Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: 2Efqsocz+aHG4zAgYj68y+Q0qY1E96IJmclZGrO/8gM=
Subject key identifier: 40:4B:79:6C:3A:1C:DF:78:72:7C:18:39:AB:B8:F5:69:07:70:3E:66
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01A11B63B80A6F8B931508AD92F90F76A445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0DC4
Signing time: Thu 08 Oct 2026 12:01:22 +0000
Manifest this update: Thu 08 Oct 2026 12:01:22 +0000
Manifest next update: Fri 09 Oct 2026 12:01:22 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: anIbhZa7Za3GwvT1XZBQ/SWYqoVtdVn8s5tDbs6oNwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:63:b8:0a:6f:8b:93:15:08:ad:92:f9:0f:76:a4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Oct 8 12:01:22 2026 GMT
Not After : Oct 9 12:01:22 2026 GMT
Subject: CN=404b796c3a1cdf78727c1839abb8f56907703e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:aa:b4:a8:9a:dc:8b:f3:de:7e:ed:cf:9d:
01:59:51:03:7c:f8:23:b0:40:eb:84:31:37:3f:63:
f8:bb:7b:fa:f6:ee:62:a8:d5:38:26:de:61:5c:36:
9a:ae:f5:64:b3:c9:14:03:f8:38:69:84:d0:9e:c0:
4a:a1:53:6e:e5:60:c5:7a:cc:3d:16:b1:0b:eb:be:
ff:d4:2e:de:5e:bb:1d:63:15:10:28:2e:ec:92:24:
9a:84:a7:8f:5c:c7:7d:21:66:2d:a3:fd:b7:10:17:
a6:20:30:3c:1d:df:36:63:1e:b3:8e:7c:60:ae:a3:
92:34:ff:8a:e2:64:c7:7b:ad:1a:12:37:aa:5c:bb:
21:b2:33:d3:6f:1e:77:62:6f:b7:ce:bb:ce:ad:a2:
da:79:71:b0:a3:55:12:4a:66:10:9f:0c:07:ee:bc:
8d:f5:29:42:b6:cb:75:2c:76:d2:0d:78:3f:95:e1:
e7:1b:7e:77:71:51:b6:73:31:a4:88:15:ec:fd:e0:
6d:93:6d:be:ac:4b:6e:cb:4b:d6:cf:0f:b7:3f:de:
d2:cb:a1:15:60:3a:d0:9c:53:c5:62:fe:44:d8:b8:
f6:4d:53:63:b3:e0:96:72:03:70:3a:69:62:7f:a4:
1e:00:01:4a:a8:7b:8f:d8:30:d3:85:41:50:ff:66:
e9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4B:79:6C:3A:1C:DF:78:72:7C:18:39:AB:B8:F5:69:07:70:3E:66
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7f:4a:79:96:b9:59:2b:0f:f3:72:31:d1:cd:85:85:ec:8d:
a9:e6:2e:f3:a5:b1:4c:18:9c:9e:64:54:3a:8b:36:aa:fc:ec:
6d:de:46:33:bf:4f:f7:11:42:5d:a3:5f:fb:80:46:1a:60:77:
98:78:33:2f:95:98:78:7f:6a:ad:d5:2c:5c:09:af:b9:d8:3c:
f1:f0:8b:37:0e:8c:26:4e:ca:b7:0c:15:9d:e1:be:47:65:74:
4d:b9:dd:f7:9b:b3:a4:13:a2:76:5a:62:17:45:1c:d0:ab:7f:
b9:90:fa:79:29:bc:f9:00:de:cb:09:2b:c4:5f:c4:cb:79:a4:
55:19:5f:7b:34:14:16:96:7c:71:54:b3:21:3d:e3:a0:e7:c8:
36:68:39:08:53:23:1b:aa:0a:fa:06:27:0b:c4:4e:db:54:09:
e1:e1:49:21:00:80:3e:11:ec:b2:a8:06:1e:a1:8e:d8:0f:d5:
35:3e:43:07:48:3e:42:e6:0d:23:3a:e5:bb:1a:c4:8e:44:92:
92:9c:58:a4:17:c3:a7:52:b6:cb:5d:99:e2:17:2a:a4:e4:32:
19:4d:99:c0:ac:3f:89:48:98:0a:34:60:d0:78:11:15:96:41:
6a:d0:77:5d:08:5e:61:a7:4c:89:ae:22:ac:08:02:5a:94:f3:
f6:f9:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 18:04:46 2026 by rpki-client