Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: 1DALn/wfwBTnz9T80YTVT1e01QyIpLzX7UpKtVIdZyw=
Subject key identifier: 0B:C1:5A:AB:9A:1D:B2:2E:59:C7:68:57:1B:AF:92:38:25:79:79:63
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019E9C982F06A048B79295FA3575133BE842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 14C9
Signing time: Sat 06 Jun 2026 11:01:19 +0000
Manifest this update: Sat 06 Jun 2026 11:01:19 +0000
Manifest next update: Sun 07 Jun 2026 11:01:19 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: I91plHmVbOJcmkdtJrONwZOr2dn9HZezP/v8P2LlvHo=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:98:2f:06:a0:48:b7:92:95:fa:35:75:13:3b:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jun 6 11:01:19 2026 GMT
Not After : Jun 7 11:01:19 2026 GMT
Subject: CN=0bc15aab9a1db22e59c768571baf923825797963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:25:6a:48:85:43:30:8e:fd:1d:f2:79:bd:05:
ac:af:d2:1c:78:57:8a:8a:75:09:2a:56:49:c7:72:
ee:cb:4c:12:72:0a:ea:af:bd:99:c0:66:85:67:6b:
48:21:3f:d5:12:d7:9d:9c:33:56:d6:a2:26:13:b8:
de:72:fd:1b:a1:56:66:a6:90:fc:a4:61:34:f3:32:
b6:dd:70:f5:c1:7d:ac:1a:a6:62:f8:29:dd:34:c6:
0e:83:9c:a8:6f:9e:d9:1a:d6:e6:32:55:70:21:a2:
6b:61:00:3c:17:de:b1:12:b3:75:c4:84:6b:0b:b4:
bd:6b:80:bb:b2:fd:45:5a:0c:97:c0:68:f3:db:03:
22:39:24:b1:2e:19:8a:d2:66:9e:68:53:d4:71:c5:
2e:9c:be:d9:6b:cc:f6:08:f1:89:df:1f:a2:92:b7:
ea:19:e2:81:e4:e2:ab:08:97:a6:f7:b1:47:ca:cc:
e6:64:8b:6d:40:af:69:9e:02:e5:57:60:ea:f7:93:
e1:99:57:19:8f:ef:81:72:70:c2:bd:1b:7f:47:7c:
28:56:dd:5f:0d:05:75:07:ab:b5:14:cf:c5:29:6e:
10:d3:84:69:89:4a:b9:7b:25:08:43:cd:70:84:aa:
fb:33:11:46:e9:ce:20:54:1a:83:cd:62:c8:b2:44:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:5A:AB:9A:1D:B2:2E:59:C7:68:57:1B:AF:92:38:25:79:79:63
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:f3:9e:82:e6:ad:4f:88:ac:52:4e:63:7f:0c:ff:9e:e0:c0:
7d:af:99:b0:a2:c7:0f:b4:7b:19:ad:f9:8c:2c:59:f5:88:9f:
a1:3d:02:c8:aa:47:ef:f4:2d:3b:b4:97:4e:e3:85:c6:39:67:
a3:7d:b0:f0:74:41:80:78:d7:07:81:b6:3f:c7:1b:de:42:22:
02:fd:f1:fb:80:81:19:84:32:a6:1f:ce:10:fa:93:1a:e4:5a:
09:44:4d:cb:61:3a:24:9e:de:b1:b5:92:95:22:5b:b4:d8:b9:
c2:cc:14:5b:3b:3b:81:b4:ba:c0:f7:5c:a0:38:85:cc:d5:4a:
e2:a7:1c:58:61:a6:f5:5d:c3:e2:df:90:36:0e:4c:29:5a:c3:
7e:fb:ba:dd:04:01:04:a5:dd:b0:b2:26:3e:9e:1a:5e:91:4b:
90:23:e6:87:9c:5f:32:3e:65:2e:12:b3:e8:d2:76:d5:05:21:
97:f4:01:84:f7:78:d7:82:35:4a:3b:32:ab:e6:06:74:8f:05:
ef:85:6c:20:1e:6d:3f:19:5b:f0:db:bc:3e:59:39:0b:2b:44:
0f:2c:ff:e6:ed:3e:89:7e:08:02:62:5e:92:8e:cd:e8:cc:40:
03:67:13:f9:a0:71:7b:cb:36:f3:77:6b:11:ad:98:9a:cb:cd:
bb:66:70:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:34 2026 by rpki-client