Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
File: u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft (raw, json)
Hash identifier: LVZVP34MNk/MLEi3UJZod9r291yOZ9d8Mrr3qhmpHhI=
Subject key identifier: 5C:A4:2A:87:4F:6F:46:4E:E4:F2:1A:CF:BE:34:8E:C7:70:1A:CB:09
Authority key identifier: BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
Certificate issuer: /CN=bbe026ef26920909d931ea4dac9d9390486b4153
Certificate serial: 019DCE627E167DB266937D69D1F445D8FDE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
Manifest number: 17BC
Signing time: Mon 27 Apr 2026 10:00:54 +0000
Manifest this update: Mon 27 Apr 2026 10:00:54 +0000
Manifest next update: Tue 28 Apr 2026 10:00:54 +0000
Files and hashes: 1: HpKYJTH0AKCOXkV-1Il50PmP0QY.roa (hash: 9PVXUkwReOwf8wA4lfiLTA69I7UGpu+3253jwBo7ruE=)
2: dDTXblpfw4e_IT4c8kZaMfC06Cw.roa (hash: b+jA1Jjy/tg0AVffR8Bs1rGJPFwYS6JP2eeG+taKslA=)
3: u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl (hash: ZEsg1+n/Nqe6ETYy5BTqlJ7Lm1nfuiitB3kzKR6Fi5Q=)
4: u8aA0qjA-O7UgztUL0LUEuUa-vg.roa (hash: e32kTp0iMfkL2cHwmrb+4GT9jPTGLB332KvvWqfkeko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:7e:16:7d:b2:66:93:7d:69:d1:f4:45:d8:fd:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe026ef26920909d931ea4dac9d9390486b4153
Validity
Not Before: Apr 27 10:00:54 2026 GMT
Not After : Apr 28 10:00:54 2026 GMT
Subject: CN=5ca42a874f6f464ee4f21acfbe348ec7701acb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:79:13:af:85:93:c8:0d:7a:73:b7:02:3c:fe:
8d:d9:3d:4e:92:65:67:a2:59:d2:05:2e:a3:2b:ea:
d2:be:b2:31:21:a9:b7:d4:dd:ea:50:cb:4e:f8:d4:
41:0b:57:d8:2a:bf:fc:83:b5:90:d4:99:b8:2c:8b:
8e:a6:6d:0f:e6:8d:8d:f3:75:7f:ff:e7:1f:9e:6b:
a3:30:e8:52:c4:76:2d:25:cd:80:69:43:4e:f3:10:
9a:9b:fd:80:df:c3:d8:09:56:62:95:1f:f1:b4:e8:
5f:23:a9:08:62:7e:ad:b6:81:06:7c:bf:4a:d3:35:
02:5c:99:24:4b:00:5e:e9:e4:39:cc:a0:97:87:95:
ca:36:56:d6:0a:8a:af:f3:93:b8:55:3e:19:a6:22:
43:c3:2a:26:5d:ae:15:80:03:4f:43:6a:57:b0:70:
31:9e:e8:9f:99:35:44:44:8b:f7:e8:24:6b:cf:1e:
90:22:ce:ff:17:00:e5:94:96:36:d1:bb:c3:ef:3b:
1e:98:49:19:2b:66:3f:db:67:17:5b:7c:13:c3:a9:
e4:93:af:cd:55:37:3c:ef:49:20:ca:9a:a8:c1:b2:
2a:c9:38:2d:63:11:26:c3:d9:74:24:65:be:6b:fd:
e0:67:63:be:16:cc:e3:e4:43:31:c0:92:eb:31:58:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A4:2A:87:4F:6F:46:4E:E4:F2:1A:CF:BE:34:8E:C7:70:1A:CB:09
X509v3 Authority Key Identifier:
keyid:BB:E0:26:EF:26:92:09:09:D9:31:EA:4D:AC:9D:93:90:48:6B:41:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Am7yaSCQnZMepNrJ2TkEhrQVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/b73add-ea0f-4c22-980e-059bab015cc3/1/u-Am7yaSCQnZMepNrJ2TkEhrQVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9d:ae:35:fc:76:9d:d5:41:65:82:59:0e:40:13:0d:50:18:
e0:57:f3:bf:25:f9:e3:f8:ad:84:09:40:1c:59:b0:91:82:b4:
fa:17:06:79:f7:4d:d4:d9:ed:21:95:66:a7:18:0d:04:51:f3:
fb:6b:94:2c:c7:c7:e0:3d:3d:c1:dd:34:a5:59:ba:b3:62:c6:
0d:52:d0:19:45:86:2f:d9:31:cb:c6:a8:97:74:15:d3:85:64:
69:9b:e2:4c:32:ca:1a:90:d0:a7:ed:c4:fc:18:63:6c:b3:76:
c9:2d:c9:22:69:a1:f2:67:15:aa:5f:31:d6:3c:7c:ba:9e:7c:
2f:be:5e:e2:35:d5:07:af:59:40:e5:a0:d9:89:8f:6f:1b:8b:
fc:59:77:c4:7f:ea:aa:d3:d1:f2:75:db:52:a9:31:f4:d2:ff:
ea:46:8a:8b:54:c4:be:72:69:13:ee:1e:18:e2:ab:d9:4e:29:
d8:36:0c:b5:29:31:f3:3d:64:50:99:1e:69:66:0c:f5:3b:ed:
5b:56:83:a2:52:ec:9a:e7:a6:48:33:75:12:4e:54:fe:51:e5:
41:f7:5e:48:66:fa:09:87:72:06:3a:8d:53:f4:26:65:1e:d3:
c8:c1:c8:07:78:1e:6f:0f:89:ca:4b:d2:b2:b7:57:af:c3:77:
a4:bf:cd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:31:16 2026 by rpki-client