Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: aRs39muIEhPHz1DyDvyQugSB1kizzLU3Z14qAMXwD0M=
Subject key identifier: AD:16:1D:75:8B:6C:43:19:D6:17:69:72:37:24:1E:C8:83:C2:5F:E7
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019EBF5AE6F30BB01CCADB8C70790858F31E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 14DB
Signing time: Sat 13 Jun 2026 05:01:05 +0000
Manifest this update: Sat 13 Jun 2026 05:01:05 +0000
Manifest next update: Sun 14 Jun 2026 05:01:05 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: ewZWYAu/8UOyjsjqCwjptUxTkestBG9ghnTEleXGwR8=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:5a:e6:f3:0b:b0:1c:ca:db:8c:70:79:08:58:f3:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jun 13 05:01:05 2026 GMT
Not After : Jun 14 05:01:05 2026 GMT
Subject: CN=ad161d758b6c4319d617697237241ec883c25fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:67:cd:b0:6f:aa:23:8f:ff:5b:71:51:8b:
23:28:5b:25:9e:a4:1f:94:89:e0:bb:73:d5:04:1e:
80:36:f6:55:bd:25:53:2b:04:df:87:a5:d5:fb:2e:
80:13:86:19:35:47:05:ce:95:98:79:19:55:f4:ed:
f4:fd:ef:7d:b8:9a:6c:6c:2f:b4:ab:dd:36:63:d7:
f6:fb:b5:1e:cf:b6:af:49:5e:ed:14:ac:5d:15:97:
0a:77:fa:b7:01:38:1a:0d:9a:ca:82:cd:32:ce:6d:
0e:83:56:83:ec:e2:32:46:a4:f2:64:f8:ac:6d:d4:
f2:a1:e8:a7:97:05:f3:c5:b8:13:60:30:cd:6d:60:
b4:69:03:5b:74:f0:34:69:55:af:58:b5:17:04:ff:
56:79:3f:1b:e0:4c:1a:7d:57:1c:ac:89:32:89:6a:
5a:88:e0:7d:36:98:e4:79:9d:46:a3:e6:63:b2:6e:
75:57:ff:59:3c:fb:24:22:02:36:a6:d5:e4:af:bc:
f7:66:4d:65:04:7b:1d:38:57:47:7c:9d:d7:a6:ee:
38:81:8e:34:10:eb:c1:77:ef:10:af:1d:ff:cb:fa:
e6:ed:e9:ad:90:a0:d1:4a:c8:92:89:ba:fb:4c:f5:
ff:cd:12:51:20:7b:ff:09:b8:c7:e7:ad:28:77:77:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:16:1D:75:8B:6C:43:19:D6:17:69:72:37:24:1E:C8:83:C2:5F:E7
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:82:11:8a:8b:16:a0:30:ce:4b:1e:ba:5b:c8:50:d7:d4:fd:
73:be:75:00:69:7d:10:f0:03:8a:a8:84:1b:bb:2b:c8:47:80:
13:56:4e:3a:eb:91:18:47:83:7f:e1:80:7c:5f:e9:79:69:98:
2d:11:bd:8a:52:e8:32:db:7e:c8:89:31:44:53:ae:c4:82:14:
d6:52:95:69:55:45:eb:d4:f1:95:f0:8c:7b:94:75:0c:39:35:
22:6b:c3:06:d6:c5:b0:51:45:c7:ce:9c:f6:6b:b6:21:aa:1e:
08:fe:ea:6e:4c:c6:fb:0c:25:87:75:17:05:69:aa:b1:ff:84:
ad:9d:df:bd:0d:19:36:33:67:c1:f7:36:64:44:be:0d:13:ec:
a8:00:53:b0:ff:65:f5:64:bf:71:51:8a:25:71:75:51:e5:1d:
8a:8b:ca:9f:ad:e0:4c:5c:c6:da:8c:f7:b0:ec:8e:cc:a2:27:
dd:4a:54:fe:90:66:79:85:e7:aa:9b:61:0a:b9:f9:fa:4c:d8:
8e:d2:ef:ea:b6:e4:7b:52:d0:10:c5:01:5c:9c:93:46:83:62:
44:0a:ae:b8:5d:f4:31:99:86:2a:17:e0:ab:b4:56:68:71:9b:
e5:5a:da:80:c6:97:f7:60:47:5b:f9:8e:0f:0d:be:e0:cc:26:
8e:ef:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:33:55 2026 by rpki-client