Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: CW4P29h0Ajm5gL1k5CS7AOMoWYYcfpq6a8rxxyuS/d4=
Subject key identifier: 53:64:8E:1B:09:06:60:66:09:3F:AD:3C:86:B8:76:68:E8:8D:5C:BD
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019D96CF7591B52BB992456FB101AA5AEA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0A88
Signing time: Thu 16 Apr 2026 15:01:11 +0000
Manifest this update: Thu 16 Apr 2026 15:01:11 +0000
Manifest next update: Fri 17 Apr 2026 15:01:11 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: eSk685XItdLi+KNEqhLFrqpeHL+THa5XFRDKMp2jYZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:cf:75:91:b5:2b:b9:92:45:6f:b1:01:aa:5a:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Apr 16 15:01:11 2026 GMT
Not After : Apr 17 15:01:11 2026 GMT
Subject: CN=53648e1b09066066093fad3c86b87668e88d5cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b0:20:d7:55:b6:5b:f4:38:ff:20:d1:ae:58:
71:13:9f:8b:d0:6d:78:ea:c9:b0:0f:0d:25:ea:96:
bc:8a:4d:d6:ae:bd:ad:74:ae:9a:dc:9a:c3:40:48:
c8:58:34:25:6b:0d:41:98:e8:33:57:df:c3:b8:37:
e4:b0:9f:dd:9e:61:4e:50:e1:03:fd:51:7d:76:b7:
90:2c:0c:81:3b:cf:5d:7e:e4:a0:ff:02:c2:23:da:
bf:a6:bc:9d:3c:cc:fe:e9:3d:a9:05:d6:36:e7:58:
99:ba:ee:6c:09:d2:6f:ce:4d:ca:a7:9e:5e:35:21:
a7:92:35:2c:2e:90:6b:b8:ea:d7:28:8b:59:e8:e7:
0f:b6:e4:b5:e1:78:0a:a0:db:6d:a1:fc:be:61:b1:
6b:4b:25:ec:07:c0:13:e1:52:7c:38:ca:54:9d:b3:
8f:c6:c0:7b:eb:15:7f:34:38:64:93:b0:86:27:fc:
5d:72:42:87:b8:89:46:b6:7d:74:2d:f5:62:60:2f:
72:fd:d5:f0:b5:e4:d5:a1:99:9b:f8:a1:f0:54:3a:
5a:29:55:38:bd:71:e5:9f:46:79:69:06:a3:83:79:
1e:92:4c:b9:94:32:55:c4:89:68:f4:f6:16:8b:49:
41:5e:7f:c8:9c:58:91:66:28:41:66:4b:a9:9b:ba:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:64:8E:1B:09:06:60:66:09:3F:AD:3C:86:B8:76:68:E8:8D:5C:BD
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:b2:6e:9d:67:79:cb:d4:a7:c0:23:d6:b1:e8:45:a0:e6:
86:d6:66:06:ab:74:b2:10:7c:1f:1e:26:4c:ef:0c:b9:09:2f:
fe:7a:6b:7d:47:a1:1a:14:7a:34:17:07:7e:f5:7e:f0:a2:3a:
36:42:46:4a:69:3a:38:4e:74:18:9d:f7:9a:fd:8b:76:99:35:
2b:df:58:af:e1:14:9a:8b:0e:6f:b4:f1:50:69:83:79:6b:b4:
f9:8f:95:6d:0c:be:26:f2:31:46:ee:4f:52:c4:da:7b:3a:2b:
39:d4:97:8f:cc:f4:3c:d3:3d:44:9b:af:a4:17:d5:29:35:96:
d1:66:3c:9b:9f:3b:c3:f0:f2:85:22:6d:ca:d9:84:9d:dc:fa:
bf:bc:ff:a4:26:f2:3e:31:08:c9:4b:cf:67:fe:fc:38:f5:17:
21:7f:54:b9:1f:1e:fb:8d:da:0d:c2:3c:a9:1b:d7:1a:61:20:
75:13:54:c6:77:2a:1e:55:20:7a:2e:a6:6c:ec:04:1a:aa:98:
03:55:1e:49:2e:2b:85:87:5b:99:50:cd:91:fd:93:11:61:0d:
a6:98:71:7b:18:c5:05:79:8b:52:b3:fc:19:cc:07:37:f7:ce:
94:a2:08:76:5a:d0:eb:fe:e9:d4:91:2b:e5:3f:08:65:a3:a3:
52:44:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:03:58 2026 by rpki-client