Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: NiTpPbu3MdCihGj7TCh9hjuZQFpQpfrJHGmzco7ojuM=
Subject key identifier: 46:34:01:FE:0D:04:3D:6B:55:BF:4E:5E:C5:BD:9F:A0:CA:6F:ED:32
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 019DCFAC78FB994EB930F123971F0CEE9BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 07DF
Signing time: Mon 27 Apr 2026 16:01:19 +0000
Manifest this update: Mon 27 Apr 2026 16:01:19 +0000
Manifest next update: Tue 28 Apr 2026 16:01:19 +0000
Files and hashes: 1: AZMCEzr7sQUflIjUGb4dyJfXWkE.roa (hash: tLGKtI9IlbDmLitqyc6zJTxWyS6ivdCRkCF6bD5jbY0=)
2: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: aN4zKStfQR+YZvJXOBuL0WEB4DMmfsaxKfdS5Mm4yuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:78:fb:99:4e:b9:30:f1:23:97:1f:0c:ee:9b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Apr 27 16:01:19 2026 GMT
Not After : Apr 28 16:01:19 2026 GMT
Subject: CN=463401fe0d043d6b55bf4e5ec5bd9fa0ca6fed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fd:79:b4:c2:fc:a6:98:5a:ee:67:8f:47:fc:
86:f5:6f:14:73:7c:1e:b1:7d:86:14:7b:b1:e0:62:
48:ae:f2:b6:7b:48:e7:e9:6e:50:aa:ea:9e:ae:b3:
11:5a:fb:a6:32:f4:d9:75:ec:49:23:18:0e:dd:e2:
33:51:ee:33:87:40:80:2f:95:2c:85:99:4a:b7:32:
1f:d1:9b:54:21:09:2c:42:66:7a:9d:79:9f:8e:40:
88:3b:22:93:b0:0e:6c:74:79:51:9b:36:8f:20:4e:
fb:dd:7b:68:6d:57:b4:fa:76:49:cc:75:1a:3e:b9:
be:1b:af:c3:8e:57:e1:62:a1:23:2f:20:03:e0:0a:
5b:27:0c:c3:55:48:a7:ba:7a:9a:2b:bd:0a:16:64:
14:0b:15:f0:d1:27:16:e8:83:7f:7b:77:6e:88:22:
df:0a:06:7f:5b:3a:78:06:64:ae:5c:6e:18:38:9e:
98:e8:c6:50:89:d6:f4:cb:12:e2:62:ba:7b:ec:5b:
66:59:d1:5d:28:ab:4a:4b:a9:fa:13:8f:31:7e:77:
78:b1:ce:bf:32:80:56:a0:b1:6e:fe:c0:c6:91:e6:
ff:d7:81:65:20:65:59:bd:c7:f9:a5:35:6f:8f:07:
bf:c9:36:f8:fc:97:39:87:22:00:14:c0:fa:b7:79:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:34:01:FE:0D:04:3D:6B:55:BF:4E:5E:C5:BD:9F:A0:CA:6F:ED:32
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b7:7e:58:e6:08:1a:a7:ff:e9:6a:b8:9d:a1:45:49:bc:5a:
8f:d3:f1:f9:6a:aa:c2:ac:e1:4d:2f:79:ce:31:01:d7:34:7e:
98:c3:66:fe:72:27:02:1a:8d:6c:88:d5:f4:21:b7:f1:a5:08:
cd:c6:0a:cc:27:16:8e:f8:f3:79:61:71:bc:53:2d:97:c0:81:
ad:23:46:b6:de:57:ba:9c:cd:e5:1e:9b:9d:23:5f:40:45:97:
26:cd:51:6e:21:40:f1:ae:d2:13:d5:9f:48:7c:55:a6:2a:a3:
87:c2:4a:29:52:d7:ae:70:25:0f:8c:89:85:8f:6e:a4:59:a5:
58:e5:a3:87:0a:67:cf:51:06:a6:56:4c:82:f0:70:e2:3a:2f:
23:41:84:01:4a:2e:15:4f:a3:80:d5:4a:17:ca:0b:cf:ff:12:
d7:2b:f9:f3:80:2b:cc:35:4f:5d:70:6d:30:5d:e0:40:21:35:
82:65:4f:3c:9a:d4:bb:0c:e7:9e:73:57:98:b7:17:01:84:06:
c0:27:4b:9f:1d:80:c9:cb:df:e5:d4:2e:51:2c:7d:b4:67:33:
b4:0d:6f:48:3c:c5:3b:0a:d8:72:18:40:3b:52:53:fc:3b:b5:
7a:00:83:c1:67:84:bf:65:a8:2a:47:00:63:e5:95:31:b4:d7:
ac:a9:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:52:06 2026 by rpki-client