Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: pBuXbpby75i6059L4jC6WJdSTxERlsmi5dM9yjyC+MY=
Subject key identifier: 6E:C8:A4:2D:CD:40:6A:E3:5B:1C:14:61:D7:7B:99:19:F4:B8:32:FC
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019E9996F974292F3AD600E89B698FEA898A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 1946
Signing time: Fri 05 Jun 2026 21:01:08 +0000
Manifest this update: Fri 05 Jun 2026 21:01:08 +0000
Manifest next update: Sat 06 Jun 2026 21:01:08 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: QmR0bQE6SA0GyWOZkMiDkWZ72kD1+OgZCKI7NVnbRQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:96:f9:74:29:2f:3a:d6:00:e8:9b:69:8f:ea:89:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jun 5 21:01:08 2026 GMT
Not After : Jun 6 21:01:08 2026 GMT
Subject: CN=6ec8a42dcd406ae35b1c1461d77b9919f4b832fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:60:ea:e3:a9:ec:91:4d:aa:65:88:43:7a:94:
b9:aa:35:37:48:c3:41:d2:19:1e:7c:9b:10:f3:37:
3f:f3:7f:83:d9:d6:b1:ff:6e:0b:eb:85:d8:f9:4d:
57:20:0d:c3:bd:fa:bc:d4:6a:84:fe:d6:0e:4a:e2:
3c:65:de:7b:1f:2c:dd:96:33:c6:c4:51:40:73:4e:
73:7d:9b:a4:31:96:e1:fa:89:cf:f8:59:83:f0:9e:
1a:53:cc:2f:df:01:62:8a:75:f9:52:b3:07:b7:07:
1e:c3:f8:e9:a3:83:cd:7a:54:a6:3b:74:ad:32:12:
1d:fb:c6:7c:51:ce:1b:54:ab:a4:0c:77:d0:12:18:
73:2e:cc:84:2a:3c:0f:52:43:21:42:ff:2e:d3:d5:
0b:a2:27:84:7c:5b:52:5f:27:71:94:45:9a:48:7a:
c1:9a:2f:88:8e:6c:52:b3:95:a5:34:38:cd:21:87:
39:d3:92:ea:1e:c4:b8:73:8d:c1:05:94:d3:db:b3:
47:d0:5a:8f:77:42:5d:20:c4:b6:1c:06:d5:37:45:
37:2c:f9:05:85:c7:d8:a8:6d:a5:26:f9:79:ce:9d:
b4:5f:e0:f9:5f:aa:3f:11:1c:90:b5:ee:42:29:e2:
78:0e:d4:bf:6e:cc:b5:0c:88:cb:c6:52:ea:e4:4d:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C8:A4:2D:CD:40:6A:E3:5B:1C:14:61:D7:7B:99:19:F4:B8:32:FC
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:ca:dc:e3:8e:a8:2b:80:53:52:f6:55:ff:a2:65:68:7c:3b:
11:3a:2e:b4:d9:f8:7f:79:5b:8d:ef:23:a5:8b:bc:5f:ba:1d:
5d:d9:75:35:e1:df:36:c8:09:df:ab:d3:ac:1c:39:63:b6:b5:
dd:4d:9f:18:77:05:ee:e5:a1:a4:59:e3:39:2a:60:4d:a7:aa:
c5:1d:9a:e6:c8:62:b7:6f:18:99:28:38:04:35:7a:98:fa:da:
02:4b:b5:48:bf:7d:a6:37:a1:ad:55:55:7a:c2:63:49:7c:f6:
04:27:58:91:18:7d:53:ba:5f:dd:6b:b0:f7:41:5b:ec:36:f0:
d7:c0:b7:85:56:db:59:72:fb:7d:8a:6e:80:ae:ef:3c:91:ce:
38:84:07:d8:ad:9b:45:94:39:99:1a:eb:95:a6:dc:36:b5:57:
7e:13:65:51:dd:e9:2b:04:29:62:a3:d7:76:be:c6:25:20:fe:
e2:fc:68:3c:3a:78:92:de:8a:36:b8:11:d6:18:93:5b:73:55:
02:30:4c:0d:e7:60:21:a4:2b:a2:27:9a:69:c6:a0:c2:be:36:
f5:cc:97:c8:d6:72:91:e4:5e:1c:22:81:6c:94:34:3e:c4:6a:
8d:27:06:3b:16:07:1d:5f:93:29:90:e4:18:af:df:40:8e:ff:
bb:db:13:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:03:23 2026 by rpki-client