Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: 44LBuqNDWYznnON8DF6uJ15oIMdXC0CN4WJfisJvYS4=
Subject key identifier: B9:C3:25:80:90:68:AC:74:AC:8D:89:C7:AB:F9:91:1E:64:D8:E8:06
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019F111C61A4673EE8B00C49E4673E921256
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 02:01:40 +0000
Manifest this update: Mon 29 Jun 2026 02:01:40 +0000
Manifest next update: Tue 30 Jun 2026 02:01:40 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: G5h6TJYTy5OGdLHgNcGT4KrvdOh4wAzabWNzsD9y8BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:61:a4:67:3e:e8:b0:0c:49:e4:67:3e:92:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Jun 29 02:01:40 2026 GMT
Not After : Jun 30 02:01:40 2026 GMT
Subject: CN=b9c325809068ac74ac8d89c7abf9911e64d8e806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bb:77:f1:7c:42:23:c1:99:f7:73:25:58:d7:
cf:99:f7:3d:6e:b2:98:24:84:67:95:1f:00:d8:94:
75:00:cb:48:fc:a5:26:c4:a2:ef:37:25:50:9f:18:
05:a5:cf:f3:c8:84:83:51:b8:21:1c:8b:e6:91:1f:
04:1b:b6:31:a5:9c:67:d9:00:da:a0:a3:a8:53:f8:
4d:02:b4:01:9b:99:99:09:22:88:44:77:22:34:c4:
3f:6a:19:e9:13:72:e0:8f:5a:11:55:6f:a5:97:ee:
35:13:c9:ab:47:93:b4:7b:01:1e:27:61:cf:54:ff:
45:80:1c:13:23:7c:18:ae:06:2d:01:36:c3:a8:90:
fc:9b:72:97:0f:26:84:3e:1c:04:ac:fc:24:b5:f7:
24:1f:e1:03:f2:39:d9:8f:fd:00:04:fa:09:81:d1:
56:cc:c7:63:70:01:a3:e8:19:ec:99:8f:a1:be:41:
1b:27:f9:62:d5:e9:f6:40:1d:55:7b:c0:cf:1d:0c:
1b:75:6c:05:e5:d9:00:ab:dc:22:6b:11:46:2f:61:
06:94:9d:44:71:7d:b9:ab:9d:c7:d0:d7:07:67:7b:
c8:d1:80:89:68:d8:9f:4b:73:2f:ec:9f:e3:ec:e0:
d6:81:5c:b1:26:3e:6c:5c:9c:55:fd:6c:5a:4f:b3:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:25:80:90:68:AC:74:AC:8D:89:C7:AB:F9:91:1E:64:D8:E8:06
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:ac:e6:b0:2c:97:76:51:5f:2e:bf:de:4c:ed:59:cd:de:
64:7c:24:9e:95:33:ad:ed:89:01:a4:53:77:a5:1e:a2:55:c1:
9b:c0:5d:99:8e:c9:6a:82:8a:49:2c:b9:f4:c0:37:44:23:7c:
5c:4f:2e:ae:a5:30:06:6b:c0:a9:9b:50:64:f5:00:30:55:b6:
2c:60:40:a6:93:1b:85:10:9c:33:75:0d:e0:1e:8c:d7:a7:6e:
6f:27:8e:f2:df:a5:fe:2c:df:00:0f:76:2c:c8:b2:53:c9:e0:
14:1b:17:f6:52:cc:fe:28:93:b9:2f:78:19:4f:c4:bf:07:2c:
e1:4e:3f:b2:f5:a3:98:73:f2:bc:67:9f:a6:14:89:61:3e:e8:
8b:10:72:74:25:cb:74:51:34:9f:b9:c6:b0:d0:05:b4:ce:e6:
fb:c9:c7:53:e7:26:62:b3:4c:75:bb:12:98:42:cb:21:f4:8d:
f0:e3:60:6a:dd:75:7f:92:04:fa:8e:a1:fd:1e:c4:b0:e6:70:
0a:28:47:d6:c4:0f:50:92:eb:fb:4b:d2:23:f8:d4:e6:d3:e6:
6c:2a:8f:41:2f:25:4a:f6:a5:e4:57:00:ba:aa:a9:e2:00:59:
dc:0e:87:49:ff:ef:dc:17:ff:86:91:32:5d:c7:fa:cf:85:26:
c1:ca:87:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:44:01 2026 by rpki-client