Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: F7zWDCoUbzGoa+OimiQDVARI73y1UE9Gw4cNH/ImLEk=
Subject key identifier: B8:A1:3A:42:0D:F1:02:6C:7E:75:3D:9F:B0:0B:14:FF:95:CE:5A:53
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019D9AE2858866A03523DF6D4C699C170219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: DA
Signing time: Fri 17 Apr 2026 10:00:29 +0000
Manifest this update: Fri 17 Apr 2026 10:00:29 +0000
Manifest next update: Sat 18 Apr 2026 10:00:29 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: aKxMAjciGVNjAg9OVdQr0oqTRjiZvYwM96I9A8YIU6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:85:88:66:a0:35:23:df:6d:4c:69:9c:17:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Apr 17 10:00:29 2026 GMT
Not After : Apr 18 10:00:29 2026 GMT
Subject: CN=b8a13a420df1026c7e753d9fb00b14ff95ce5a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:2e:4b:ae:23:c8:9c:48:21:40:09:11:d9:
65:a8:dd:84:34:2c:eb:40:c9:ba:ad:87:b2:a9:c4:
d5:e7:23:42:21:09:3c:20:fa:ee:2b:84:ca:9f:c0:
19:18:67:a5:b8:1f:83:42:4a:1c:e9:c9:64:ff:c8:
65:ea:28:12:c5:2a:8e:0b:96:2e:4d:97:54:5e:41:
60:e2:1a:fd:81:88:f8:1c:ed:aa:14:c3:bd:9f:19:
ae:b6:8c:b9:8c:48:07:13:b0:d3:e3:94:8b:0c:a8:
db:ea:cb:7b:f2:c5:65:a8:cd:1e:1e:7c:80:8d:19:
da:e9:b9:a5:5a:bc:8d:4c:f3:75:09:f4:f8:3b:29:
19:55:ca:49:38:9b:0d:b6:66:37:2f:75:cd:1d:27:
19:51:80:d9:b3:1c:4d:2f:db:0d:f7:9d:72:a6:c5:
8a:17:ff:54:f6:8e:63:1c:fd:ab:66:1f:01:9a:bf:
51:b4:c6:69:31:97:81:6b:70:f4:92:7c:40:33:43:
02:ad:98:54:66:b8:e7:17:1c:95:4b:05:25:ad:b0:
32:d0:a5:c2:45:1e:d9:00:91:d3:13:6d:10:27:4e:
ec:fb:d6:e6:e9:b1:51:83:16:14:55:fa:5e:9f:b8:
33:fd:e9:7a:4e:16:a5:60:9d:fc:cc:e9:2e:fb:c3:
66:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:3A:42:0D:F1:02:6C:7E:75:3D:9F:B0:0B:14:FF:95:CE:5A:53
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fe:e7:35:18:b6:e5:41:10:2e:88:44:8a:6d:17:03:3d:ac:
20:bd:98:41:de:10:b2:30:c7:e6:5f:1f:37:60:a1:ec:11:14:
3c:9b:d9:eb:e9:3d:2e:0c:9d:17:9c:87:fd:09:65:51:c4:a9:
ef:16:3e:4f:01:89:3d:ee:6f:fb:9e:40:cd:ee:eb:b2:2b:ed:
97:11:01:04:ce:60:c6:95:87:57:c1:f9:6e:3b:b3:69:74:8a:
70:54:e3:8e:54:ac:ca:c6:19:10:1c:9a:e3:20:14:b9:54:92:
57:9f:f2:32:b7:c1:ec:52:b9:3b:eb:17:2d:7a:a2:1a:9f:bf:
59:df:a6:e7:d5:92:9f:93:42:c5:e3:1a:c6:06:08:d5:8d:7e:
7e:bd:fb:31:6c:63:11:4c:5c:0e:c1:13:c2:d4:de:91:f0:97:
4e:76:c9:09:94:c3:31:52:94:c8:84:90:db:4c:4a:bd:cc:8f:
8c:77:48:c8:3b:1a:9a:85:d1:06:2a:09:5b:42:75:95:4f:7c:
84:d5:2f:cc:78:5a:1c:fd:6f:59:a1:f0:94:c9:04:db:e6:25:
02:eb:6f:47:86:c1:45:56:22:70:69:fc:00:86:85:ef:b8:c3:
05:98:35:0a:ed:e0:95:8e:ae:91:cc:39:dd:3e:a2:0c:63:d0:
d0:dd:c0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:13 2026 by rpki-client