Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
File: u_5CyzDD1Jb5bxHtk890NhcIx-E.mft (raw, json)
Hash identifier: qPIIr8nIaRRxx8ODq20pUv8E7AVkkIEaT+UHSHPZIaY=
Subject key identifier: AE:96:D6:60:80:F1:97:E8:2B:A9:7D:60:BE:AB:76:D3:B1:FA:9E:E4
Authority key identifier: BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
Certificate issuer: /CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Certificate serial: 019D3789354561DC91E2991DB3F8183AAC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
Manifest number: 0926
Signing time: Sun 29 Mar 2026 03:00:31 +0000
Manifest this update: Sun 29 Mar 2026 03:00:31 +0000
Manifest next update: Mon 30 Mar 2026 03:00:31 +0000
Files and hashes: 1: iUvtRGtEdXyBoro2Kl3Jgw2lwf0.roa (hash: 0GjE/GSpKOrR5lJaIX0JhjgnY5INn+Q+Cz2beD9Wkrc=)
2: u_5CyzDD1Jb5bxHtk890NhcIx-E.crl (hash: dvaSA/oF6ly6xO966X44s38F31fwN0RcmVhj4Ny8GqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:35:45:61:dc:91:e2:99:1d:b3:f8:18:3a:ac:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfe42cb30c3d496f96f11ed93cf74361708c7e1
Validity
Not Before: Mar 29 03:00:31 2026 GMT
Not After : Mar 30 03:00:31 2026 GMT
Subject: CN=ae96d66080f197e82ba97d60beab76d3b1fa9ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:77:94:98:15:cf:40:03:30:13:a0:72:e0:
9a:b9:e8:41:9b:1a:dd:df:28:b2:46:a0:ee:a3:ee:
32:9c:9c:dd:3b:cd:45:47:03:2d:43:3d:58:80:25:
8a:24:ff:8a:d6:ae:53:3c:99:e2:1b:42:bf:4e:ab:
82:11:b6:d1:a1:a7:0a:58:fd:58:b5:c1:84:c4:4c:
57:27:2c:2c:a5:be:28:13:c6:5d:cb:80:7a:dc:8e:
a4:25:5e:bc:b7:d5:07:03:f5:a3:b3:66:93:ac:fa:
56:08:c9:ae:71:52:76:66:14:6f:d0:d0:35:7f:ba:
27:dd:39:77:46:bb:5b:96:87:11:d8:97:f7:05:26:
72:fd:c1:08:54:89:b3:93:7a:03:e8:7a:d4:03:0b:
21:e9:0e:58:d5:d7:d1:66:c8:0e:19:c1:f7:da:36:
9d:84:ea:a8:91:40:e7:56:66:20:bd:af:57:2c:49:
3d:8c:1d:bc:02:22:e4:eb:3e:73:51:d3:d2:bb:6b:
a5:c9:16:d5:d8:b8:54:62:7e:4f:ae:56:3c:38:9a:
1f:8f:b6:24:6f:06:5e:f1:11:6c:4c:6b:11:70:6f:
76:aa:9b:3f:05:41:3d:e0:e1:ea:0d:bd:a3:59:03:
50:72:40:c8:0d:1b:2e:70:ea:61:37:b6:4e:89:3c:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:96:D6:60:80:F1:97:E8:2B:A9:7D:60:BE:AB:76:D3:B1:FA:9E:E4
X509v3 Authority Key Identifier:
keyid:BB:FE:42:CB:30:C3:D4:96:F9:6F:11:ED:93:CF:74:36:17:08:C7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_5CyzDD1Jb5bxHtk890NhcIx-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c26a7c-2bef-4abc-a225-f1d11413e18a/1/u_5CyzDD1Jb5bxHtk890NhcIx-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0f:b5:67:0d:3e:e6:eb:03:9d:0c:20:f4:14:f7:d9:93:8a:
bb:f7:f0:6d:60:11:73:81:00:c6:d0:e7:4d:f4:3d:de:bf:80:
ac:68:4a:c3:b6:19:8e:ba:ab:72:b5:07:ea:69:8c:91:56:54:
d5:5f:f8:7d:dc:a1:a3:89:6d:f1:84:56:71:bd:cc:93:43:87:
5e:ab:57:f3:3d:42:76:ee:e6:dc:9c:9a:46:17:1a:f0:f6:46:
53:29:68:61:14:dc:ec:9d:66:9b:33:b7:20:7b:a3:de:d1:33:
4d:27:ba:f5:5e:dc:16:46:bc:f0:95:3e:3e:d3:4b:03:4b:56:
17:79:08:7f:f2:f7:02:c5:af:af:9b:a3:2b:8b:76:73:ef:bd:
ca:43:97:f4:92:16:4c:1b:cb:2c:07:b6:5e:2a:f4:1a:ca:1f:
a6:d1:4a:9f:ac:83:e0:19:ab:65:53:65:b3:11:8e:f8:61:35:
02:84:cd:39:ab:bd:df:46:5a:4e:37:cf:82:8e:a3:ba:c3:0d:
78:b3:69:f2:74:f2:9f:c1:c6:a9:63:bc:23:ae:b2:39:05:31:
b8:75:a9:a7:4e:7f:67:d5:51:3f:bc:07:8b:2c:1b:9a:b7:54:
35:5c:1e:ca:d0:16:ef:8c:1b:b8:c5:1a:02:01:98:cd:ff:67:
c5:cd:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:14 2026 by rpki-client