Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: mitL1VqNK4E3PB1AizYL1GfkvYl77zPDCUya6jvo88U=
Subject key identifier: BA:C5:B8:99:2B:E0:F5:5B:98:66:83:DE:A6:F4:B2:F3:C1:F7:A3:0F
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019D3608EC2ECE052FFADC70DAACBD317F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1892
Signing time: Sat 28 Mar 2026 20:00:47 +0000
Manifest this update: Sat 28 Mar 2026 20:00:47 +0000
Manifest next update: Sun 29 Mar 2026 20:00:47 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: 8/4WMwkwxXxoCfopMsfdkCobQRnO+Ed/fBknqAGR0II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:36:08:ec:2e:ce:05:2f:fa:dc:70:da:ac:bd:31:7f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Mar 28 20:00:47 2026 GMT
Not After : Mar 29 20:00:47 2026 GMT
Subject: CN=bac5b8992be0f55b986683dea6f4b2f3c1f7a30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:3b:f2:9c:c4:b2:56:8a:c4:a3:e5:27:f6:
ce:bd:99:79:a7:b5:19:a8:1d:1b:fd:11:ab:60:81:
a6:ac:82:0c:b0:9e:d6:ff:e8:67:1b:81:70:a2:e0:
d9:dd:00:55:66:fd:a7:6e:7a:1c:b4:e1:83:0b:be:
2a:c3:ca:7d:6b:2b:ff:97:97:36:80:ba:a4:60:59:
02:fe:64:6c:47:f2:d7:37:7f:cc:08:4b:dc:cf:61:
ad:d0:6c:48:fe:11:eb:4f:ed:77:16:e4:5f:2f:53:
12:04:6d:65:ff:d7:3c:f6:7d:49:b0:b9:a4:bd:7c:
3b:59:b0:6f:df:e1:bb:90:a5:81:37:ed:98:50:c1:
ee:fd:4c:1b:14:24:68:9a:d8:58:3d:ba:5a:1f:33:
68:15:cf:87:de:78:98:83:c3:cb:c3:0f:2b:f0:36:
3f:89:b9:f9:52:64:dc:19:06:86:37:5c:24:10:a6:
9e:34:51:30:17:14:4f:5c:29:78:16:64:96:23:f0:
7c:85:4e:b3:73:9f:e0:5d:f5:b1:b5:c2:aa:c2:f6:
d0:f3:69:e2:2d:10:d4:92:0b:49:83:73:f9:c4:6d:
77:87:9b:5d:b0:58:71:46:24:d9:8a:b8:28:05:0d:
f9:9f:71:92:60:59:c5:c9:1d:f9:6b:68:f0:48:c0:
ef:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C5:B8:99:2B:E0:F5:5B:98:66:83:DE:A6:F4:B2:F3:C1:F7:A3:0F
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b5:ea:7a:b5:0e:1d:27:93:fa:c1:90:69:cf:c5:4d:c0:78:
77:4b:d4:62:ac:f6:0d:32:81:e9:1b:74:0b:92:fc:73:cf:f4:
97:a7:3a:b2:e1:33:72:4e:3d:7f:44:7c:42:1a:03:f1:00:c6:
6c:4c:a6:bd:f1:2a:1b:cd:4e:d7:b2:3f:2f:d4:33:d8:6c:b0:
e6:c9:19:40:74:97:7e:31:c3:18:c0:a2:38:46:32:7b:2f:09:
4e:22:f5:c0:dd:f3:9c:00:c3:ea:bf:db:8a:58:86:99:b1:82:
7c:b4:cd:00:87:08:b6:cc:c8:19:bf:05:b8:af:e2:1c:14:17:
ed:8a:25:d5:17:26:3a:e8:ef:74:99:ea:fa:d1:fc:8d:9d:df:
a6:22:b7:5b:46:43:cc:cd:65:a4:71:37:11:63:7c:c7:cb:69:
73:d3:99:b1:b4:ea:60:fc:70:8a:a5:9f:75:27:48:82:59:7b:
fd:e2:ad:3d:b3:90:10:da:2f:95:3a:16:4a:36:21:0a:52:2d:
71:87:10:7c:3f:3c:a8:68:af:4f:18:a7:cc:11:60:93:43:7b:
c6:d3:98:cc:4f:a4:d5:76:10:d3:eb:21:d1:d2:a4:11:3a:58:
88:6a:d3:1a:94:69:64:4d:73:7c:ab:14:8b:f9:1d:f0:e4:61:
6d:95:6e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:02:02 2026 by rpki-client