Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: MlBdKAWYFysJ+H0F9Q7amrJTbZN6QenRVQMQqDCsyxU=
Subject key identifier: FF:FB:9D:92:23:08:0D:81:75:E3:67:B3:7F:B5:A0:0A:74:DF:78:BE
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019FAAF59C0AB4601E62C1B16E2DB988C2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1555
Signing time: Tue 28 Jul 2026 23:00:50 +0000
Manifest this update: Tue 28 Jul 2026 23:00:50 +0000
Manifest next update: Wed 29 Jul 2026 23:00:50 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: ujAnzW+8Y0XNuxMx+IAQobtIc0EP1qe8PTaeSz3MBI0=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:38:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:9c:0a:b4:60:1e:62:c1:b1:6e:2d:b9:88:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jul 28 23:00:50 2026 GMT
Not After : Jul 29 23:00:50 2026 GMT
Subject: CN=fffb9d9223080d8175e367b37fb5a00a74df78be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:92:d6:a9:78:3e:15:dd:1c:20:dd:ff:ef:
4d:10:f0:24:4c:ea:9e:9b:ca:af:60:83:45:60:36:
f2:d5:02:f2:1e:f9:47:cd:22:ff:94:a7:b1:51:e1:
c7:bf:20:de:cf:09:6d:e5:f4:07:9c:ae:dd:15:4f:
1f:bd:59:03:ed:4a:52:f4:a7:fc:4e:25:1e:79:8c:
5c:86:ac:06:87:d1:1d:c6:a0:23:f1:b2:da:a9:2d:
79:78:f4:52:90:ae:a3:6f:78:e2:b5:16:f3:b2:3c:
56:dc:f8:7c:da:78:ef:60:b2:9a:af:bf:1f:c1:51:
25:77:3f:db:5b:7a:18:a5:97:75:9a:78:63:c3:e2:
f1:98:ab:14:de:d7:22:15:e8:37:40:95:86:2c:4b:
c1:82:38:e5:dd:ce:98:0b:89:29:bd:fe:de:7f:41:
40:08:1f:b0:81:82:f4:99:0e:96:5c:4c:11:4f:7a:
29:29:52:5f:7c:87:d3:fd:06:a5:6c:46:59:fc:22:
69:5a:63:83:e0:26:46:78:62:af:74:30:e0:04:a5:
4c:8f:91:ce:db:e0:0d:84:b1:f4:71:99:25:ba:70:
0b:03:7b:6b:8e:72:1c:62:ba:a0:5d:49:e7:7c:24:
23:31:e1:17:d6:51:37:94:bd:66:77:14:3b:63:9e:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FB:9D:92:23:08:0D:81:75:E3:67:B3:7F:B5:A0:0A:74:DF:78:BE
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:0c:d9:8e:70:f7:1e:d4:36:34:db:39:34:78:82:a6:b2:8a:
5a:37:fa:a6:64:0d:22:95:58:aa:fe:0a:0d:d8:aa:35:c0:f4:
6a:95:12:95:a0:d0:93:1f:54:1b:3e:e8:45:ce:b8:c2:3f:8f:
f7:1d:5b:8f:71:33:c8:63:69:a5:64:a8:7f:15:88:51:17:74:
bd:cc:11:b6:1e:09:7b:35:3f:7d:fc:5d:29:bd:aa:81:c4:16:
96:0b:b1:59:b3:76:68:02:c7:13:f1:c1:e0:f0:c1:c9:44:48:
02:cd:fa:df:6f:c7:c7:6b:36:de:ee:9a:8d:69:af:14:b7:9d:
59:97:1f:5c:ce:43:1f:85:a5:fa:ad:6a:90:06:79:b3:3b:7b:
ee:a2:46:93:0b:80:09:cc:f4:dc:70:a4:26:21:82:82:8f:d2:
83:8f:bb:f7:04:eb:01:03:42:80:77:84:6b:15:8b:34:a9:cb:
c1:84:fd:85:ae:43:31:91:63:89:68:7f:64:34:ca:83:f0:f0:
11:d3:fb:a2:bd:ed:99:28:27:7f:bc:93:8b:d4:80:b4:84:36:
54:59:4a:88:98:6e:39:53:7a:83:99:93:23:ca:84:d4:1a:23:
3d:4f:77:d2:e5:77:8e:0d:29:6b:5f:b5:11:eb:93:01:25:e2:
3b:cd:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:28:34 2026 by rpki-client