Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: +oLtSGVz/aUZdkQ/A8Am6dg+td+ALlIFsUpzA9pohaU=
Subject key identifier: D5:6B:EA:16:F6:C3:72:2E:32:62:85:E4:7E:34:30:6B:D4:02:19:C6
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019CAC46F41EAB6D09C8B5F28D86DA9336EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 13C8
Signing time: Mon 02 Mar 2026 02:00:56 +0000
Manifest this update: Mon 02 Mar 2026 02:00:56 +0000
Manifest next update: Tue 03 Mar 2026 02:00:56 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: R+pOZjPeMkbE677JiW3ea6bKp0csnr80Bh296Cea7b4=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f4:1e:ab:6d:09:c8:b5:f2:8d:86:da:93:36:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Mar 2 02:00:56 2026 GMT
Not After : Mar 3 02:00:56 2026 GMT
Subject: CN=d56bea16f6c3722e326285e47e34306bd40219c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:96:d4:23:aa:56:48:ca:70:a6:eb:08:7a:
db:d6:76:d3:d2:67:17:b2:c7:53:0a:3f:d3:48:c1:
2a:36:30:75:88:e1:35:d7:db:ae:c0:91:21:04:50:
bd:88:95:54:f1:ba:4c:22:dd:3f:30:fa:09:7c:ba:
b6:d4:fd:f4:18:13:f0:88:c9:d6:07:cb:5f:4d:f2:
14:ee:83:bc:f9:1a:75:b0:2a:45:47:bf:d3:d4:e1:
f9:13:c8:2c:6e:b7:cd:0b:13:7d:b2:d0:01:79:d9:
08:8c:da:44:4d:e3:10:40:45:5f:ae:12:e7:0b:70:
e6:9f:a0:80:6f:fe:66:c4:04:46:41:fc:49:2d:5e:
87:8c:05:09:65:b7:1c:6d:e6:0c:6c:0d:94:65:ff:
31:aa:67:1e:03:58:e0:b3:44:b0:d4:5e:aa:17:b2:
f8:6d:28:20:9c:73:39:46:1b:8b:d7:f3:29:b3:21:
34:fb:dd:7f:b8:c0:b0:fe:e9:1c:0a:6b:0b:33:b5:
26:7d:27:fc:b6:88:19:61:bd:20:30:27:d0:9c:4d:
5c:88:17:ec:29:60:77:42:8b:2b:66:95:5a:99:5a:
86:2b:4c:c8:9a:a6:ff:b4:da:ea:46:d4:f1:ed:de:
79:db:64:4e:b0:70:55:5f:c5:a8:62:51:85:fe:ca:
52:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:EA:16:F6:C3:72:2E:32:62:85:E4:7E:34:30:6B:D4:02:19:C6
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8d:b9:b8:5b:25:bd:5a:10:2f:36:f8:ed:e3:ca:57:7d:5d:
f4:30:01:ae:38:ef:a6:eb:bb:78:14:0c:d3:66:c9:94:8f:b3:
78:1f:ae:94:ef:ef:5c:51:e5:f8:57:67:e9:1c:6f:5e:56:c0:
71:33:91:df:8c:43:f5:a8:6c:2a:3d:92:01:12:74:a7:53:c9:
83:25:dc:f7:8d:46:64:50:ff:2a:a3:1e:55:eb:49:5c:7a:e6:
14:3c:b9:e2:99:f3:e9:b6:f4:21:bb:ea:3a:7d:58:19:37:82:
c2:65:c1:c6:3d:83:6a:34:84:51:f8:8d:6d:dc:57:a1:87:b5:
43:0c:2c:c8:99:2f:8c:d5:61:0d:a7:ce:f7:a9:9e:6c:f6:51:
d4:f1:a9:c1:10:49:4c:a9:6b:b1:fc:db:5b:c8:68:df:2d:2e:
4b:c7:9c:ba:9e:95:25:a4:d5:2c:98:8d:9c:f6:3e:57:af:09:
36:44:9a:58:a1:cd:7b:6c:6e:98:83:07:1d:f7:64:bc:56:0e:
63:00:37:d5:f1:60:1e:db:85:b1:97:08:35:34:81:b9:77:dc:
81:20:b7:ae:58:19:4a:58:e9:f3:af:88:45:12:92:e5:32:ad:
64:cf:c0:84:10:36:60:46:e0:0b:11:f3:61:5a:b2:8e:43:95:
8a:bb:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:56 2026 by rpki-client