Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: /7/HOoVhAJE4ZtTMDbKhrm+ss8oLpmGBZnuftVtupss=
Subject key identifier: 43:2B:5B:86:36:69:38:D1:EC:AE:23:96:BE:0B:A6:F4:5E:29:DE:19
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 019D390A49CD2D9689E6371671100DC6D88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 11A6
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (hash: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: vebaH2yWTuo67+6HWLFlxeUs9+uHOJwn2694aa71nWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:49:cd:2d:96:89:e6:37:16:71:10:0d:c6:d8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=432b5b86366938d1ecae2396be0ba6f45e29de19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:89:d9:07:ef:13:b9:97:3b:64:f4:11:b9:
65:66:11:d4:cb:18:6f:8e:41:fa:2a:7c:88:7c:7c:
bd:cf:4b:b5:cd:52:3c:51:4d:f8:4c:f7:13:7a:28:
61:30:84:dc:5e:5e:d4:dd:f2:ad:81:39:14:83:f1:
39:a1:c7:87:b5:20:b9:cb:9c:4b:14:23:94:ac:31:
90:f0:2f:78:e4:84:0b:c9:63:88:80:26:4e:d4:b2:
5c:3b:4c:29:65:1c:04:02:f8:52:55:93:19:5d:0e:
d7:50:99:f0:81:1d:ed:fb:70:9f:f1:a5:86:72:da:
50:cb:f2:cb:4c:8a:ed:24:6b:96:f9:6c:8a:96:89:
5a:0a:07:75:07:ea:18:fb:44:f7:90:30:2e:a2:47:
75:df:9d:1e:1b:b7:cf:49:86:70:da:10:b7:69:3b:
6c:58:d8:a0:01:3e:a9:36:6a:4a:ec:84:0f:bd:69:
bf:19:e4:36:91:cf:55:33:85:4b:20:36:87:b6:10:
32:0d:47:04:55:fc:46:60:0b:cd:6f:96:2c:53:ab:
ef:71:35:05:9a:b0:48:e4:55:f8:f1:ab:30:f0:4c:
8f:1f:7b:9e:86:97:07:75:03:25:7b:09:e9:16:fa:
bd:0a:82:9e:a4:13:69:b2:00:09:9e:3a:00:33:f6:
44:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:5B:86:36:69:38:D1:EC:AE:23:96:BE:0B:A6:F4:5E:29:DE:19
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1e:2d:36:96:b7:49:da:44:a2:76:96:1c:6d:5e:50:5c:79:
b3:67:56:32:03:f1:ac:96:c5:0d:6c:89:f3:95:aa:67:f5:54:
80:01:8e:c7:fa:c3:ab:b7:38:d7:8f:ee:67:00:c4:74:90:cc:
c8:15:b9:d5:8f:27:ce:7f:7b:02:77:2a:7e:bd:5d:85:07:eb:
6b:23:c1:38:ab:71:8f:4f:e3:68:be:0b:1d:9e:c4:e4:c7:83:
9a:c1:d8:e7:f8:3f:5a:18:fb:86:a1:d3:ef:37:d0:7c:eb:49:
88:00:cb:91:7c:73:e5:33:50:56:4f:c8:61:a5:cf:ae:48:1f:
c1:e2:a9:f5:fc:32:10:54:f8:6a:e3:db:39:6d:bf:21:cb:a1:
a4:36:f5:22:5e:8b:73:73:2c:f4:6f:a1:85:9e:5c:94:f4:0f:
78:fd:d4:26:71:cb:90:b4:d8:4b:f0:c7:bc:03:fa:7e:f1:21:
30:6f:b0:e0:f3:66:51:d1:5c:d7:5d:1b:6a:ec:d9:1d:f1:f0:
14:8a:64:b3:79:a6:53:ee:d3:ee:71:e2:b8:20:4f:e1:2c:d3:
a6:43:b8:8a:e2:5d:3c:73:08:c7:cd:53:6e:aa:0b:24:3e:88:
5a:f4:ec:00:90:b9:3d:71:42:60:d6:3e:40:a9:d7:52:da:88:
7d:94:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:49 2026 by rpki-client