Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
File: u8VfskrVVuBCAmUfbVqLJ9W-35c.mft (raw, json)
Hash identifier: QBh60G+nxwBl9wsh/juLarPmeID1caUx1/dzkEnY2m8=
Subject key identifier: 74:8F:A0:87:46:38:AB:16:B8:71:3E:77:28:60:37:14:47:21:21:E3
Authority key identifier: BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
Certificate issuer: /CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Certificate serial: 019FA1F2A9E7D35C643707EF3E02B2D7439E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
Manifest number: 16AC
Signing time: Mon 27 Jul 2026 05:01:02 +0000
Manifest this update: Mon 27 Jul 2026 05:01:02 +0000
Manifest next update: Tue 28 Jul 2026 05:01:02 +0000
Files and hashes: 1: 1UXzpmvTwZAsUDWWE8erylOknmA.roa (hash: bPU4V6mvT+M1L74dQ2qnl35ymoh6uHxc1XZ4WDy2uqA=)
2: amKu-jsoMwsxR9Euv1nnf91FACw.roa (hash: hG2SQQAbvE2nMpMXDrClrQrRBBagLC5ssOgwcgvlSt0=)
3: u8VfskrVVuBCAmUfbVqLJ9W-35c.crl (hash: cAjiSaVGLbHAdWsCbuk3sXcv6zL6wm/fS22F7gM14xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a9:e7:d3:5c:64:37:07:ef:3e:02:b2:d7:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbc55fb24ad556e04202651f6d5a8b27d5bedf97
Validity
Not Before: Jul 27 05:01:02 2026 GMT
Not After : Jul 28 05:01:02 2026 GMT
Subject: CN=748fa0874638ab16b8713e7728603714472121e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:05:28:ad:e0:8c:8e:0d:b1:fd:59:ed:3d:8a:
a0:ab:68:d2:06:1f:9c:6c:fd:6b:e7:71:bb:35:44:
f0:ae:1b:65:2b:9e:1a:7e:b8:7f:b9:ca:d5:ec:16:
39:6e:aa:50:07:e4:0b:7b:10:c0:22:41:da:7b:ea:
e3:19:d4:63:7e:9f:e3:3a:67:a7:d8:83:ce:82:6e:
c4:c3:c3:64:2a:07:07:9f:4f:e0:30:74:e3:91:40:
07:88:1b:51:3f:c9:ea:84:e0:98:ec:5e:d7:e7:82:
4d:1f:59:11:e5:78:2b:47:a1:88:19:8f:b5:00:b8:
df:ce:c2:65:78:1d:36:64:b8:2d:0e:55:0a:51:03:
0b:84:ff:d0:ff:ff:de:a3:f9:b7:b3:59:6d:31:99:
bd:50:b0:77:93:b7:10:4f:9a:4e:56:e3:cd:6b:04:
3a:da:2f:95:54:f1:d6:5b:69:a7:63:06:75:67:4a:
80:0a:1d:49:57:fa:b4:c5:e7:a9:af:cf:95:08:6b:
8b:1b:43:9e:10:10:8c:5c:f7:1b:94:1f:d0:78:f3:
66:9b:bc:98:fe:45:88:da:c4:69:27:05:d4:bc:7e:
ae:39:4d:6f:27:55:46:d0:6e:7b:87:bb:13:61:fb:
ff:1d:29:35:57:50:14:60:ff:f7:60:31:7a:c5:b7:
6b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:8F:A0:87:46:38:AB:16:B8:71:3E:77:28:60:37:14:47:21:21:E3
X509v3 Authority Key Identifier:
keyid:BB:C5:5F:B2:4A:D5:56:E0:42:02:65:1F:6D:5A:8B:27:D5:BE:DF:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u8VfskrVVuBCAmUfbVqLJ9W-35c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/46922f-5cb6-4d98-b4fc-93bd5e408f91/1/u8VfskrVVuBCAmUfbVqLJ9W-35c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:51:38:a3:e1:99:e7:86:7e:68:de:40:30:5c:d8:c3:93:51:
b2:52:be:b5:a0:5f:b6:3c:93:b8:21:ab:68:37:49:3f:f0:12:
c0:ef:86:97:da:cd:c9:e6:b3:a8:7f:7f:a6:b0:55:01:d2:73:
e4:67:e2:2c:e0:f2:f6:d9:f0:0b:42:0d:e4:93:ec:e3:12:28:
87:01:76:03:00:f0:e8:7f:85:13:18:cf:dd:20:b7:d5:40:fe:
3d:3d:cd:1d:0f:06:58:93:93:b6:18:85:26:70:58:b9:a3:5e:
c3:0c:80:18:ed:8c:18:7d:67:63:c2:89:a4:7c:9f:95:a4:08:
ed:8a:57:b3:9e:7f:68:9b:49:3c:d4:8d:b0:ee:5d:bb:44:63:
f0:99:5a:3b:be:d5:91:37:02:43:5d:0c:78:e1:aa:1c:a5:2d:
cd:54:1b:d8:bf:84:d8:cd:96:1d:04:ec:01:88:5b:22:f8:c1:
82:23:11:fe:85:ab:f7:37:ef:c7:61:f7:7a:ba:ce:90:af:50:
56:e7:a1:4b:37:7e:3c:5d:87:a3:50:52:4f:3e:0c:09:19:07:
d4:70:07:ec:7c:f4:67:89:c8:d3:32:34:42:7f:c2:79:32:22:
9e:cf:63:11:28:3e:0f:2e:b6:54:f9:67:ab:98:27:cb:d2:bc:
19:19:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:04 2026 by rpki-client