Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: NmB3xoJ6ZF3/0v2sO7GV2DGz0oxogT1WoAtYbLPXAG0=
Subject key identifier: 16:68:C6:B2:50:30:72:F1:CA:E4:E7:CB:34:72:7B:04:D7:78:83:C6
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019FA9E341E13B7E4F2CA2BE0AEDC880DE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0B9B
Signing time: Tue 28 Jul 2026 18:01:10 +0000
Manifest this update: Tue 28 Jul 2026 18:01:10 +0000
Manifest next update: Wed 29 Jul 2026 18:01:10 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: OmaRH67H6M6Kh7H23mn0U1Ti5yt7h5ZArRsU/VhfIzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:41:e1:3b:7e:4f:2c:a2:be:0a:ed:c8:80:de:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jul 28 18:01:10 2026 GMT
Not After : Jul 29 18:01:10 2026 GMT
Subject: CN=1668c6b2503072f1cae4e7cb34727b04d77883c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9b:1b:a3:76:79:93:a5:3a:d6:83:ad:4b:45:
6c:0e:43:ad:5b:8f:61:3b:bc:1b:a7:7d:1b:20:fa:
40:32:21:1c:c3:38:45:1d:13:bf:ba:4b:2c:c3:a7:
f7:72:6e:d1:ce:47:d5:f6:e8:d7:07:84:4c:17:92:
ed:7f:ec:72:4d:07:5d:7d:5c:78:8d:6c:45:aa:3e:
e7:9a:bc:16:29:6d:f3:39:11:99:66:e4:59:b5:1d:
60:d0:f0:60:c8:dd:88:c1:91:56:f4:40:ab:f2:be:
bb:0e:4e:dc:03:77:2b:23:f6:27:ad:a9:4f:c4:60:
7e:8d:e6:24:88:41:59:b4:f9:3c:2a:ac:a9:ed:51:
f1:e5:67:f8:2c:e9:c5:6d:ee:e3:7a:1d:79:ea:93:
e1:ad:75:eb:e4:c1:cf:9b:98:e7:a1:4c:a2:4b:6b:
b1:f4:56:f8:08:cf:7a:97:7b:8b:73:43:da:6f:e6:
e8:c2:64:4a:c7:7f:77:21:13:59:16:ec:fc:4f:66:
c5:80:e1:c3:fd:29:d0:95:f9:70:c2:de:8f:2e:3a:
81:ed:18:3a:d2:0b:81:db:b0:ec:6f:be:ef:8e:d3:
96:31:b7:bb:e8:02:5b:0a:df:67:11:8b:ce:55:35:
ca:15:5a:a1:d8:08:89:b5:3d:2e:44:a9:76:7b:9d:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:C6:B2:50:30:72:F1:CA:E4:E7:CB:34:72:7B:04:D7:78:83:C6
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:c3:49:71:6a:b4:b5:3c:8f:80:13:8c:6e:5d:eb:dd:26:
a9:bb:0f:fc:3a:ca:07:43:3e:0c:17:f6:30:cb:4f:89:43:ad:
80:d9:50:74:c9:0f:13:c0:ae:23:43:b7:b0:72:30:f1:30:28:
0b:45:35:39:85:e1:d7:b2:90:17:03:3e:d0:02:99:67:61:a1:
e1:e6:44:7c:8e:e2:16:32:2a:c1:34:c8:84:22:a1:8c:44:fc:
e2:a9:ef:19:b0:1a:80:c7:4f:17:8c:84:23:e7:be:64:f7:d6:
03:cb:10:84:57:06:31:bd:49:26:27:29:6c:43:a2:65:b7:e8:
fa:5c:82:42:8e:da:ab:81:a0:75:61:64:05:4b:7c:a4:92:f0:
2c:6d:ec:43:4e:8d:30:ce:12:dc:64:bc:5d:e1:5e:1b:60:8a:
71:ec:61:bf:69:cf:2b:a6:c3:e0:2e:0e:18:85:8d:aa:7f:90:
be:d6:65:bd:d1:42:15:42:3a:93:c2:80:fc:43:45:bd:60:50:
9c:1e:7b:8a:29:c2:50:cc:b8:7d:55:ea:ef:6f:6f:04:a8:8a:
bb:bf:32:fa:02:46:ac:86:f8:fc:06:88:b8:8d:1c:86:c6:17:
45:c8:c7:88:3e:89:c4:45:23:25:0d:8f:89:a0:1e:16:a5:ee:
df:fe:c3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:59 2026 by rpki-client