Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: WQQel3POfEfS2/n696yh6tUfkxJEdtHq9u4z/HWEpho=
Subject key identifier: 27:BA:FE:AA:2C:A6:A2:FE:A7:F8:C4:67:E4:43:34:1F:88:9B:30:C4
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 019CE523EB93E383BB32615B9C58BF4314CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0487
Signing time: Fri 13 Mar 2026 03:01:02 +0000
Manifest this update: Fri 13 Mar 2026 03:01:02 +0000
Manifest next update: Sat 14 Mar 2026 03:01:02 +0000
Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: suQ0YdsbK0/YuqftJh9QSAp3t0n1Jwt66uubcgJZkcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:eb:93:e3:83:bb:32:61:5b:9c:58:bf:43:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Mar 13 03:01:02 2026 GMT
Not After : Mar 14 03:01:02 2026 GMT
Subject: CN=27bafeaa2ca6a2fea7f8c467e443341f889b30c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:35:fa:55:f1:41:30:eb:5b:44:4e:d0:f2:
6b:a9:74:bb:41:fb:36:98:86:ae:93:40:48:09:35:
a4:90:98:a9:6f:6c:4c:41:57:b7:f2:4a:42:8e:c4:
c6:e7:be:61:c7:79:08:84:2e:04:7b:e7:25:d9:12:
f8:7b:76:0e:d1:7c:a2:b4:1a:21:8b:09:01:84:55:
37:6f:1f:4b:a6:1d:d3:cd:eb:7c:8a:33:3e:9b:7f:
ee:82:91:80:b6:bb:3a:14:bf:1d:1f:6b:ec:2c:f9:
2d:6b:74:a2:51:c0:86:45:a3:42:d4:a2:b8:ab:2b:
26:77:42:e2:e1:b2:c4:a2:3e:4d:b5:66:fd:01:04:
3d:db:98:5d:32:61:2b:bd:9f:90:c6:52:c5:ff:27:
6e:d7:d8:12:24:17:f4:54:17:85:86:81:15:f1:44:
00:0a:d8:6a:db:4d:6d:57:97:29:41:9a:57:15:e6:
7f:14:ba:01:01:a9:24:c9:85:cf:e1:b6:f4:79:dd:
a8:9e:54:13:24:02:75:66:37:27:64:cc:4f:c8:44:
b6:c1:d1:6f:91:95:c6:13:06:02:80:e0:33:09:c4:
39:08:04:ff:e9:7a:f7:ae:c5:21:1d:03:55:74:fd:
e5:10:95:c6:90:23:c0:92:4e:07:41:32:94:9f:f9:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BA:FE:AA:2C:A6:A2:FE:A7:F8:C4:67:E4:43:34:1F:88:9B:30:C4
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fe:7c:4e:00:22:a9:01:f8:63:74:30:f9:13:4b:85:2f:44:
1c:ae:75:43:6b:3d:93:2b:d6:bf:70:e1:ee:cb:d2:f9:a7:9b:
ca:31:b1:73:63:61:70:9c:c3:64:8b:e0:81:e9:dc:0c:a6:13:
3a:08:5f:d6:bb:d5:cd:1b:fb:00:f9:0c:74:37:f0:f6:83:d2:
04:28:38:f9:be:94:52:55:58:a8:d9:c5:4f:98:fc:b5:82:b9:
dc:c7:b3:b5:1b:44:d5:96:6a:a7:9a:42:cd:94:1c:db:12:2a:
3d:c6:09:d7:83:3b:2b:eb:0a:a8:22:5e:fa:3f:4c:ce:42:54:
a5:e6:44:5e:d3:e4:21:1d:e1:3b:f9:fc:0f:e2:d0:e4:30:46:
42:a6:49:eb:8b:78:e4:5a:b3:be:b6:55:95:62:ee:e5:21:50:
c8:68:d3:c6:34:16:62:5a:9f:ff:ee:ad:6e:03:d9:aa:cb:16:
4c:e5:4f:b5:3d:bf:3f:2d:a6:e2:8a:0f:9e:79:a0:ba:ee:6f:
b7:e7:ae:35:8c:40:98:d6:5e:85:ee:8e:a2:c7:0a:5d:9b:e2:
96:db:de:62:0c:24:92:8a:79:c5:26:cd:17:d9:dc:bd:e5:66:
49:b9:de:2e:b2:71:29:d7:46:a0:0b:91:66:95:ee:ac:44:cd:
15:89:70:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:47 2026 by rpki-client