Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: suK5sj4zhEujUSXBFpMQnWCqkmUwTfYT9nGOJvzyN3k=
Subject key identifier: 85:18:70:6B:AB:DD:59:42:35:E1:6C:87:B1:AC:2E:78:B6:70:53:F7
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019EBE47DF528D70891CB2DE4A6C96CA61D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 10E8
Signing time: Sat 13 Jun 2026 00:00:41 +0000
Manifest this update: Sat 13 Jun 2026 00:00:41 +0000
Manifest next update: Sun 14 Jun 2026 00:00:41 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: JXjMK49wm/BZpjhmvET13q2FTHBtUhXFMt4PfGTSogs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:47:df:52:8d:70:89:1c:b2:de:4a:6c:96:ca:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jun 13 00:00:41 2026 GMT
Not After : Jun 14 00:00:41 2026 GMT
Subject: CN=8518706babdd594235e16c87b1ac2e78b67053f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2a:9c:25:d5:2c:9c:7b:79:b3:b8:51:a9:af:
62:df:7e:2d:be:6e:1d:f5:2c:f8:ed:5e:b9:85:20:
b7:de:b0:35:97:5e:81:2d:58:e6:bb:fa:5f:80:12:
f1:f2:0c:f0:40:ac:1f:7b:10:ac:04:de:35:a4:19:
55:31:3b:3e:d3:d8:59:2c:51:cd:5d:a7:77:82:f4:
d3:17:01:32:d7:2d:2f:9c:36:fe:7a:32:56:fa:fd:
dc:5d:bc:d0:6f:00:65:39:d0:db:f0:15:f5:ef:34:
a7:77:95:0a:f0:04:b1:a9:c4:23:df:d1:cf:6a:ef:
41:ac:e8:7d:aa:36:4b:c4:f8:b6:11:16:08:cf:fd:
3f:70:0c:8f:fb:d0:2e:93:d0:0f:2e:7b:df:6c:78:
51:3c:53:d2:40:fc:e7:1b:ac:b0:b4:67:70:bd:3d:
d8:32:c0:33:90:cb:f9:b2:a0:fb:f5:6c:ca:d9:21:
00:bf:e5:09:90:c9:c8:a0:cd:a2:03:a9:b5:a2:52:
46:8e:91:6f:6f:d1:b4:eb:43:4e:29:f5:bf:38:47:
db:f1:af:24:c8:c8:74:0e:71:c5:87:a0:b7:88:41:
55:0c:b5:85:44:ac:a0:32:d7:3d:cd:d6:0e:01:b1:
7c:5c:b1:11:4c:73:0f:92:31:2d:fb:35:d2:9c:e9:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:70:6B:AB:DD:59:42:35:E1:6C:87:B1:AC:2E:78:B6:70:53:F7
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:7e:c8:7b:2e:62:dc:11:8d:fd:ee:e5:ab:c7:48:a6:f6:
c3:5b:b2:32:e5:ce:51:f1:28:f0:da:d9:b7:87:af:a7:f6:76:
50:3c:4c:be:bc:ef:c6:e2:65:a9:e5:64:cb:03:3f:36:4a:cc:
a0:f5:f0:71:3f:44:e4:a4:7b:ec:34:22:3a:eb:a6:be:27:cf:
11:d1:bc:72:35:aa:bc:82:da:cf:ea:72:66:ae:fb:79:8a:c4:
57:35:6a:74:cb:bb:88:4d:dc:f8:19:d8:62:5f:54:6c:f9:8b:
6e:ac:42:c2:e7:8a:b9:7b:ae:81:31:de:54:3b:b8:5c:8a:1f:
5d:08:25:f3:87:90:07:28:cf:bb:8d:a7:da:65:23:6a:f0:af:
ee:bc:ff:85:23:83:f0:18:8c:b3:7f:0f:ab:9e:2a:05:ff:71:
d5:c2:55:55:5d:b6:5e:13:34:78:60:56:0c:28:9e:49:44:5b:
63:70:59:97:34:89:e7:72:1a:a4:bc:18:f6:cc:56:88:ce:ed:
aa:44:b8:80:b9:a5:a3:8c:4d:f9:72:2b:94:55:d1:23:e5:1e:
a4:10:42:4e:1a:73:57:37:e1:90:d5:e9:6c:df:fd:a5:9f:87:
03:d9:00:d2:06:bb:c2:ba:c5:3a:7b:aa:66:e7:b7:a6:4a:ca:
53:d5:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:48:45 2026 by rpki-client