Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: r9vZ4OfGX0DaizOPukcSk4w3SWZv2Nc88Jy3eovzWrw=
Subject key identifier: F2:88:B1:31:01:14:DD:24:3A:63:63:AA:BD:AE:15:39:55:BF:3A:EF
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019D99D0992DADB668F7CDD07E8866A526CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1443
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: ja3CvVeDXFwIPt2O64C/ZHbhESEcnEhnOYinM1SmRIE=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:99:2d:ad:b6:68:f7:cd:d0:7e:88:66:a5:26:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=f288b1310114dd243a6363aabdae153955bf3aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:ee:be:2f:d3:c7:49:42:f7:b7:98:a1:a0:
35:ac:0e:a9:60:4a:7b:bb:f7:77:0d:ce:6c:c9:5e:
00:02:f1:82:6b:3a:de:19:d5:79:65:1f:a9:41:49:
df:6c:33:1b:ec:79:45:34:a4:51:ce:fe:c9:b2:34:
0a:24:40:8d:ec:c4:42:54:89:b1:fe:37:9c:2b:64:
2c:4e:fc:ba:01:55:83:4a:e7:f6:99:58:fe:df:73:
d0:97:f2:4e:12:f5:65:fc:4a:81:19:9e:21:55:8c:
79:d6:15:cc:0a:48:b9:d5:8b:05:fc:87:10:64:56:
55:4e:33:31:65:9c:bd:8f:74:b1:9c:0a:79:10:42:
79:8f:da:03:3d:68:4d:cb:6a:f9:b1:43:8c:05:fc:
60:8a:1f:82:a0:34:3a:e9:01:d5:09:61:a4:f5:6c:
25:f0:73:c4:b2:ca:4c:08:26:0d:35:a9:cc:fe:e9:
e9:80:a9:0c:41:44:c5:d4:fc:8b:75:a0:1b:9a:71:
0b:3c:42:d5:e1:46:3e:65:46:66:f5:f3:07:76:79:
c7:99:8c:0a:98:04:e2:46:6f:85:71:1c:48:0f:3f:
01:59:81:ce:4e:de:ab:0f:9c:8d:41:2c:fa:3e:29:
9d:86:9a:dd:a8:d8:aa:b5:b8:21:fe:fe:86:1d:05:
6c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:88:B1:31:01:14:DD:24:3A:63:63:AA:BD:AE:15:39:55:BF:3A:EF
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:16:d2:65:9f:b0:13:4d:f8:90:71:80:76:35:66:30:76:8f:
d6:4a:8d:c5:96:2b:72:db:71:d4:5a:42:99:16:16:6d:ee:d8:
3b:f8:8f:46:a4:69:b2:de:44:8a:d3:d4:59:94:68:7b:ae:d6:
d8:77:65:93:01:3c:df:15:66:2b:7f:c5:53:3f:79:4f:bf:42:
c7:ed:3d:73:65:0c:1b:0f:c4:e2:bf:0b:fa:3c:53:a3:d6:0c:
9f:73:50:80:a2:e6:e9:92:ba:4a:67:93:42:16:bc:3d:24:b8:
e0:a1:d6:5b:41:be:6e:e3:c8:b2:8a:61:e9:46:25:26:f0:b9:
b6:fe:e4:c3:69:b8:63:b6:d0:2f:d3:99:b3:0f:1c:c8:69:c4:
7c:88:5a:9c:34:a8:04:a2:9d:3e:f2:5d:1f:80:91:87:89:70:
94:86:32:f0:62:2a:44:8f:3d:0a:d7:09:c7:99:16:53:91:a5:
5b:4c:a0:5d:0f:72:62:0a:63:f6:75:f4:3f:cf:ee:fb:ad:1a:
7d:e8:6d:2d:fc:c1:99:2e:89:15:26:be:12:ce:de:3a:65:21:
55:13:73:06:1e:79:e6:9b:58:59:56:72:90:9d:6a:63:1b:7e:
ee:29:af:37:63:54:74:b2:62:1d:e3:ef:dc:f4:d2:ee:c3:70:
6d:b9:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:59 2026 by rpki-client