e:fd:1d:a2:af:04:20:4a:54:
7c:37:60:4a:eb:8f:c1:8c:a8:9d:e6:54:40:63:19:98:61:72:
a9:5d:fe:45:28:7b:2a:cb:83:12:f3:65:79:64:e3:ae:7f:83:
bd:2e:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:20 2026 by rpki-client