Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
File: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft (raw, json)
Hash identifier: TfrN9abdNVuuMz8VB9ytRLM8dP1//O6AHZ8Bt1ZVK8s=
Subject key identifier: 3D:1B:82:4D:91:56:A5:E6:BD:6F:B7:41:44:24:A1:7E:4D:D1:D4:F4
Authority key identifier: BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
Certificate issuer: /CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Certificate serial: 019DCD192892B59F8EDCA35E735965A08FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
Manifest number: F4
Signing time: Mon 27 Apr 2026 04:01:11 +0000
Manifest this update: Mon 27 Apr 2026 04:01:11 +0000
Manifest next update: Tue 28 Apr 2026 04:01:11 +0000
Files and hashes: 1: jkaZ5iICQupFcFDl9xhsN7XCfVU.roa (hash: 2aIOXrEvsS/h5Y1uTl8DSbIvLrqkEcleOvMyI5MMETE=)
2: kGGKQ_LOCr5Ln0myybbsd-XEkBI.roa (hash: hCLc2O3yec3r2DP8hOWsVfY8Un9Qk+FYyJmGArXKVWo=)
3: u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl (hash: eSq12a/fkY83Msdqj46smzsUDethgcNDA9UK6i7EPeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:28:92:b5:9f:8e:dc:a3:5e:73:59:65:a0:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe1bd6b0d589e1a0f90badf735020714f0ecf7a
Validity
Not Before: Apr 27 04:01:11 2026 GMT
Not After : Apr 28 04:01:11 2026 GMT
Subject: CN=3d1b824d9156a5e6bd6fb7414424a17e4dd1d4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:cb:1f:7f:92:bc:2b:b4:67:42:24:9f:93:
04:d8:63:21:f1:6f:82:59:84:89:81:d7:15:dc:cc:
2a:aa:98:cf:a3:d8:6c:8d:89:9e:a3:e2:6d:de:d8:
22:68:8e:3a:f1:be:2e:ad:3b:65:53:c2:e9:56:99:
59:b8:78:74:17:a5:a3:dd:31:3c:ed:9a:8b:46:9d:
50:33:b4:9a:18:16:ab:b0:b9:53:94:2b:50:bc:3b:
f5:ad:b4:85:f5:73:bd:fd:9b:d3:81:31:ef:38:54:
1a:ee:0c:67:f1:a7:77:ad:1f:fc:03:cb:1e:94:5f:
9c:db:33:53:58:0f:c1:07:b5:c6:64:87:97:a3:45:
84:e7:d3:f8:a6:43:aa:0a:66:2d:58:af:81:9e:bf:
20:e5:6f:06:e3:6f:73:35:9f:55:01:7a:1c:52:c1:
8d:97:3f:77:b3:0a:59:a8:5b:09:a4:e9:04:33:1d:
56:a9:35:be:17:b5:72:9a:77:ab:af:54:48:93:ca:
f1:49:54:d0:2f:70:21:f5:f4:ec:0e:5c:91:d6:95:
63:96:63:20:e3:cf:36:ae:34:ac:6c:08:9c:fb:26:
80:de:26:fe:7f:d5:3b:d6:33:63:f7:b6:0b:92:22:
93:8b:15:a1:0e:0e:5e:a3:98:41:d3:32:1a:a1:76:
25:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1B:82:4D:91:56:A5:E6:BD:6F:B7:41:44:24:A1:7E:4D:D1:D4:F4
X509v3 Authority Key Identifier:
keyid:BB:E1:BD:6B:0D:58:9E:1A:0F:90:BA:DF:73:50:20:71:4F:0E:CF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/815e08-a5cf-4f01-90cb-617d17be3004/1/u-G9aw1YnhoPkLrfc1AgcU8Oz3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:77:7f:18:3c:65:79:44:1b:51:8a:d3:91:36:81:03:04:3c:
68:d6:91:c5:eb:88:d1:4e:90:2c:b8:7f:bf:09:74:f6:8e:91:
16:da:5a:3e:94:c0:8d:13:50:dd:a5:79:ff:26:c5:33:f6:c6:
39:d5:6d:b9:a3:ed:f3:1e:72:ae:a7:32:4a:84:e5:df:05:e8:
56:8b:74:75:6c:0e:76:00:21:7c:9b:47:fe:ab:aa:7a:00:67:
98:f5:b8:f7:ea:ec:8e:55:44:df:db:6d:9e:a9:36:5e:dd:d9:
c3:64:24:86:a9:94:a1:17:e5:e3:94:b6:f4:7b:34:9b:63:38:
67:dc:84:24:c0:25:1a:74:0c:cb:73:54:c8:e1:5c:25:80:c3:
01:75:06:0a:3a:d1:06:21:51:d7:4b:6d:27:91:26:1b:0a:19:
4b:f6:79:a9:28:64:f6:fc:71:32:a3:2f:19:c3:02:3a:13:bc:
8a:89:30:9b:ac:eb:5c:c2:e0:4d:3b:a2:53:77:f9:e2:b1:e2:
9f:38:47:7c:01:09:b7:db:9f:03:31:54:7a:15:ee:83:b3:25:
d9:db:2a:74:2e:56:ea:4c:0f:64:0a:94:f2:46:3e:ca:e8:b0:
bf:7c:93:ba:80:56:15:9b:09:50:50:ac:e8:66:46:c7:40:67:
c0:f2:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:56:29 2026 by rpki-client