Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
File: u9hLxE29pbq_xJQLzMFjXhU7JLY.mft (raw, json)
Hash identifier: jb4GSJzDoQjKf5qz3ZLWrhxQWGVp2TCQX0h2zbSHBF4=
Subject key identifier: 45:81:D2:CD:E5:3E:97:9B:11:7C:7E:B7:3A:4B:A5:CA:79:DC:88:CC
Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Certificate serial: 01A0EB1C44A5D06185E285BBCDD2F4CD6A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
Manifest number: 0454
Signing time: Tue 29 Sep 2026 03:01:33 +0000
Manifest this update: Tue 29 Sep 2026 03:01:33 +0000
Manifest next update: Wed 30 Sep 2026 03:01:33 +0000
Files and hashes: 1: 1-jZ-qYLqAhIwiPph5e3gFUMb5nQ.roa (hash: GrViIOEvWT4Zxt5MGwjrExDSBv8BFYP8ZQ7BXiEbrRA=)
2: EOBtHTjA0ZDsrADWjmriNqh0ee4.roa (hash: TxDODlaafoC1OYemDEfnXQw9tVDBB6F8dgEKF8cHaBQ=)
3: IF-dQIrNICfVhG9zO_nJPALR-dQ.roa (hash: 28voGBv/WZH5Cfsgew8XwJMKo8y9ShAkKaFAqMfu7Q4=)
4: MQH_dvgH12yVjtMmNX5zhHNaJNM.roa (hash: gE1pNkt0EIY5xF4y1Y6FsY5jWZyScuncAkQ397qfFGg=)
5: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (hash: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E=)
6: _9OTnWhfptNmahMwIUd6M8KUigY.roa (hash: gOfBWU8NyLveB72fRV3TQVbWthwb/Lqj0yi3WTcOUM4=)
7: u9hLxE29pbq_xJQLzMFjXhU7JLY.crl (hash: XoFqT9Se8E2vFXeU4yxbrI1lj/hFnFsTEP0YrQE+rh4=)
8: yp_V2SDm61CRWvjnGT6m5_yIOPI.roa (hash: bpOGJYyMnTqmj9p+ne0ebzB6DmKNjVReNZUhs0YS4n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:44:a5:d0:61:85:e2:85:bb:cd:d2:f4:cd:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6
Validity
Not Before: Sep 29 03:01:33 2026 GMT
Not After : Sep 30 03:01:33 2026 GMT
Subject: CN=4581d2cde53e979b117c7eb73a4ba5ca79dc88cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:75:8c:05:48:18:39:5c:3b:30:78:91:54:
b6:95:b2:a2:ad:a2:6c:37:b4:21:fc:a8:1a:8c:07:
db:61:0c:70:92:53:74:cc:1f:ab:63:83:34:95:15:
b7:65:3a:20:87:0b:19:15:fb:17:5a:3a:b8:f3:c7:
3a:ad:6f:51:dd:cd:35:b5:64:a1:18:64:41:61:7c:
a3:35:6b:e1:96:a1:34:07:29:5d:2b:30:df:3e:42:
e7:66:c7:45:27:ca:44:7c:37:3e:c5:e8:b0:11:35:
c9:2e:32:e5:c1:ad:3e:9e:bc:02:c5:44:54:2f:0b:
d2:86:06:ff:cf:2e:99:64:8a:6f:00:86:85:45:6b:
5b:d8:42:ac:f4:7b:ae:9d:38:94:97:ba:ac:45:f0:
ba:2a:6a:a4:7a:ac:fb:0d:04:44:b5:20:ca:c9:9c:
54:66:df:60:69:43:c8:a5:ff:80:f5:82:bf:b0:3a:
19:e9:f6:6f:ce:71:a3:9c:20:ab:b8:e2:0e:60:65:
6c:93:50:55:62:2a:5e:79:81:55:9f:74:e3:c0:9c:
ed:b9:c7:73:9c:58:9b:38:14:b1:91:7a:c1:fa:e6:
82:bc:24:0d:cc:ab:85:c4:a4:ef:64:2c:a1:4f:31:
47:60:b1:e8:af:f2:37:2f:eb:5f:73:bb:44:e8:e2:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:81:D2:CD:E5:3E:97:9B:11:7C:7E:B7:3A:4B:A5:CA:79:DC:88:CC
X509v3 Authority Key Identifier:
keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a7:66:c5:1d:a3:c3:69:4a:81:1c:6c:aa:b7:85:35:de:67:
ed:bc:7b:ec:91:66:eb:24:be:25:57:c9:ac:c0:5f:c6:71:cb:
44:17:2b:a9:0a:ee:a2:e5:95:85:04:86:e4:d2:4c:92:b4:6d:
53:8e:77:96:1f:b3:90:ed:b5:f8:6d:1f:50:2f:6c:9f:c5:55:
7b:6d:9c:9a:aa:ad:14:8f:41:0f:85:3a:07:2b:7d:ec:79:ac:
70:3e:13:f2:86:39:36:a1:09:a4:a9:f6:8e:19:ee:40:de:4b:
25:b8:cc:f3:8e:de:75:27:c8:19:7f:23:85:7b:81:3a:cb:10:
93:27:a2:1e:37:cb:14:32:12:62:52:34:ed:04:10:ca:8c:1f:
12:aa:d5:c0:39:0b:33:72:8c:71:e4:6e:b7:62:7d:34:cb:9f:
0b:ab:32:29:21:9d:35:8c:54:d4:01:ad:17:22:05:cb:c2:b8:
92:61:87:4b:3a:f4:fb:20:ce:f9:8f:10:be:2e:34:a1:41:fd:
b3:39:76:38:39:55:88:52:c0:45:07:99:28:31:8d:95:09:dd:
be:6f:28:82:e3:4d:31:c1:ef:a0:45:9d:99:20:1d:bd:63:35:
7f:ef:ef:95:13:fe:d4:c2:01:98:8a:8a:41:e6:1f:90:da:9d:
bb:6e:40:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:37:54 2026 by rpki-client