Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: qtXiMD3k1wX7sJH0/A/aURMYfQGPP8zyTeBCdMVweIU=
Subject key identifier: 4E:83:35:F9:22:65:86:34:41:7B:13:99:4F:15:B5:5E:6A:65:3A:AD
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019E314E7BE39F9CB8EF3C2EFDB1BE575226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0DB1
Signing time: Sat 16 May 2026 15:01:27 +0000
Manifest this update: Sat 16 May 2026 15:01:27 +0000
Manifest next update: Sun 17 May 2026 15:01:27 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: bGmJmLWcniWZHG8NGY8Z1EDtrkYwajptfkKbkaEBteU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:7b:e3:9f:9c:b8:ef:3c:2e:fd:b1:be:57:52:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: May 16 15:01:27 2026 GMT
Not After : May 17 15:01:27 2026 GMT
Subject: CN=4e8335f922658634417b13994f15b55e6a653aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:a2:bf:d6:b4:00:d5:85:21:e9:45:7b:ba:
f3:54:fa:17:66:d6:e1:d2:bc:1c:c1:ab:b9:da:d0:
65:c5:7a:ee:a6:dd:12:0a:aa:1a:9b:45:d5:65:d8:
2a:b5:85:50:a3:27:8d:9e:35:be:f7:ff:c0:4e:95:
b4:ac:ce:9d:50:2e:38:a0:7c:2b:0d:12:cd:06:7d:
fc:b0:26:82:22:dd:8c:fc:c0:b7:82:f5:e4:47:4c:
d0:20:28:62:d8:4c:4d:8d:ec:c5:25:07:1e:a2:50:
d6:fb:10:9e:ee:73:5d:e7:3d:a9:62:7f:1c:e8:ce:
df:ec:8a:aa:7b:64:b9:ef:86:57:ec:3c:52:c7:22:
0f:4e:ca:bb:2e:53:3c:07:f6:f9:82:2f:cc:2c:fa:
de:3c:64:f3:0d:17:7a:14:ee:21:0f:30:86:3a:b0:
99:2c:c6:ce:75:f3:00:f2:a7:fd:af:3f:72:e1:a8:
c8:e2:0b:bb:17:1d:81:92:e5:5a:5c:1e:91:f6:6c:
d9:fc:00:51:7a:18:d7:df:78:a9:8c:05:cd:ec:a2:
3d:68:55:de:4f:3a:17:d4:ef:4f:25:81:ef:7d:2c:
8a:dd:dd:e8:ca:1b:6c:74:8e:22:e3:81:a2:ea:29:
22:18:d1:eb:28:89:95:cb:72:22:60:3a:1b:36:32:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:83:35:F9:22:65:86:34:41:7B:13:99:4F:15:B5:5E:6A:65:3A:AD
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:be:89:ea:5d:25:fd:2b:b7:70:17:5b:72:10:76:f2:b0:6e:
b9:bc:29:94:11:bf:12:05:33:33:55:ba:9a:f7:a7:b2:4e:c6:
0c:1e:9f:30:ec:a4:b3:eb:68:02:e9:c1:29:71:fa:b5:57:81:
6d:fd:17:36:56:67:d2:eb:eb:0e:a8:de:33:ae:fb:fe:62:df:
91:18:43:d2:cc:06:84:d2:52:72:8a:39:1f:6c:27:27:c6:68:
ac:46:3e:be:2a:3d:d4:4e:df:1f:22:f2:aa:ec:69:9b:93:89:
8b:24:5c:0b:0a:7d:a7:83:24:68:1c:6e:10:dd:8e:fa:e4:49:
a2:7f:5d:84:c8:67:55:01:46:6a:ad:1c:16:86:b8:64:c6:ad:
30:e2:65:72:0e:16:a7:92:c0:d2:69:48:52:33:f4:b5:8d:86:
8c:81:14:57:6b:1e:3d:40:6e:88:f1:91:ff:7a:2b:70:98:e7:
dd:19:df:d0:66:a6:c7:0f:56:b5:c3:31:83:7a:6f:25:09:74:
ee:33:1d:20:b6:f9:84:d9:d6:8d:ba:53:fc:75:dd:3a:a5:92:
c8:7c:8f:0d:a4:76:b2:4f:0e:c2:89:c1:30:46:62:42:d9:c3:
1c:6c:99:ec:ea:5b:f9:cc:d1:14:de:1c:3a:e5:2b:ec:25:5d:
5b:97:67:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:30 2026 by rpki-client