Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
File: u3C4koHNt2GgSty8CsQXBUExUOk.mft (raw, json)
Hash identifier: TZ8rNmobaH9SMng1/ipsdlfdbA6diXp9IqW4pV/LdfU=
Subject key identifier: BD:3E:32:DB:35:92:07:FB:0C:49:E8:6D:59:0A:2C:BE:2C:2C:AF:C6
Authority key identifier: BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
Certificate issuer: /CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Certificate serial: 01A1250B3F2E7E44098F5D1A2BCA2F1FB10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
Manifest number: 0DC9
Signing time: Sat 10 Oct 2026 09:00:56 +0000
Manifest this update: Sat 10 Oct 2026 09:00:56 +0000
Manifest next update: Sun 11 Oct 2026 09:00:56 +0000
Files and hashes: 1: TQBDj7Zks0Fm2FL3Td3zR6ND-SQ.roa (hash: gr5IW23RFNN3IAOqTCUEX95vD/VGxJTWiQyqhzBx/Xc=)
2: u3C4koHNt2GgSty8CsQXBUExUOk.crl (hash: mMbm7WWVE97YT7HKaFo0cSe+F7okA1+GbpP18rsP/mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:3f:2e:7e:44:09:8f:5d:1a:2b:ca:2f:1f:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb70b89281cdb761a04adcbc0ac41705413150e9
Validity
Not Before: Oct 10 09:00:56 2026 GMT
Not After : Oct 11 09:00:56 2026 GMT
Subject: CN=bd3e32db359207fb0c49e86d590a2cbe2c2cafc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:a0:76:59:27:2e:c1:dd:70:64:3f:ef:06:
8e:71:6f:57:76:f7:cf:b0:30:2a:17:0f:9d:38:ec:
5a:56:f3:47:c1:b7:dc:c3:a8:96:4f:7d:a4:7b:43:
45:1f:82:31:96:e3:3f:b0:4d:d4:c8:6c:89:b2:1d:
ab:0a:bb:ef:69:0f:20:3d:a8:fc:a5:5f:de:33:ef:
15:4e:ec:fb:c3:59:db:91:f5:d6:65:6c:e6:ed:7b:
09:cd:c6:d1:10:5b:14:0c:f6:25:b7:88:11:4c:64:
d8:99:f2:66:aa:a3:1b:56:3e:69:c1:4b:33:86:cd:
10:88:23:26:a8:f2:cc:ab:04:b5:a8:52:72:9a:88:
4a:67:d1:74:7c:78:80:78:e4:cb:6b:50:0a:a5:90:
29:11:6f:56:04:5b:df:58:f8:b9:46:a9:a8:aa:15:
6d:d2:55:e8:95:7b:f9:d3:03:9f:f4:d3:7d:c1:7e:
fd:55:68:b1:cf:13:6d:de:d8:bc:2f:28:23:35:fb:
0e:3e:22:fb:b7:96:23:b6:ac:2f:81:fb:d2:d6:15:
03:fb:70:0f:a6:87:47:e6:d0:a4:c4:01:90:0d:d3:
16:e6:50:52:16:4c:ee:d7:e0:6e:99:76:48:00:19:
be:7b:6a:7a:a2:4d:a0:59:d1:01:87:1c:d4:61:c6:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:32:DB:35:92:07:FB:0C:49:E8:6D:59:0A:2C:BE:2C:2C:AF:C6
X509v3 Authority Key Identifier:
keyid:BB:70:B8:92:81:CD:B7:61:A0:4A:DC:BC:0A:C4:17:05:41:31:50:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3C4koHNt2GgSty8CsQXBUExUOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/120715-2689-4b1c-a6b8-417320cbae55/1/u3C4koHNt2GgSty8CsQXBUExUOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:be:4e:97:58:79:7f:33:63:03:51:70:00:54:3e:57:a4:57:
b4:35:ea:08:6d:bd:0f:77:03:ae:bc:8d:d4:12:f0:73:67:73:
7a:12:07:53:7d:f4:fd:0a:df:7a:75:2b:b5:54:9a:d1:e7:66:
a4:db:18:23:1a:52:f6:dd:39:fe:48:f2:2e:59:7e:05:ea:2b:
f3:09:ac:df:d5:e7:47:83:50:c7:68:11:3f:e2:45:6a:10:e0:
72:41:52:e2:63:69:64:cd:21:4b:99:48:d5:d6:29:a3:2f:89:
db:ab:4b:e7:46:5a:fd:e5:b2:45:6f:9f:00:d8:6a:2b:05:27:
b2:41:0c:78:5f:28:5a:80:d3:85:1e:29:f2:ae:26:1e:fb:c5:
d0:f8:82:a7:1b:f9:8b:d4:fb:ce:7a:3f:65:ff:05:77:28:9b:
1b:c1:6a:7b:7a:21:29:db:52:d5:00:45:04:be:c3:4b:b3:90:
48:96:47:f0:b8:61:70:6c:95:c3:ac:31:fc:d6:12:a9:8d:21:
0d:30:b4:46:3f:8d:8a:f2:57:16:ed:b4:8c:52:01:87:f2:01:
2f:a7:82:94:03:6d:74:f7:c4:5d:13:d4:bf:79:19:b4:56:63:
a4:9b:f3:02:b9:e0:7c:76:dc:66:68:8a:e5:b5:f9:09:7e:82:
5f:21:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:47:02 2026 by rpki-client