Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
File: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft (raw, json)
Hash identifier: B59bTc7ZiPTH4cTVwnnLBGvN2r5+zu2Qd/GtLg68n6w=
Subject key identifier: CB:5F:2F:C7:7B:1A:40:66:FE:C2:F2:93:92:5C:9D:6E:30:53:50:8F
Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Certificate serial: 019D39780C5ADF2C447CE33B0EDF5B2787A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
Manifest number: 1517
Signing time: Sun 29 Mar 2026 12:01:01 +0000
Manifest this update: Sun 29 Mar 2026 12:01:01 +0000
Manifest next update: Mon 30 Mar 2026 12:01:01 +0000
Files and hashes: 1: BDPTI5i4mKqpMJBYvSboypMMNuE.roa (hash: RTLrC8P78AL/8G7o0NMHm7j+X+zOpyoxook+7m1TQVo=)
2: d2KT8A8pg82saNRdGq6GRMXB3UA.roa (hash: dF7P01hXnA73GTd4pqtox0R46I5SwoggxbtIgrQCC9Q=)
3: rwrTXXvd3xuLJd2WdLXGwxgR7ZU.roa (hash: oMOWLalKve6BcbDPvs16UdYfNlQpBDtwtyZAEUofk5I=)
4: u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl (hash: 3xsL95DfPBMODpWLN1g+72ALcl6a3TNURvRisYnrtew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:0c:5a:df:2c:44:7c:e3:3b:0e:df:5b:27:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618
Validity
Not Before: Mar 29 12:01:01 2026 GMT
Not After : Mar 30 12:01:01 2026 GMT
Subject: CN=cb5f2fc77b1a4066fec2f293925c9d6e3053508f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e3:95:aa:29:1c:ec:49:c5:84:8c:7a:6b:26:
10:a3:e0:e3:f4:3a:be:dd:be:50:75:c2:70:0d:38:
47:1b:0b:2e:af:aa:be:b7:4a:db:73:6e:e2:0c:6d:
f9:43:45:69:38:5a:6d:5f:b6:fa:ee:f1:16:1c:31:
d8:6b:bd:3a:d3:a3:ca:b5:ec:b3:4b:d1:38:c2:2e:
8c:ee:b4:49:69:e5:9f:1c:2a:d3:ac:ba:1b:35:e5:
96:68:61:bb:54:86:76:35:76:43:f3:dd:1c:5a:69:
96:ac:e9:ee:4d:d2:1b:3d:17:cc:96:e0:15:b4:14:
65:43:c8:0c:17:46:86:34:ce:57:bf:1e:4d:bb:26:
30:41:30:8e:c3:92:36:4a:4d:c2:51:3b:d0:c6:36:
45:e0:19:c8:ac:69:c3:d6:a5:42:50:14:21:ba:15:
4e:24:b0:51:fb:ae:e1:89:e4:4b:c7:b6:78:b1:de:
63:a7:73:f7:89:75:69:eb:18:65:16:9b:8c:22:f5:
69:f9:d7:06:87:cf:bd:2a:2f:59:89:7d:6c:0e:26:
bb:79:f2:78:10:a5:57:f9:98:61:d3:d6:53:3f:a3:
aa:f8:a5:38:8b:05:12:ca:ad:ac:74:96:72:1a:3e:
b7:97:1d:22:ce:d7:0b:27:1e:d4:69:f1:80:d9:16:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:2F:C7:7B:1A:40:66:FE:C2:F2:93:92:5C:9D:6E:30:53:50:8F
X509v3 Authority Key Identifier:
keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:55:66:02:73:85:09:ee:80:e5:8a:97:b1:91:e1:ef:3d:88:
d3:36:88:7d:26:ee:fe:7c:47:98:a8:d3:9f:de:3e:2b:b8:fc:
d9:1f:e3:60:07:32:f1:ea:98:88:c3:94:39:a4:41:76:89:c5:
f3:84:bd:3a:22:14:54:73:c3:4d:31:6e:f1:b5:2a:2f:e2:16:
4f:cf:be:fc:2a:18:7e:37:aa:dd:90:c3:38:36:b6:81:39:46:
96:97:c9:b3:9f:25:29:7b:4c:c5:bf:7d:df:40:44:7e:05:f2:
1c:06:98:99:da:47:c7:2f:ba:b0:91:51:34:e4:d5:78:45:a6:
68:54:8f:e0:4e:0d:93:db:15:22:d8:42:b2:13:3b:81:e6:9f:
e0:1b:99:b9:b7:07:a1:f2:54:a2:87:33:c4:12:3e:18:8b:51:
1b:da:24:38:a7:a0:eb:73:29:a6:46:aa:36:84:71:8f:d8:f1:
6f:22:4c:7c:33:e6:b8:6f:47:99:7e:cb:14:93:9a:08:ff:09:
5a:60:6e:43:db:56:24:e8:9e:1a:0f:2f:18:d6:cc:87:3e:e1:
f1:19:99:ce:2f:91:3b:46:1e:14:db:9c:bf:7f:f6:54:a9:f2:
dc:9f:50:38:2e:76:b7:5b:9e:70:e0:aa:b6:56:dd:76:9f:49:
5d:9f:ed:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:18 2026 by rpki-client