Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
File: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft (raw, json)
Hash identifier: WQslmVGC8zMv6beoSbcbAQEwE6jlyDgk0gSZso53z6s=
Subject key identifier: 43:7E:68:9E:8A:44:65:AD:B3:F0:DF:AA:91:AD:7C:86:E3:57:FC:53
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 019E5712E486A1FF972A75127B9EC2EF0931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
Manifest number: 1924
Signing time: Sat 23 May 2026 23:01:56 +0000
Manifest this update: Sat 23 May 2026 23:01:56 +0000
Manifest next update: Sun 24 May 2026 23:01:56 +0000
Files and hashes: 1: 6E55Dxslc1xUwoydNHNZM4ZExZY.roa (hash: sNvH8Do1xMuJUTpDkj9TMIXCGe+B5BVTB4O2xk57j68=)
2: RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa (hash: 6bNU9Qy7gfD16SLkxQ7XrFRbn1WRdrTIHlp5cBAhhLU=)
3: u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl (hash: LMEGmInOTFDABbEqWjZXBOU97Ur6kBjBNf3SIFKPsxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 May 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:57:12:e4:86:a1:ff:97:2a:75:12:7b:9e:c2:ef:09:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: May 23 23:01:56 2026 GMT
Not After : May 24 23:01:56 2026 GMT
Subject: CN=437e689e8a4465adb3f0dfaa91ad7c86e357fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:28:0d:a7:34:f3:ba:d3:53:ac:63:c6:cd:
78:82:54:cd:00:6a:38:ad:f1:ae:2b:8a:5b:fc:e8:
78:47:3b:e1:78:1a:a2:a5:1d:2d:a3:23:4f:06:1d:
42:b9:6d:f0:11:3e:f7:9a:2c:cc:60:11:1c:7c:6c:
af:d0:71:15:bd:24:64:36:a8:c8:45:43:65:30:74:
25:6b:58:32:cf:83:97:43:55:fd:96:0c:85:20:94:
02:fe:95:a0:b7:fd:8a:41:b5:3a:cc:f5:c4:81:02:
da:01:71:4b:f0:60:0a:26:24:0a:d9:4f:e8:1e:46:
96:d4:1a:cf:0e:45:e0:23:be:c4:f9:08:fa:0a:8f:
de:84:fc:71:22:35:5b:71:54:a7:6c:97:51:5e:48:
6e:c8:e6:52:e3:84:c1:82:10:65:d5:01:21:0d:22:
6a:46:67:b6:8b:0e:c7:33:70:fd:9e:ce:b5:24:ac:
06:99:ca:fb:ff:aa:55:48:8f:13:88:46:c0:8f:1b:
64:ce:15:0a:57:7f:99:b1:f3:80:20:0c:23:e9:bf:
77:ba:22:71:0b:02:72:b0:c0:08:8e:1e:54:ea:c1:
fc:02:10:67:a2:87:31:bc:06:31:36:0c:f1:c8:65:
49:54:2c:d8:52:3f:8a:7c:66:40:6b:22:c7:eb:ae:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7E:68:9E:8A:44:65:AD:B3:F0:DF:AA:91:AD:7C:86:E3:57:FC:53
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:4d:93:0d:2b:2b:4d:97:a2:1e:ad:75:3e:d5:78:b4:0c:
60:5b:f6:1f:b5:dc:97:aa:7c:4a:e0:da:23:19:ab:df:70:c4:
59:d7:75:56:a3:07:ec:5d:29:df:2a:ed:af:68:bc:69:37:84:
01:3e:c7:75:ff:79:1e:06:95:69:73:0e:81:88:8c:51:77:d7:
d0:5b:95:c6:1c:91:5e:1c:7c:0e:66:a7:b2:f8:09:36:c3:a5:
48:0e:95:39:c8:a5:62:3b:4e:4c:49:36:89:2c:aa:d0:13:93:
b8:27:1a:e8:56:04:b2:bb:00:73:07:b5:3b:63:2d:37:9b:62:
4d:76:66:f9:1f:67:e0:e5:92:a4:fc:ca:03:cc:56:4a:ea:65:
2d:9f:16:f2:4c:fe:54:55:4f:4b:12:6f:51:27:09:52:28:a8:
ef:63:bf:8a:c2:6e:4f:2c:a9:45:d1:35:2d:d8:96:61:19:7a:
4e:a5:90:96:ec:4b:9a:7f:b4:cf:f2:62:81:22:1a:0e:c7:6a:
17:ca:04:c8:9b:e2:36:80:fb:4c:db:5a:f8:e6:27:77:6a:8f:
f5:2c:37:eb:4a:f7:a0:eb:5f:a5:69:23:95:51:c6:fb:a4:ae:
16:38:f3:28:9c:1a:ac:cf:02:63:80:84:99:73:01:8a:a9:34:
98:49:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 04:38:03 2026 by rpki-client