Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: OW6DLjteFu731bmPMLb4+md3hUZ+V9mTNFt6mJgP8Uw=
Subject key identifier: 62:CC:D0:8B:B5:A8:F9:A4:3D:C4:62:1F:C3:BC:15:7E:20:4D:28:AF
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019CAB6B0B127E571CAA0FD6C3EEBBDF6DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 5E
Signing time: Sun 01 Mar 2026 22:00:44 +0000
Manifest this update: Sun 01 Mar 2026 22:00:44 +0000
Manifest next update: Mon 02 Mar 2026 22:00:44 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: IR95IJsu3j4qvvJcrQ/aWEGhNPo5ipUPjJmDUjXBHKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:0b:12:7e:57:1c:aa:0f:d6:c3:ee:bb:df:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Mar 1 22:00:44 2026 GMT
Not After : Mar 2 22:00:44 2026 GMT
Subject: CN=62ccd08bb5a8f9a43dc4621fc3bc157e204d28af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:4b:81:ab:ac:29:d0:28:cf:4c:9b:b4:32:
0a:6b:f3:d7:4f:47:41:d4:a9:6a:0a:15:dd:0b:30:
ff:74:3f:31:db:8e:60:59:00:ee:91:83:88:13:37:
61:a6:cb:c8:20:db:27:8f:d9:0f:6c:c8:0c:d6:15:
80:2e:c5:3d:da:dd:6a:f9:4f:a5:1c:84:54:82:de:
6b:63:f3:3a:52:a2:17:4f:1c:a3:31:d1:19:c9:2e:
f8:0e:03:cf:c6:88:59:26:2f:1a:d2:f7:84:69:81:
0e:fd:99:d6:26:1b:de:cd:23:e7:ab:5b:f9:da:e6:
1d:f2:d7:f4:f5:07:a5:a2:f8:25:66:18:7f:e6:54:
e9:0b:05:b1:f1:95:68:9c:66:b5:2f:87:a8:4c:68:
53:77:29:56:ef:53:f0:97:99:0e:6c:8b:34:6b:23:
06:63:e9:25:4d:f5:3b:e9:96:6d:73:d4:c5:56:09:
bd:6e:0d:1f:f4:01:97:2b:e8:8f:fa:e9:49:77:f4:
e9:76:6b:1c:ba:d9:cf:a5:99:a8:fc:5a:c5:db:5a:
47:58:bf:b1:50:39:f5:cc:a8:08:8d:3a:ae:dc:d1:
e9:a6:e9:6e:d8:be:1c:23:84:9c:39:89:ab:75:0b:
a8:29:00:cc:ed:c0:99:17:28:67:23:fb:6d:f6:1b:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:CC:D0:8B:B5:A8:F9:A4:3D:C4:62:1F:C3:BC:15:7E:20:4D:28:AF
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:76:db:b2:0d:81:80:ed:d4:6f:36:9c:35:d1:d8:3f:f7:
9f:fe:11:76:fc:3b:a2:ff:24:e7:16:3a:f7:69:99:75:00:17:
91:2d:d0:be:ad:9a:f0:39:cc:62:98:1f:b0:dd:74:04:84:51:
5c:10:ed:46:f1:e8:0c:91:98:5c:86:55:bf:b5:9a:3f:5e:1e:
df:30:0d:65:dd:e5:e5:c8:a1:ca:c1:12:86:ce:5b:18:73:9a:
fa:4e:d5:34:cb:1a:d5:8f:3c:6d:f6:91:f9:6c:90:cd:4b:2d:
e9:ef:d5:b2:0d:16:e2:61:48:db:5c:e3:01:d2:f7:1b:5a:09:
ff:60:9e:14:62:eb:16:75:92:ca:bc:3b:24:1b:8b:ff:0e:7a:
8d:dd:7d:f6:c0:5f:16:b7:8b:db:6e:4e:dd:13:26:6e:21:9a:
29:a7:ac:c2:01:a1:d9:6d:dc:12:b5:f0:56:ec:84:00:77:3c:
22:f2:3d:5b:3a:63:ce:09:55:8a:09:0d:fc:21:ff:84:65:3c:
8e:47:3b:f5:da:26:fb:d1:01:df:2c:35:e8:b0:31:9a:c2:f0:
5e:5d:a0:94:4f:44:4e:b7:11:3d:95:39:67:2d:4b:0b:e8:a3:
1d:16:cd:89:46:58:7a:e3:be:6a:4b:14:f8:5a:45:8f:25:f9:
71:22:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:05 2026 by rpki-client