Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: SAqmCDdtheboPo1SXK5DVrEvSYC6nTMqLM2tZPnZfAo=
Subject key identifier: 20:63:BB:B5:CD:C8:DB:EB:F1:F3:07:F1:11:27:67:9A:CD:85:EA:AE
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 019FF6B5407BF17A571090CDDA708D46FFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 03D5
Signing time: Wed 12 Aug 2026 16:01:41 +0000
Manifest this update: Wed 12 Aug 2026 16:01:41 +0000
Manifest next update: Thu 13 Aug 2026 16:01:41 +0000
Files and hashes: 1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
2: EOBtHTjA0ZDsrADWjmriNqh0ee4.roa (hash: TxDODlaafoC1OYemDEfnXQw9tVDBB6F8dgEKF8cHaBQ=)
3: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
4: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
5: Zkh4ZmfaD9JYjG7_v9g-jHS8AMA.roa (hash: oc4/VSgUgEbLibJc1Qnqxwv2Di54Dl78E8hpa75m8bQ=)
6: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: O2Hz0PVabD1vD+tpsjdvxzW8pQfPZjbIekgZY9atNnI=)
8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:b5:40:7b:f1:7a:57:10:90:cd:da:70:8d:46:ff:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Aug 12 16:01:41 2026 GMT
Not After : Aug 13 16:01:41 2026 GMT
Subject: CN=2063bbb5cdc8dbebf1f307f11127679acd85eaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bf:01:7f:33:cb:99:a5:6a:66:e8:63:7a:cf:
cb:66:bd:cb:d0:58:12:e2:66:d5:db:24:4f:01:82:
32:db:46:db:4a:55:34:d1:17:9f:93:33:b9:1d:7e:
07:b3:0e:77:8b:c7:bc:9c:35:3a:fc:9d:c7:fa:8c:
c0:2a:c5:3d:e7:5a:de:d8:6e:5f:9e:1b:00:4d:51:
78:89:a0:a1:9d:0f:64:f6:bc:b4:38:e3:78:f5:0c:
0c:31:96:7f:d2:d4:e9:cd:64:e7:24:49:c7:82:20:
d2:14:e1:54:84:07:59:bd:ef:80:57:3a:4a:f7:19:
cb:e0:db:3e:24:57:06:51:95:38:bb:7e:b3:41:92:
db:15:1d:5c:bb:f1:c3:9a:35:18:32:4b:f5:e3:44:
cd:f4:e5:af:8e:4f:af:fb:4a:64:71:d4:1d:af:2d:
d0:53:83:45:b2:be:1a:e9:43:5d:73:17:99:cc:87:
3e:37:6e:ad:9a:3d:db:98:71:bf:7c:5e:3d:f5:f5:
62:7e:ba:b7:ce:b6:d8:6e:43:0e:03:4b:54:24:9e:
2b:77:aa:a4:64:c5:7a:90:e1:73:98:b1:84:95:08:
1f:08:b1:9b:bd:0c:80:6b:c5:1b:45:62:d3:f7:f1:
ff:a0:28:7c:58:b4:3b:3e:cc:be:b5:40:be:d5:5b:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:63:BB:B5:CD:C8:DB:EB:F1:F3:07:F1:11:27:67:9A:CD:85:EA:AE
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:22:18:a9:5d:f2:e4:da:93:69:a6:18:2a:a5:20:1b:dc:e4:
1e:23:b9:f3:26:e0:91:85:6d:80:31:4a:6c:96:24:ba:57:72:
21:a3:7f:df:f2:7a:3b:6f:a8:35:1c:3c:39:01:32:d8:f2:95:
04:c2:f4:38:cd:7c:3a:25:e6:b6:6d:4e:57:88:55:ef:d7:42:
1b:1f:ef:e8:fb:d9:d5:97:36:46:63:f8:b7:ea:17:1e:09:30:
c4:e6:7b:0e:bb:e5:c5:d3:fc:04:39:41:9b:cb:51:e2:6a:04:
68:10:b8:59:c1:3c:63:ca:48:33:4c:79:2e:03:7b:dd:5a:8f:
9a:71:10:55:65:9d:bb:ac:9f:ea:8a:66:22:a2:5b:77:40:57:
8c:7f:51:cb:36:0e:38:74:e4:25:37:c9:54:87:06:ec:b6:04:
5a:4a:cf:f9:13:37:0d:22:e3:64:fd:7d:ec:ac:82:4e:da:49:
86:70:5d:44:b2:28:a5:30:c7:ad:0c:02:20:1e:b2:af:6d:d9:
4b:73:fb:46:8b:f0:8e:5e:c7:a7:9a:70:d6:1d:5b:54:d5:fc:
dc:26:86:7a:76:a4:c3:4c:bd:fb:95:b8:36:98:15:05:06:5d:
79:dc:09:d2:a7:bd:de:98:92:07:0d:63:40:3f:fd:a5:4f:bf:
83:e5:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:16:31 2026 by rpki-client