Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
File: u-kI6KPgpa192pXAYThTfWbqo0E.mft (raw, json)
Hash identifier: tlSzysYKDBotRnoAeXtfGwuRJqobd6I9uLlkvu9pzEo=
Subject key identifier: E1:3C:D0:BD:CE:39:83:26:0E:F2:3A:A4:FE:9C:70:0F:05:42:9B:04
Authority key identifier: BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
Certificate issuer: /CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Certificate serial: 019E31BC2CB11D6F3CFE4ADFE09C0BF773B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
Manifest number: 23
Signing time: Sat 16 May 2026 17:01:16 +0000
Manifest this update: Sat 16 May 2026 17:01:16 +0000
Manifest next update: Sun 17 May 2026 17:01:16 +0000
Files and hashes: 1: VnSCYq6QQmv1dE1dnE9cYopj4go.roa (hash: FEXjLTkNb7gfw7oBQ9cLz74ByuIdmIEBC39hpvpBVm0=)
2: u-kI6KPgpa192pXAYThTfWbqo0E.crl (hash: fqGQZoZ245cxilAhahAyv1sv5jkSvXO/WBKV58/OZik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:2c:b1:1d:6f:3c:fe:4a:df:e0:9c:0b:f7:73:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Validity
Not Before: May 16 17:01:16 2026 GMT
Not After : May 17 17:01:16 2026 GMT
Subject: CN=e13cd0bdce3983260ef23aa4fe9c700f05429b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:40:9c:55:60:11:9d:eb:56:b2:e0:44:99:
c2:ce:cc:fb:da:71:a3:ac:d1:69:42:86:b8:a0:d4:
ce:ae:99:df:f4:dc:7b:bc:ff:47:7e:c6:94:39:a8:
ae:d5:f8:d5:cb:78:b8:52:cf:1e:10:ad:fa:bc:d8:
8c:06:6e:76:8b:8d:8b:dd:a7:7e:32:2e:30:c5:3b:
4c:44:e5:86:09:16:60:07:8f:a3:ce:9c:79:bb:c1:
3d:65:1b:3f:70:9e:c3:d6:05:82:94:ef:06:45:ec:
71:93:2e:97:f9:4e:00:05:ae:cb:e3:51:d4:92:bc:
c1:9d:be:2e:7a:43:d8:c8:7d:be:9c:28:c0:b2:83:
68:e9:13:00:26:5a:a1:52:27:e1:23:f6:8f:93:d2:
54:56:7c:41:db:a5:5f:78:b8:e0:f0:ac:9a:d0:b8:
55:8c:ab:54:98:e4:a6:95:89:6f:9c:d1:c2:c0:33:
05:0b:43:50:e6:26:6d:58:46:72:96:a6:6b:ea:e5:
37:2f:72:43:ab:22:ce:ce:6f:cf:2c:74:a6:00:28:
6c:b0:b2:ea:8a:39:42:d8:63:cc:58:75:a4:28:75:
d3:c9:88:4f:63:80:c4:ec:65:3b:86:72:d4:0c:55:
d5:39:31:ad:18:3a:fa:ce:ab:ab:cd:51:1f:8e:20:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3C:D0:BD:CE:39:83:26:0E:F2:3A:A4:FE:9C:70:0F:05:42:9B:04
X509v3 Authority Key Identifier:
keyid:BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:bf:86:59:0a:b7:bc:97:e9:02:1b:32:b3:08:ca:62:22:
9d:1d:97:db:bb:d1:ac:4a:90:aa:d4:3f:cf:8d:e1:64:71:dd:
7b:86:06:29:88:96:39:a4:42:39:ea:1f:73:5b:b3:94:c9:54:
8e:61:62:c4:6b:2e:e5:d8:19:5b:4e:51:7a:44:a6:55:f5:89:
48:b7:9b:e3:82:c0:1b:74:6e:4c:70:e3:07:ed:91:06:1b:a2:
3d:5e:c1:46:66:e4:d8:0d:bc:5d:f0:27:df:44:a4:b8:eb:98:
12:bd:07:22:32:95:7e:e2:29:b7:2c:29:6d:c5:1f:c6:5a:c2:
d0:28:27:0f:78:2a:1c:7e:42:1c:49:e0:c9:9d:21:75:c3:d9:
47:99:33:60:55:f3:a4:b0:c7:8c:5d:db:1b:db:69:01:38:2f:
91:b3:51:e7:9c:05:b1:90:d2:fe:69:a0:28:8c:28:7e:bf:5f:
8e:b2:4b:09:40:02:3c:97:62:c0:60:e6:2e:9b:6c:dd:b3:57:
39:4f:2d:7e:65:1d:d6:d0:fc:d1:f2:e3:1f:37:15:93:3c:a6:
9b:31:d7:c2:fd:42:3b:80:ff:4d:ec:9f:d2:7f:6d:d6:80:38:
52:32:55:3c:09:80:49:8e:67:3e:cf:af:23:da:44:a2:79:45:
26:1d:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:59:18 2026 by rpki-client