Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: vMmjtjBHWRPcYM48tzD0dvVIPGQmt2+bvW16IkVeqns=
Subject key identifier: 5A:0F:BC:9D:2E:84:8D:71:1F:8E:19:84:4B:71:44:FA:C3:C1:54:D8
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 019D326378F8AFC52EE74DA9E6E046D58DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0A54
Signing time: Sat 28 Mar 2026 03:01:12 +0000
Manifest this update: Sat 28 Mar 2026 03:01:12 +0000
Manifest next update: Sun 29 Mar 2026 03:01:12 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: iVly0jHm94HDkMIZMcqwxlmpJvEpzym9iKYGIILG1cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:78:f8:af:c5:2e:e7:4d:a9:e6:e0:46:d5:8d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Mar 28 03:01:12 2026 GMT
Not After : Mar 29 03:01:12 2026 GMT
Subject: CN=5a0fbc9d2e848d711f8e19844b7144fac3c154d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:7e:a2:86:ba:18:80:57:93:39:e6:1e:81:
d7:d0:b0:62:20:6a:14:47:c7:b0:9f:de:ce:5c:6a:
5e:b5:eb:26:42:6b:e8:68:3b:f0:4d:ec:a3:e1:cb:
78:51:6d:5c:e4:f0:1c:e8:45:a7:3c:54:68:81:2e:
68:a4:42:e3:35:4d:09:8a:1c:9f:54:3c:7d:67:1a:
4c:6f:e8:b9:fa:a3:a5:ba:c1:a9:d8:08:73:19:20:
dc:a0:7f:d4:cf:57:35:52:46:e1:03:b0:53:1a:bb:
24:ac:ef:7e:c7:75:ca:66:5c:f1:fd:69:61:9b:d7:
07:d6:d8:15:65:16:81:af:69:7b:ad:eb:48:d6:d5:
21:3f:cc:46:10:44:20:93:6a:45:86:23:2d:8f:4a:
a1:60:38:db:a2:4d:fc:6d:be:df:9d:4c:70:74:16:
69:fd:01:f9:b4:df:00:74:59:60:14:eb:bc:02:53:
0a:20:ab:36:7f:a2:73:c7:0c:fd:23:8f:d0:6f:6f:
c7:85:6b:f9:78:46:13:1d:df:b1:bb:67:b8:a6:6f:
47:c9:8d:58:68:ab:c0:c9:3a:d6:4f:95:4c:4e:af:
60:c6:2e:aa:0d:f8:5c:ba:fe:29:77:28:a2:97:f4:
02:1e:b9:a9:5f:94:9d:bb:41:cb:08:a3:7a:f9:4f:
18:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:BC:9D:2E:84:8D:71:1F:8E:19:84:4B:71:44:FA:C3:C1:54:D8
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:2f:49:4f:57:89:87:2d:37:0a:e3:8c:33:5c:67:e3:07:24:
e3:07:3f:26:77:3a:53:bf:8a:c0:33:ca:ff:57:50:85:12:9b:
fb:25:77:e5:65:09:a2:56:a1:c2:dd:cb:00:ef:00:ca:00:b3:
1c:20:14:b5:60:fe:ae:2f:67:06:27:db:31:ac:3d:89:22:3a:
0f:47:ec:76:78:09:95:17:e9:34:b4:98:f4:8d:1c:77:d8:a9:
83:6c:9c:a4:a2:b5:80:04:36:3d:5b:2d:3d:27:ad:75:3a:b3:
b5:30:f5:4b:c6:e9:52:d1:08:4f:73:04:f7:b1:2a:98:d5:00:
7a:8b:56:00:61:d3:d1:09:46:fc:4c:32:33:c6:52:ea:fd:c6:
41:15:b5:57:fc:92:d1:de:e9:5b:f7:d0:4a:67:3c:be:b2:ea:
14:84:6b:ee:74:c6:97:aa:1e:a7:dd:5f:34:02:e8:e8:6d:0e:
d2:0c:95:0b:83:71:63:4c:77:72:c2:be:3d:08:4b:0a:38:34:
3b:fb:28:33:45:a5:57:0f:56:6e:7f:82:40:ff:21:11:57:aa:
eb:de:e2:dc:5d:ce:8e:c7:5d:6c:4c:a5:e9:2b:30:93:6a:6a:
e4:02:c0:bc:8a:14:23:3c:43:1b:31:c8:08:c2:ac:3d:0e:a0:
c5:16:36:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:51:06 2026 by rpki-client