Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: jYMEvhLtP39LVYCRf2hylvxADSzHP91bqVp0hI1YmL8=
Subject key identifier: 9C:1F:C7:5B:D3:DB:39:CF:84:49:75:17:C9:6A:5A:51:49:72:00:B5
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019F3BCF98D1D81FA872C46A5690E35D7B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0B62
Signing time: Tue 07 Jul 2026 09:01:28 +0000
Manifest this update: Tue 07 Jul 2026 09:01:28 +0000
Manifest next update: Wed 08 Jul 2026 09:01:28 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: ZhTlJcm8iFqQ+scCG7CSg5r2s2U6HtMDEI37veI8TnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 07:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:cf:98:d1:d8:1f:a8:72:c4:6a:56:90:e3:5d:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Jul 7 09:01:28 2026 GMT
Not After : Jul 8 09:01:28 2026 GMT
Subject: CN=9c1fc75bd3db39cf84497517c96a5a51497200b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:a8:00:73:67:ca:cb:01:a0:f1:81:a9:b1:
2c:44:83:eb:cf:73:8b:03:e2:cf:38:54:9a:71:45:
30:a8:63:93:ea:63:5f:51:9d:05:93:74:f5:f8:80:
19:48:6c:a6:b0:9d:74:f5:25:b6:d8:d0:20:42:1a:
5d:6a:4f:f4:77:a4:7d:77:d7:c8:b8:92:74:65:7b:
37:4f:83:de:31:16:8c:0d:92:72:f3:2b:95:af:11:
2c:8c:16:27:26:c4:d4:e2:cb:a5:05:46:4d:6f:1a:
73:fa:44:eb:30:50:0e:c0:3f:e1:e7:2c:3e:ed:df:
f8:83:5a:b7:73:09:d0:7d:3a:a4:e5:42:09:05:7f:
80:37:14:c3:26:bf:b6:69:13:9c:1f:fe:03:b2:b2:
f7:b1:55:ab:45:b7:d1:39:50:a1:7c:76:dc:3c:17:
58:58:91:9a:a2:d8:73:91:3e:b1:3c:db:bc:93:eb:
34:c1:c1:e0:a4:9c:02:49:7a:d9:c3:09:ea:b0:a0:
c2:d4:08:8a:9e:a8:aa:d7:af:19:41:81:92:e6:b7:
22:42:bf:7a:55:f2:76:74:ac:c0:5c:a9:09:b1:fd:
42:29:30:b6:40:52:88:65:00:46:30:d0:16:ee:64:
36:2c:44:e1:61:ac:42:fd:c4:c0:91:6f:e8:e2:25:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1F:C7:5B:D3:DB:39:CF:84:49:75:17:C9:6A:5A:51:49:72:00:B5
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4b:89:d0:1a:9b:ad:ce:f8:fc:9a:85:6e:26:a8:2b:07:d0:
72:02:d2:12:70:77:e5:99:89:ca:a0:04:b7:07:af:ed:f3:40:
bb:f3:28:49:80:cf:92:35:bb:89:a8:89:c8:4a:0a:75:8e:fc:
f8:1c:98:14:7f:06:28:d9:05:7b:0b:7d:2f:61:24:4b:a9:5f:
27:26:90:90:cb:f2:6c:57:5c:6c:1b:9b:68:04:32:6f:7a:3f:
8a:11:51:bd:1f:c7:ad:d9:36:f3:c6:26:25:d5:d9:fe:53:41:
e4:ec:59:3f:46:cb:5c:c2:89:1d:bd:06:ed:46:0f:e1:1f:a9:
de:6e:ee:b4:72:64:2b:2a:91:f3:6e:f0:4d:9f:a6:bd:0d:8b:
32:63:19:fd:88:30:49:88:40:66:d0:4d:9b:2a:d5:51:aa:78:
95:a9:3e:04:61:ea:b8:2e:15:45:5f:23:9f:5e:89:97:44:d0:
9d:68:8d:a5:04:58:43:2c:20:86:1a:9b:51:70:ab:34:16:a2:
27:c9:7a:cb:d2:6b:c3:54:3d:73:1e:b3:34:ff:0f:f6:6b:c1:
a8:b7:3e:48:c9:d4:c6:0f:4f:4d:ea:35:13:ea:06:ba:89:39:
54:10:4b:72:d1:0d:df:85:21:c6:49:27:14:ff:5d:dc:a1:1f:
e9:77:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:45:44 2026 by rpki-client