Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
File: u7w9vRpPIkq4StYJwmgHn7Yktb0.mft (raw, json)
Hash identifier: hUr/8l7YYNeGPHOG5KCwOcj1LTiEhUxf+E5/ZA8log4=
Subject key identifier: A0:04:38:0F:C8:EA:B9:40:42:84:C7:41:07:ED:19:83:89:9B:80:A0
Authority key identifier: BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
Certificate issuer: /CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Certificate serial: 019DCED0C005785E0671DD602CE0978DAEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
Manifest number: 0500
Signing time: Mon 27 Apr 2026 12:01:20 +0000
Manifest this update: Mon 27 Apr 2026 12:01:20 +0000
Manifest next update: Tue 28 Apr 2026 12:01:20 +0000
Files and hashes: 1: SvNmMoOS2D7ABYeycDZExPxmaNI.roa (hash: hAPQtadJ57I6XgA+8LOiB1aW1n0vaUnx78Tugxa2seU=)
2: u7w9vRpPIkq4StYJwmgHn7Yktb0.crl (hash: P7HymUppSVbbgopWv5+5TQmc9fsLZmVXlJ9G0col0c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c0:05:78:5e:06:71:dd:60:2c:e0:97:8d:ae:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbc3dbd1a4f224ab84ad609c268079fb624b5bd
Validity
Not Before: Apr 27 12:01:20 2026 GMT
Not After : Apr 28 12:01:20 2026 GMT
Subject: CN=a004380fc8eab9404284c74107ed1983899b80a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:94:76:87:d2:02:1f:b9:60:3e:3b:a6:15:86:
a6:18:7d:b0:49:ac:5b:60:32:1b:73:59:17:ed:ca:
33:43:4d:db:02:59:e4:a9:95:e6:40:3d:6d:46:e2:
e0:75:9e:02:bb:af:19:e7:e0:cb:f5:59:40:e3:20:
ba:bb:c4:9f:ff:b7:b9:8b:cc:80:9d:86:18:e7:92:
26:d5:25:9b:6d:d4:6e:e0:ac:f3:5e:b0:61:c7:97:
cc:3a:c4:69:77:a0:41:52:28:82:61:38:de:3f:7d:
ff:b1:98:5c:cf:73:cc:28:cd:47:cc:24:c9:d6:76:
63:16:91:7e:e1:da:ed:f5:84:2c:a1:cc:b2:dd:21:
01:63:72:1b:20:3d:d3:b5:5b:3b:95:c5:3d:a7:08:
18:63:16:53:2e:30:86:62:7e:46:51:44:7b:fe:3f:
94:32:a5:97:29:7e:07:61:2e:94:23:db:c8:c6:3c:
7b:53:67:dc:7c:f5:86:f4:58:5b:88:f1:0e:42:3a:
d9:2a:e6:bc:55:29:08:04:ef:43:e4:54:37:7d:07:
ed:99:be:a0:88:6b:03:ab:30:80:7d:20:b7:ad:90:
35:76:02:80:e2:a4:8c:82:01:e5:75:61:47:4f:cd:
cc:e3:11:dd:0c:d9:da:06:d6:14:14:b6:f3:4f:c7:
4a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:38:0F:C8:EA:B9:40:42:84:C7:41:07:ED:19:83:89:9B:80:A0
X509v3 Authority Key Identifier:
keyid:BB:BC:3D:BD:1A:4F:22:4A:B8:4A:D6:09:C2:68:07:9F:B6:24:B5:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7w9vRpPIkq4StYJwmgHn7Yktb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/54b006-6809-441b-84d7-a24cb572298e/1/u7w9vRpPIkq4StYJwmgHn7Yktb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1f:43:4e:9d:b6:82:8a:d6:9a:32:14:0d:9e:c1:c4:88:e7:
29:ac:0f:de:a8:47:cc:e9:8f:79:fb:fe:38:06:e1:73:88:1c:
3a:64:44:d7:7a:8a:b7:ef:9f:56:e1:e0:09:95:b1:b4:4f:36:
2f:d2:2b:28:e6:de:76:8e:93:35:3f:2f:e8:a1:ee:59:31:dd:
23:d8:79:fb:e5:fe:65:ce:98:62:a2:13:b5:22:ea:d7:c6:54:
e1:90:9b:ac:ce:a4:87:9b:ea:ec:f3:d7:ae:58:df:0a:86:90:
b8:a7:90:a6:40:8b:99:2e:ac:14:24:74:47:d4:ea:f5:cb:db:
be:6e:19:64:6d:71:67:c6:ac:99:c7:38:30:17:5e:6c:0c:2e:
aa:6f:b1:98:67:ad:50:98:2c:15:cc:d4:40:46:be:f7:80:82:
1c:5e:ac:06:db:99:03:1e:6c:75:e1:67:9e:e4:42:47:57:51:
35:48:67:07:70:79:92:6f:b7:f7:4c:07:67:12:7d:dc:ea:1f:
a1:05:12:a7:e4:8f:c9:ce:9e:a7:89:d3:63:3a:cc:a3:f2:ee:
79:e0:ea:65:d1:52:ba:95:ae:4d:c6:f0:e7:1d:4f:ca:9f:c9:
ec:33:da:33:a1:bc:bc:e7:dd:21:5e:b3:ee:84:52:e4:79:c5:
a9:43:38:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:05 2026 by rpki-client