Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File: u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier: KOOeA1YsVhvRTHTFdzBqhw2d/9BeARBpHDbwlTZf/T8=
Subject key identifier: 2E:7F:77:FC:EE:C4:A0:B2:56:5B:7A:0E:B8:78:04:02:96:D2:6E:D7
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial: 019F85315EFDC532F3BB0B682D8D3E77A624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 15:00:33 +0000
Manifest this update: Tue 21 Jul 2026 15:00:33 +0000
Manifest next update: Wed 22 Jul 2026 15:00:33 +0000
Files and hashes: 1: RxKetbkFR1olWLlhrcubK8yceAM.roa (hash: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4=)
2: sxLxAtHZwjLt62bCzACT8k_EKTs.roa (hash: 1l4e9qeUH7lZXuHCARClU98Z9yuYDrKKJQ+J0TPgdsU=)
3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: UYqI0YxVWUV7NuLdlyNaqmszl+PL3eyGAgYXFrmv9qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:31:5e:fd:c5:32:f3:bb:0b:68:2d:8d:3e:77:a6:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Validity
Not Before: Jul 21 15:00:33 2026 GMT
Not After : Jul 22 15:00:33 2026 GMT
Subject: CN=2e7f77fceec4a0b2565b7a0eb878040296d26ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:a8:42:fc:c9:ea:3d:1a:d5:05:06:09:02:
ec:27:7a:2d:07:2d:fc:9c:3c:c9:d2:77:3c:07:48:
8d:eb:2d:b1:c0:79:0b:7b:7a:bd:d5:38:3b:ff:31:
90:1c:81:f0:04:83:1c:d1:bd:16:9b:01:3a:71:13:
23:34:a7:a7:99:da:44:da:6c:fa:6b:53:66:36:85:
7b:da:d1:dd:3d:8c:36:23:d6:13:92:25:02:9e:f4:
2c:72:d6:e8:98:12:56:fd:57:88:8f:35:ed:9e:3f:
1f:a8:4c:eb:63:08:0b:f4:e1:04:70:ec:f3:7a:b9:
e9:71:ac:9c:1e:90:af:6c:0f:b5:21:0a:1a:bd:e4:
1b:47:13:84:ee:ec:51:12:c4:04:dc:4b:be:17:8c:
b6:ff:63:4c:90:4d:24:c5:9b:c1:da:56:21:28:48:
a1:97:a9:f3:5e:05:bc:8d:04:ac:a7:8b:ed:45:36:
de:a6:a2:39:1d:38:a3:65:c8:c4:f1:f2:2f:ac:54:
9d:32:61:20:19:39:a1:7a:cd:9a:80:6a:77:85:a7:
c6:90:1b:83:47:0f:f3:65:1d:12:9f:a4:1b:29:6c:
5e:61:87:5d:c1:38:c5:3d:df:49:60:4c:42:19:7f:
3a:63:03:eb:76:d7:5a:52:e8:e7:03:ac:bc:61:03:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7F:77:FC:EE:C4:A0:B2:56:5B:7A:0E:B8:78:04:02:96:D2:6E:D7
X509v3 Authority Key Identifier:
keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:70:95:3d:32:05:f2:3d:5f:53:65:6a:7a:fc:3a:eb:55:2d:
90:9c:2f:d1:fe:aa:f7:c4:ac:b6:74:b5:ae:87:bb:15:5a:3c:
fb:4e:4a:52:85:20:8c:4c:8a:08:d2:b4:6e:69:f3:b9:4a:85:
ef:81:39:1e:33:7e:53:15:bf:6d:c6:04:d0:92:2e:a8:aa:ea:
69:ba:da:9c:10:05:b5:9f:ad:22:11:e2:77:33:fd:9e:36:31:
94:bb:3c:32:db:d1:af:3d:43:a7:f3:e3:21:27:d6:4c:1b:5a:
8d:ef:9c:45:60:c1:95:09:d4:e5:f7:a3:10:9e:ec:3c:ad:56:
e5:16:89:8b:9d:81:ee:be:9f:f5:e4:d1:18:0e:3e:6b:36:4e:
53:74:ad:a4:ed:24:f2:52:7a:b9:54:4a:64:2f:a3:19:83:29:
56:5e:f5:90:78:82:b6:8a:7c:01:8f:d4:f4:3f:62:93:61:47:
30:2a:ac:1d:79:a7:80:a9:02:1c:d6:67:72:35:3d:07:67:84:
ac:64:ca:bb:6c:bf:82:30:ad:68:06:df:2d:ea:80:b4:6f:32:
25:26:02:11:e4:9c:af:4e:6a:23:0e:15:78:1d:30:46:05:68:
1e:77:49:86:e1:31:6d:06:46:67:a4:bc:af:2d:90:84:53:78:
eb:d0:31:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:06:24 2026 by rpki-client