Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: lAtE9hcJWOAeRFK2LDQLOZn3kauClp0fFkxJsQxYrVw=
Subject key identifier: E1:0B:02:45:36:40:99:0E:66:2E:42:10:5E:A0:BC:1A:3A:93:69:8A
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 019DCE993769C5ACF18A93BF9FDAC684B05E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 15BA
Signing time: Mon 27 Apr 2026 11:00:40 +0000
Manifest this update: Mon 27 Apr 2026 11:00:40 +0000
Manifest next update: Tue 28 Apr 2026 11:00:40 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: 9Sg9fM4oZBH7iYT0FMf41dq++5lrruOCPWAhgXq7Fb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:37:69:c5:ac:f1:8a:93:bf:9f:da:c6:84:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Apr 27 11:00:40 2026 GMT
Not After : Apr 28 11:00:40 2026 GMT
Subject: CN=e10b02453640990e662e42105ea0bc1a3a93698a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:57:e1:45:6f:cb:63:6f:41:8e:40:58:99:3f:
67:66:00:ab:92:ac:f7:cd:5d:bb:01:ed:c6:18:67:
c1:05:39:e1:e1:f7:0b:37:97:90:28:72:08:c9:b7:
5c:b4:37:62:ff:6f:46:72:86:45:e9:91:35:a0:cf:
91:61:db:4c:9a:7d:1f:2c:73:30:7f:fd:98:57:ff:
b2:2c:e6:8d:6f:38:72:97:5f:69:27:d4:0e:9c:31:
2d:d2:93:fa:87:97:1e:6c:61:d9:ac:61:1a:6f:d5:
11:3d:14:d6:67:f5:3f:b0:1b:7a:9a:a7:4e:f3:22:
a1:66:f9:3f:03:c8:e8:1d:7e:05:db:66:21:d5:55:
53:9c:bc:44:43:b3:61:47:26:f0:ac:2e:8c:45:12:
9b:bc:1e:f3:ef:71:07:5a:53:19:0e:1e:e1:17:f1:
2a:a0:6e:4c:70:eb:af:e3:51:94:65:47:d9:9b:c7:
aa:a3:7a:02:80:5a:d5:98:98:20:97:27:24:4f:7f:
da:16:9c:35:3f:47:c9:0f:82:95:42:8a:2b:6d:70:
af:5b:05:67:08:9a:61:1e:8d:ff:4b:03:11:ee:4f:
82:e6:54:ec:2e:3c:65:9a:d9:7e:ec:6d:fd:1e:39:
28:69:ed:1b:f8:58:85:4e:0b:4c:40:06:dc:e2:91:
b5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:02:45:36:40:99:0E:66:2E:42:10:5E:A0:BC:1A:3A:93:69:8A
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:78:d8:66:ae:df:ed:55:d9:b7:f6:a8:46:17:56:7f:88:60:
66:95:0a:0e:cf:4a:ef:41:73:d8:87:1d:4b:7f:c7:cd:29:89:
13:b0:2f:f5:49:ba:7e:13:ce:1c:29:10:cd:a0:d0:a1:61:fb:
96:0d:98:1c:23:67:91:6d:d2:c1:14:35:6c:62:da:3b:66:68:
ac:6c:cd:47:a4:92:72:6b:80:7b:c1:b1:57:9c:f7:e6:6c:0d:
73:24:27:3f:4c:a5:33:22:fd:b5:7a:b2:a1:be:be:76:76:ef:
10:b7:ca:5c:d0:8d:cb:ba:de:75:a8:2e:e5:45:33:f3:16:2b:
59:19:19:4c:30:a9:02:ea:e6:04:e6:31:42:64:74:2c:ad:49:
5a:00:03:ac:6a:6c:98:4f:e0:35:87:9a:5c:59:96:28:09:78:
75:f4:41:18:cd:ff:d4:2d:41:05:e3:ec:31:f1:7d:a1:4a:ef:
92:91:dd:f3:8b:10:a9:3a:cf:15:e8:f9:1e:b8:26:f3:77:97:
8b:09:cd:69:dd:9a:bc:9d:39:f0:d8:92:83:01:e6:2a:1d:2a:
cb:b7:f5:b9:80:4a:2a:05:51:31:fe:d6:31:02:3a:1c:51:42:
fa:f5:57:52:e2:ff:65:3f:c0:0b:d7:7b:f3:25:8d:de:60:4b:
82:83:29:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:43:15 2026 by rpki-client