Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
File: u2L-a389NkMyvNbg2veSJsz4CeI.mft (raw, json)
Hash identifier: 0jZN2FLg5U19ihiOyNISIu3by6hkRs2WEHz7m1fJNHU=
Subject key identifier: 49:94:95:27:27:F6:8D:0A:75:44:06:69:58:98:2B:3C:3F:88:82:1A
Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Certificate serial: 019D389BE059B559EF549FCC51FEDE9028A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
Manifest number: 12E9
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: BpvKKP8EHYFnUrzt21TAjaKhVyY.roa (hash: BVcIxns5J1UEyy8KjfhVvJrapP9On5m6pyzg2XcZJHA=)
2: u2L-a389NkMyvNbg2veSJsz4CeI.crl (hash: ZLx0djhGkhxqser9rXcRtdzhWu2JZjL0Cpk0TJDsKXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e0:59:b5:59:ef:54:9f:cc:51:fe:de:90:28:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=4994952727f68d0a7544066958982b3c3f88821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cb:f5:6d:8e:86:0e:03:ca:5e:16:c3:0b:2d:
4e:52:89:e6:25:01:d1:ea:97:23:f7:06:63:28:a5:
81:03:40:e8:bf:31:b3:bb:99:be:7f:e1:72:35:85:
ab:f3:80:2d:15:e1:e7:5d:ae:d7:4d:8b:2d:e7:a7:
e6:46:11:57:90:89:91:40:72:bc:be:89:6a:48:74:
bb:aa:2e:ed:8c:f0:7b:b0:47:fa:d3:d5:cc:17:7c:
ca:3b:f6:46:dc:25:3f:ad:87:06:5b:ea:2e:f4:f9:
5f:9b:c2:a0:c5:00:6b:21:26:a4:b7:02:dc:46:f0:
3d:4b:f2:ab:bc:8a:42:9c:8b:27:dd:47:7a:af:86:
32:8f:37:f2:53:40:41:0a:92:0e:58:f4:3f:c5:6c:
8f:f3:b9:ab:16:ba:2c:8d:c6:b8:5d:a4:b1:d9:6e:
c6:ac:c8:ee:42:6f:89:2b:39:18:91:6b:9b:bc:18:
a5:f9:81:05:4f:7d:64:b9:52:e1:3c:62:32:bc:4d:
11:85:6e:bf:32:c9:68:fa:79:d0:37:1f:80:0c:17:
35:5a:e9:27:9f:0e:e8:d9:42:f9:69:76:17:07:22:
46:a6:bc:a8:01:85:75:36:4b:15:fd:fe:94:a9:b0:
e8:6d:c7:08:6b:ec:60:8f:de:b9:1b:6c:3f:e2:0e:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:95:27:27:F6:8D:0A:75:44:06:69:58:98:2B:3C:3F:88:82:1A
X509v3 Authority Key Identifier:
keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ba:0f:00:7f:0f:a6:88:0a:86:6e:8a:95:17:15:a9:5f:a2:
6d:31:38:b4:9f:c1:96:18:78:08:54:c0:99:92:31:01:75:46:
9e:05:23:04:71:d1:dd:60:3d:cc:aa:73:88:da:f5:b3:64:57:
73:ac:5b:d7:32:39:61:1d:87:26:a4:1d:0a:ea:c1:21:c6:75:
c4:47:93:16:a8:b9:b5:fd:2c:e9:ae:1e:33:32:ba:21:dd:ba:
5b:a4:b6:ea:85:be:63:53:1b:c2:04:1e:0a:db:38:98:6c:55:
a2:02:5b:e3:2e:d0:d8:59:6d:06:41:8d:c8:7b:c1:bf:d4:ff:
e1:6d:b6:0b:7a:69:3f:60:1b:42:53:3d:2c:68:f3:e1:70:3f:
23:97:bf:e3:c3:d3:4b:d5:69:4b:16:9b:56:fe:95:de:b7:ff:
ab:59:75:37:7d:1a:9f:0f:8a:00:d3:50:6d:fc:6b:5b:b0:81:
27:15:f0:68:22:37:0d:9b:80:46:61:89:10:85:b8:c1:e4:43:
bf:9a:54:f9:1b:72:36:ea:65:b2:8d:f8:87:fb:e3:7d:d5:69:
2f:97:1b:87:7d:f9:e1:20:3c:1b:57:a3:fc:a6:31:08:fc:88:
df:fa:e2:c4:bc:af:6b:3d:6a:17:eb:35:15:9e:3a:f5:eb:70:
ba:47:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:54 2026 by rpki-client