Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
File: u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft (raw, json)
Hash identifier: 3k9nGBCiCYRG/KJrcGEkk25tl6/zR8BUfJ76ZgOWPPM=
Subject key identifier: B5:A3:A7:F1:BB:89:EC:C6:BB:BE:A8:2C:9D:BF:9E:60:E1:D7:4D:B3
Authority key identifier: BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
Certificate issuer: /CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Certificate serial: 01A0257C0AA92542DD1706BBFF3703F45DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
Manifest number: 0BDB
Signing time: Fri 21 Aug 2026 18:01:21 +0000
Manifest this update: Fri 21 Aug 2026 18:01:21 +0000
Manifest next update: Sat 22 Aug 2026 18:01:21 +0000
Files and hashes: 1: SkqYNPRja7LPy9UVjnTfhDUjBXE.roa (hash: iCpJAyRpdwzJLtdLWzH+tQ4yTmWNi7seDXES8deOOJU=)
2: fljC_W06hgLlHa-b_mv3ZN9X7EY.roa (hash: CmRd4GXF/mcAl3DoEhwYlgvlO83iSA7ECMYW49nGKEI=)
3: u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl (hash: gNjRv5vWemK2nYlRGPUHk4JP9cqD4y60469wDtyxkn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7c:0a:a9:25:42:dd:17:06:bb:ff:37:03:f4:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd2dc1d2c8fbdc08516ab0bb2088c37eb002863
Validity
Not Before: Aug 21 18:01:21 2026 GMT
Not After : Aug 22 18:01:21 2026 GMT
Subject: CN=b5a3a7f1bb89ecc6bbbea82c9dbf9e60e1d74db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:b9:69:a0:a3:66:ae:f6:41:cc:12:05:5c:
62:49:6b:2a:9e:02:d6:73:96:68:6b:0e:7f:0a:36:
93:09:a0:f5:a3:27:79:86:bc:18:3c:46:2e:10:a1:
78:0e:23:2a:4f:55:a8:0b:76:69:3c:5a:6e:8a:db:
cd:cf:08:10:39:bf:46:f2:b4:ab:bb:0e:94:fe:74:
2d:35:e4:d4:a0:82:49:24:fc:e6:f2:26:d0:10:f9:
4e:22:22:f5:70:3c:b6:76:1a:b6:62:1d:74:5a:6d:
9b:67:73:ed:c6:a2:1a:0b:73:bb:42:78:4a:7c:ac:
fd:cc:c7:88:b5:0c:c6:ed:e6:c6:f0:6b:41:19:33:
ad:79:48:64:bd:f9:cb:4a:11:37:ea:a8:bb:82:40:
35:02:97:db:0f:8a:b0:a6:33:27:b5:ce:7d:84:e7:
24:fb:cc:b7:ee:cb:f3:0f:e9:5b:9b:55:b3:05:33:
22:55:e2:d8:84:8c:6b:95:cd:7a:db:2d:61:80:d3:
cb:6c:df:e3:86:f3:5e:44:d6:ea:a0:d3:01:9a:66:
d9:fb:d7:c4:b0:5d:d5:fa:da:e0:3d:10:a9:ff:69:
71:b4:2f:07:c1:d5:37:ff:f5:1a:a2:33:ff:d5:1a:
5b:50:f8:0f:20:60:dc:f9:29:36:ec:6c:f5:a9:75:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A3:A7:F1:BB:89:EC:C6:BB:BE:A8:2C:9D:BF:9E:60:E1:D7:4D:B3
X509v3 Authority Key Identifier:
keyid:BB:D2:DC:1D:2C:8F:BD:C0:85:16:AB:0B:B2:08:8C:37:EB:00:28:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9LcHSyPvcCFFqsLsgiMN-sAKGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/828f99-83b5-40ad-a5a7-06437ec466b8/1/u9LcHSyPvcCFFqsLsgiMN-sAKGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:97:f9:ff:75:33:c3:10:86:b2:b9:1e:b7:ef:7c:01:ec:82:
19:89:ec:29:ea:d6:eb:8a:ba:ab:37:98:e1:14:c9:46:a7:ad:
bf:7f:3c:ab:6b:dc:ee:ea:d0:5f:f3:1b:5c:09:c5:cb:fc:a0:
82:e6:e8:47:c9:09:fa:63:ce:e4:8f:38:b0:6c:d8:83:09:26:
76:97:d0:66:7b:2f:60:e4:c2:fa:1e:21:4e:57:dd:f8:a6:f1:
e8:d8:c2:19:5a:62:10:3b:de:ed:ae:83:6e:39:8c:a7:02:86:
9e:c6:3d:17:49:e8:6c:e8:72:77:04:db:f6:b9:26:14:ee:4e:
46:b4:3b:32:1c:3f:4d:0a:54:f5:4a:18:7b:8c:4a:82:65:90:
7a:de:8b:5a:71:b1:66:e0:9b:71:cd:db:3c:88:6e:18:dd:89:
f1:82:e8:35:2e:c6:ea:b9:f1:cb:f4:95:e0:da:99:e6:45:35:
01:c7:50:20:63:43:78:2b:a4:12:31:22:fa:17:07:2f:25:cd:
0d:57:9a:2e:5c:df:c5:87:f3:f1:ac:a5:9c:8e:c5:7d:1d:16:
62:3f:13:94:1e:34:cb:77:25:43:1c:11:49:df:17:84:a6:c1:
02:ce:31:e7:d5:4a:44:e7:81:4b:5d:b1:24:d0:14:c4:37:17:
97:e4:9a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:04:26 2026 by rpki-client