Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
File: u6O9sseEb799AIfbRVLus2PfnqU.mft (raw, json)
Hash identifier: cYR1k2ScbxaFxZa6VHAv2gWxMtED7XaqaV89ZhcSo0o=
Subject key identifier: BD:60:EE:D8:21:0E:89:80:0B:0C:B6:EB:80:15:05:87:67:EF:38:3B
Authority key identifier: BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
Certificate issuer: /CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Certificate serial: 019D3909D341AC42D0524DD6EEBB12C5C7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
Manifest number: 022D
Signing time: Sun 29 Mar 2026 10:00:38 +0000
Manifest this update: Sun 29 Mar 2026 10:00:38 +0000
Manifest next update: Mon 30 Mar 2026 10:00:38 +0000
Files and hashes: 1: I7p2CVdLUND1ZRszmGKzKIrLt74.roa (hash: jiBTRZ5olwGDj0RvfZj3FhxYBTormm6OVToMfN4KMps=)
2: u6O9sseEb799AIfbRVLus2PfnqU.crl (hash: MuU6hWZlD7nF4TemvE8Dlg0rXMH8qiSbvlxKiFrSf9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d3:41:ac:42:d0:52:4d:d6:ee:bb:12:c5:c7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bba3bdb2c7846fbf7d0087db4552eeb363df9ea5
Validity
Not Before: Mar 29 10:00:38 2026 GMT
Not After : Mar 30 10:00:38 2026 GMT
Subject: CN=bd60eed8210e89800b0cb6eb8015058767ef383b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:26:12:a4:2e:67:1a:3e:1c:9e:fa:c6:8c:
1e:64:91:dc:64:d7:ec:13:dc:eb:8a:a0:7e:00:04:
01:63:be:8c:94:e6:61:fc:52:69:5b:33:13:f6:eb:
5e:9b:6c:f0:49:ce:64:b1:50:ad:14:b8:7b:cd:ad:
5a:fe:42:ce:89:d8:38:e6:69:a7:06:c9:5b:86:c8:
eb:92:34:bc:95:f4:ca:70:80:8e:9a:2f:83:24:20:
83:19:73:85:c9:22:d5:0c:eb:84:55:e9:0a:5e:c5:
37:b5:b2:13:3b:c9:15:8a:25:6e:13:8c:ef:4b:8a:
51:41:f3:d6:54:3b:d0:82:ec:a9:00:48:bc:1d:bd:
f8:06:9f:f5:a1:16:ac:33:43:fc:dd:57:3d:17:70:
95:1a:49:57:6d:1e:97:3e:ea:8f:1a:ed:16:34:95:
d7:09:41:a0:2d:d2:0a:81:96:01:d2:e3:60:b8:8c:
b2:50:f3:31:96:cf:de:ed:78:6b:9b:0f:2d:f0:09:
91:f8:48:78:fa:91:e6:e3:ea:39:f8:a2:ed:1f:e5:
55:ce:3a:80:4e:fb:8e:b9:1f:a5:99:1d:c5:18:12:
07:59:6e:e7:00:bf:53:40:e9:b8:2d:3e:c9:29:7b:
8a:ca:70:cf:f4:e2:85:6d:ed:49:30:49:a4:fb:64:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:EE:D8:21:0E:89:80:0B:0C:B6:EB:80:15:05:87:67:EF:38:3B
X509v3 Authority Key Identifier:
keyid:BB:A3:BD:B2:C7:84:6F:BF:7D:00:87:DB:45:52:EE:B3:63:DF:9E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6O9sseEb799AIfbRVLus2PfnqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/26d1cb-e1a5-490c-81bc-aa34d1fff387/1/u6O9sseEb799AIfbRVLus2PfnqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:c7:52:da:e8:da:11:ef:3a:6f:84:d0:7a:b3:b5:f6:97:04:
93:68:65:01:ea:d4:7f:20:55:c0:52:72:fd:72:ad:d1:e6:a8:
b6:25:cd:88:0a:d7:bf:72:f9:b1:e7:0e:72:f5:c7:51:aa:0d:
48:c9:6c:ec:c4:ad:3b:84:f2:d6:36:e4:2f:b4:e4:eb:54:b7:
04:5e:b7:c5:cf:b8:7b:68:05:58:20:43:7f:48:af:0e:52:4b:
08:b0:3c:b2:9d:a5:69:c5:ed:5b:0d:ce:b5:72:48:eb:4a:b6:
dd:70:aa:1e:64:5c:b0:79:0d:71:48:d6:ef:b7:4b:99:bc:e0:
89:b0:88:00:9a:d0:1e:34:47:f7:ec:50:50:57:07:56:32:79:
f1:af:ea:4b:07:7a:4c:6a:29:fd:3b:28:60:f8:e3:70:c4:1d:
04:6e:58:2f:c7:94:30:44:e2:49:e9:47:2d:37:93:a9:3d:58:
c2:0f:5b:55:f6:c0:fa:df:52:44:7b:9b:3d:16:39:b8:02:24:
35:a3:50:82:8f:d2:4e:e8:f9:20:12:a6:b5:b6:a3:8a:a6:ad:
89:7e:66:81:59:bc:6b:eb:b6:dc:8f:18:b4:77:9a:1e:f0:aa:
11:5b:61:1f:00:24:18:04:c5:b8:b7:eb:c8:60:29:e8:e4:5d:
f7:81:de:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:13 2026 by rpki-client