Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: pKeUuJ2tyvaohdibC+ch3gWeTlSV3MvwaYE4Ijc36Uk=
Subject key identifier: 02:65:D8:D6:8A:AA:1A:44:EC:82:A9:FA:27:15:D8:6D:D7:61:6B:5C
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019FA071EF3AF1258D07881DC09D905F214D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: 01E6
Signing time: Sun 26 Jul 2026 22:00:49 +0000
Manifest this update: Sun 26 Jul 2026 22:00:49 +0000
Manifest next update: Mon 27 Jul 2026 22:00:49 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: 01tNTfX3i4NpJy/wsUvcsWLtsYhAeI8vxsON18L0UYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:ef:3a:f1:25:8d:07:88:1d:c0:9d:90:5f:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Jul 26 22:00:49 2026 GMT
Not After : Jul 27 22:00:49 2026 GMT
Subject: CN=0265d8d68aaa1a44ec82a9fa2715d86dd7616b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:ca:1c:39:e1:ee:c8:c4:51:3a:92:27:23:
b7:9b:71:86:27:01:56:7d:69:c6:7d:19:a2:79:4f:
db:46:ed:d7:ca:9a:eb:33:b0:8d:a0:56:2f:da:7d:
33:09:66:02:52:af:39:c6:d1:e5:75:c2:d0:4e:1b:
d7:c6:8e:af:60:f8:ea:b2:cf:48:8c:a8:a9:33:76:
9b:bc:fa:28:cb:79:32:84:67:42:22:5b:d8:79:69:
f7:41:84:8b:f3:aa:90:07:5a:6a:2d:76:b4:ba:2d:
3b:c0:9d:19:98:02:fd:3a:80:73:2c:7e:01:17:6d:
d5:ca:29:03:fd:70:ad:23:f5:57:47:20:0a:73:71:
da:9e:83:65:b1:a4:8b:7b:c0:3e:0b:01:41:f0:ed:
bd:70:5b:54:04:9a:c0:17:9b:fe:3b:13:9b:12:8c:
55:84:64:5b:86:97:d3:cb:03:01:9c:cf:7f:58:af:
95:d8:0f:ff:55:fd:e7:dc:b4:37:c7:86:8f:a5:30:
0b:6f:8f:86:f3:ab:15:05:6e:5d:b5:30:dc:74:05:
dc:4d:38:45:67:26:6f:e1:c4:e1:a7:60:fc:0c:cc:
aa:d1:f8:8f:6b:38:0e:51:8a:83:ca:77:28:bf:ca:
a0:f1:8b:ae:f0:a5:ef:1f:7e:30:bb:69:ad:f6:3e:
ad:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:65:D8:D6:8A:AA:1A:44:EC:82:A9:FA:27:15:D8:6D:D7:61:6B:5C
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:11:89:52:dc:eb:d0:e5:bd:11:9e:a5:37:fd:67:0a:67:fa:
48:bb:a3:0a:84:4e:70:3d:be:97:e2:f3:16:af:8a:0a:c8:c8:
41:8d:b4:ba:eb:60:68:fe:92:42:ca:0c:b1:e4:cd:0e:f5:5f:
8f:7e:e8:b7:5c:ab:07:69:c7:58:09:63:66:e0:c4:b8:a4:b7:
25:cb:e8:98:26:5c:17:82:8d:ca:a9:9b:b4:28:1a:d0:fc:a0:
0d:89:3a:34:53:9d:6b:a4:3a:1e:25:68:b1:da:91:ff:42:aa:
91:a8:21:58:62:80:84:36:b0:0d:3a:66:37:5f:bd:7a:4a:3e:
b1:87:5b:45:d2:19:51:38:43:12:19:df:01:73:be:84:a6:4e:
27:db:b2:5b:fc:87:17:f7:ba:d6:bb:18:e5:43:fe:0d:f0:be:
43:d0:55:42:dd:d4:e5:61:86:da:6c:b4:e4:6d:74:8c:e9:e1:
c1:1e:93:9f:4b:f3:0c:8f:ab:3e:4b:5c:83:fe:80:2b:ca:19:
cf:88:65:16:13:3f:79:20:d9:4f:cd:e5:6a:1b:31:9f:23:9d:
7b:76:c7:21:d5:1c:c2:36:e7:38:78:c0:2b:d4:2a:84:1e:ae:
bc:12:6a:85:08:ff:05:f5:fe:63:f6:80:7c:cd:d9:e1:ca:87:
27:48:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:42:30 2026 by rpki-client