
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: /dR5gxHr7PFYxw+vX3WG6xfoww1SHLG5IgwbLgq48tE=
Subject key identifier: 88:72:6F:CA:68:7A:1C:81:BE:98:49:96:1E:60:74:E4:9B:84:80:7A
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 019D9B87A61536C223C0130A4DB0FFF2F58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: 0260
Signing time: Fri 17 Apr 2026 13:00:51 +0000
Manifest this update: Fri 17 Apr 2026 13:00:51 +0000
Manifest next update: Sat 18 Apr 2026 13:00:51 +0000
Files and hashes: 1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: OP6CVirBH4Ssug7eDFjshqQFO/itj7fmiwQQSNlOpn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:a6:15:36:c2:23:c0:13:0a:4d:b0:ff:f2:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Apr 17 13:00:51 2026 GMT
Not After : Apr 18 13:00:51 2026 GMT
Subject: CN=88726fca687a1c81be9849961e6074e49b84807a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:68:86:20:0a:07:8e:a4:30:bf:61:58:39:b0:
7b:aa:f0:f7:6d:77:21:69:74:3b:43:66:3e:be:8e:
37:21:cb:d1:52:c9:1a:0b:ad:8f:f1:29:1c:70:da:
a9:e7:87:98:49:26:90:9f:55:78:e7:57:8e:c7:e6:
4b:42:a4:06:22:44:ac:b7:5a:61:29:19:26:67:9d:
29:a0:b9:83:28:3c:95:9b:5d:1e:df:c4:ef:ca:cf:
52:82:38:09:7c:a4:e1:8d:bc:9e:20:d5:90:0b:55:
60:72:8f:f4:27:ee:37:0b:d0:34:83:ca:88:08:c3:
3d:9d:70:76:5a:30:d6:a1:30:d9:26:d2:d3:87:f5:
62:a5:fb:aa:00:6f:ad:91:4d:aa:ab:d6:9f:bd:33:
a6:c6:d5:0f:5e:8c:2b:68:da:97:49:15:de:16:82:
a5:00:7d:96:b9:2b:49:1d:15:5e:70:53:5d:9f:54:
30:18:ff:3c:da:cb:d4:17:40:cd:71:53:b1:76:89:
bc:36:85:87:05:6c:e4:5b:10:ed:44:81:13:ad:2b:
97:15:26:7c:cd:dc:81:1a:bd:b7:3e:4d:fe:76:20:
d5:b6:ab:dd:5a:4f:94:21:54:64:a8:d8:c6:ce:9a:
c8:44:75:cc:de:b9:ed:f8:fa:74:d7:27:89:4b:d3:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:6F:CA:68:7A:1C:81:BE:98:49:96:1E:60:74:E4:9B:84:80:7A
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e2:db:87:00:cf:2b:8c:8f:43:78:b8:46:6c:08:79:a9:c4:
24:b1:b5:bc:71:d3:5f:e0:9a:c8:2b:0c:be:fd:bb:5f:67:11:
34:c9:2b:4b:e0:8a:b4:5c:33:3e:27:6c:47:c3:1c:40:b3:a0:
dc:66:af:86:ac:3e:81:b9:e1:54:23:d5:5b:93:90:6b:20:df:
03:34:88:d4:91:46:9d:cf:36:54:69:fc:c7:ac:31:03:d3:28:
7e:b7:1f:9b:51:f2:18:07:7b:54:9f:02:a5:c4:dd:14:e3:ac:
39:73:4e:56:44:8d:aa:2b:aa:60:5d:7f:82:cb:2e:b7:3a:c7:
ed:64:92:6a:40:79:68:21:40:60:ba:f8:62:c5:9e:10:e3:d1:
3f:8c:2d:19:fc:db:ee:b7:11:63:ff:84:40:40:31:88:8e:33:
6b:35:d4:ab:b0:f8:67:9b:00:48:48:d5:5e:d9:32:10:41:1b:
e2:b8:ee:7f:53:2f:66:ad:34:e1:e9:41:a3:6e:fc:5f:db:3f:
3e:3e:2f:e3:23:bb:cf:7f:ed:65:64:23:6e:1a:e9:71:74:10:
64:c1:d3:52:57:20:c8:31:b6:24:b7:9f:e4:6e:df:04:ef:68:
0f:19:28:54:fc:98:66:40:2c:e0:27:95:c8:b2:04:07:18:b5:
5f:cb:de:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:38:21 2026 by rpki-client