Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: twyDy8SDTi9f4sqpx74PoWilT6hOtVzk72sHE99RrR4=
Subject key identifier: 5B:46:11:72:49:58:BF:DC:24:D2:AF:A4:6D:EC:52:F9:78:4E:F9:A0
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 019CAC7DC55939F1054F1B28C5648517953C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 14CE
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: BDPTI5i4mKqpMJBYvSboypMMNuE.roa (hash: RTLrC8P78AL/8G7o0NMHm7j+X+zOpyoxook+7m1TQVo=)
2: d2KT8A8pg82saNRdGq6GRMXB3UA.roa (hash: dF7P01hXnA73GTd4pqtox0R46I5SwoggxbtIgrQCC9Q=)
3: rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa (hash: oMOWLalKve6BcbDPvs16UdYfNlQpBDtwtyZAEUofk5I=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: qNtJx4jCRrrYkPPhL6YsEZpk0CExvAn08yhvbOTTogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c5:59:39:f1:05:4f:1b:28:c5:64:85:17:95:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=5b4611724958bfdc24d2afa46dec52f9784ef9a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:df:51:c5:f8:bb:64:7d:2d:77:b5:54:14:
cf:d2:3a:f9:a3:6a:9e:1b:e9:0b:a5:18:e5:83:f8:
c6:2d:27:3d:75:3a:38:91:44:ea:d7:04:57:c2:ab:
e8:64:da:3a:95:53:4b:21:f9:3c:be:7a:cb:48:f6:
3d:74:6a:fb:38:5d:cd:2a:70:40:6e:2e:f8:df:b6:
b3:f2:15:b3:20:2b:1b:91:e8:1d:b1:96:97:96:8f:
94:f0:8a:11:1b:bd:11:70:97:f2:24:72:09:93:14:
bb:9e:2d:b7:38:ad:a0:36:db:45:96:7a:08:24:ee:
42:e2:6e:3f:b9:f8:1d:c1:ee:16:2f:6d:74:3d:69:
3a:12:61:c4:fd:81:97:7b:45:2d:56:fb:7d:42:c2:
fc:60:5c:43:f1:4b:81:68:ea:83:2a:06:3b:6e:92:
2b:51:a5:ff:cc:bb:0d:b4:e2:17:f8:e2:cb:2d:8c:
80:66:8d:00:26:03:72:f0:26:ac:24:44:40:44:9d:
34:48:03:f6:da:c5:64:85:8d:01:a2:55:39:f1:48:
c4:75:bc:8e:be:27:4d:1f:3d:b0:cc:18:0f:fe:09:
b4:e1:6e:90:c5:d2:2d:20:a8:8e:10:da:27:a3:e0:
50:c4:a5:48:53:fa:80:4b:9b:17:70:e8:61:e0:88:
35:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:11:72:49:58:BF:DC:24:D2:AF:A4:6D:EC:52:F9:78:4E:F9:A0
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:52:88:ce:2c:de:5c:db:b4:43:5d:4c:88:17:cd:f0:37:6a:
96:d9:6d:b1:96:4a:d6:0a:7a:29:72:1c:70:7d:23:78:a2:d8:
f9:97:82:8a:f0:6c:9b:51:6b:6b:b6:63:98:01:c9:6f:d3:a7:
40:11:bc:1a:a5:06:98:25:fc:0c:d5:3e:4a:b0:93:64:ee:2c:
a9:e5:57:da:9f:d8:c9:49:ef:ea:75:9d:96:2e:a9:9a:72:92:
75:78:77:27:08:16:6a:69:12:bd:1d:cc:a9:5c:f4:aa:de:2a:
56:76:20:4f:4a:6e:86:d1:7d:8f:ce:fb:70:90:56:8e:a7:00:
3a:94:da:a8:5c:33:58:c5:1d:25:34:56:36:b6:c3:b4:c1:36:
57:d4:61:93:71:d9:fe:04:c0:12:02:89:80:41:6a:39:ee:c4:
4e:79:ee:36:5d:e4:09:8e:7a:b3:80:f4:9f:90:df:c7:7a:4e:
ea:1b:b8:9d:74:ea:49:aa:8a:4b:98:8a:56:cd:c1:ad:b6:93:
be:65:9d:15:05:91:ec:6e:39:00:b5:a6:9b:93:3a:62:25:11:
65:61:36:5e:6e:0a:c6:0d:fc:91:5f:06:d7:41:4d:49:8f:96:
79:24:e6:8d:4f:4a:aa:f5:fc:16:5f:05:97:db:09:e2:fb:f7:
ed:2b:6a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:02 2026 by rpki-client