Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: XZfoV+z7gIBw4uaXibEzSK7OuTFKxTGNqvWq3j06ky8=
Subject key identifier: B6:05:F5:CC:C9:21:83:50:49:24:79:4E:08:B4:CF:8F:0C:5E:79:2A
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 01A0C1E8F4E4962D80E1CAA2FB7358A36756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 11F3
Signing time: Mon 21 Sep 2026 03:01:04 +0000
Manifest this update: Mon 21 Sep 2026 03:01:04 +0000
Manifest next update: Tue 22 Sep 2026 03:01:04 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: /KdRVsPAJ1Km75e2VsKDEwxLgo7kbwOERmo9ikR0+VE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:e8:f4:e4:96:2d:80:e1:ca:a2:fb:73:58:a3:67:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Sep 21 03:01:04 2026 GMT
Not After : Sep 22 03:01:04 2026 GMT
Subject: CN=b605f5ccc92183504924794e08b4cf8f0c5e792a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:24:22:50:cb:9e:61:0a:ef:dc:48:0c:98:c0:
e1:85:af:b9:09:55:52:f4:03:1b:8f:27:06:60:52:
d4:cf:18:52:30:36:6c:72:4e:11:4f:dd:50:13:6b:
f0:5c:bb:62:37:19:7c:5a:be:68:0a:64:a4:64:b9:
02:6c:23:10:57:e3:8e:8a:46:bc:55:ed:dd:1d:e5:
4c:da:d4:8d:d2:95:b7:6c:fb:d7:d1:c3:96:67:67:
fa:18:e1:12:c3:04:c6:08:a2:4a:a8:1a:76:f9:8e:
94:6c:62:50:57:22:c5:2f:8b:5f:c6:49:87:14:76:
08:86:88:44:04:b1:10:a4:c6:9d:37:e5:fb:53:7d:
d4:16:d1:b7:dc:f1:75:53:1e:e9:4b:5f:f4:54:9a:
0c:c0:ef:30:e3:44:6c:82:e3:8e:6e:61:8a:86:49:
7a:6b:3f:4b:90:d3:70:bd:34:4f:8f:26:a2:3f:a4:
2b:71:c4:bf:f1:8e:3a:58:30:3d:47:50:db:f2:da:
fc:82:71:bd:05:e8:ca:0c:db:8e:9a:f2:b5:b0:23:
0c:f1:e8:cd:04:91:63:6b:73:ea:98:8f:09:ec:6d:
89:3f:8b:18:3b:09:ac:27:c5:4b:33:da:7c:e6:fa:
3a:6d:73:f0:12:20:29:00:a9:de:19:6d:31:17:00:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:05:F5:CC:C9:21:83:50:49:24:79:4E:08:B4:CF:8F:0C:5E:79:2A
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:09:8f:8d:6a:2f:61:14:39:8d:64:d2:4d:72:84:20:5c:ef:
43:b7:37:09:72:62:92:5d:8c:13:00:b6:4b:9b:6d:33:1f:cd:
9a:04:6e:9e:0e:2b:dc:e1:d7:ad:ff:cf:08:0e:db:4c:19:ff:
e2:b5:f8:d9:b6:88:f3:33:e0:6e:78:21:45:e5:36:08:f8:ad:
c0:6f:a8:02:74:c3:d4:0c:e0:a4:b3:58:68:6c:31:3a:25:86:
2d:08:47:1a:cb:72:48:c2:9f:e5:70:55:30:44:cb:1d:70:f9:
dd:e7:58:d5:5a:7f:58:bc:02:c4:30:e1:a4:fa:8b:1b:90:7a:
f0:fe:b2:4a:a0:f9:78:85:18:28:31:30:37:87:a4:86:97:31:
68:51:b7:38:f3:5a:2f:4f:7b:65:29:a2:f2:bd:e4:c3:f9:fb:
ca:14:e8:70:56:40:8e:d6:0f:8f:56:17:c0:33:bb:61:76:44:
54:c0:b8:59:37:8c:0b:02:16:cd:03:91:77:07:9f:4e:ed:67:
bb:b9:4e:da:98:9f:19:25:9c:82:4a:61:4c:10:d7:39:84:8c:
bd:d8:2b:63:b4:2e:2c:99:5c:cf:48:34:0e:0c:b4:8a:11:15:
23:c9:19:b7:13:92:b7:62:0f:fa:d9:99:35:52:9c:4b:3d:63:
55:e6:80:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6PTkli2A4cqi+3NYo2dWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5
NjVhZjMwHhcNMjYwOTIxMDMwMTA0WhcNMjYwOTIyMDMwMTA0WjAzMTEwLwYDVQQD
EyhiNjA1ZjVjY2M5MjE4MzUwNDkyNDc5NGUwOGI0Y2Y4ZjBjNWU3OTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SQiUMueYQrv3EgMmMDhha+5CVVS
9AMbjycGYFLUzxhSMDZsck4RT91QE2vwXLtiNxl8Wr5oCmSkZLkCbCMQV+OOika8
Ve3dHeVM2tSN0pW3bPvX0cOWZ2f6GOESwwTGCKJKqBp2+Y6UbGJQVyLFL4tfxkmH
FHYIhohEBLEQpMadN+X7U33UFtG33PF1Ux7pS1/0VJoMwO8w40RsguOObmGKhkl6
az9LkNNwvTRPjyaiP6QrccS/8Y46WDA9R1Db8tr8gnG9BejKDNuOmvK1sCMM8ejN
BJFja3PqmI8J7G2JP4sYOwmsJ8VLM9p85vo6bXPwEiApAKneGW0xFwBlcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYF9czJIYNQSSR5Tgi0z48MXnkqMB8GA1UdIwQY
MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt
ODM1YTU4NDJiOTRjLzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj
LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwmPjWov
YRQ5jWTSTXKEIFzvQ7c3CXJikl2MEwC2S5ttMx/NmgRung4r3OHXrf/PCA7bTBn/
4rX42baI8zPgbnghReU2CPitwG+oAnTD1AzgpLNYaGwxOiWGLQhHGstySMKf5XBV
METLHXD53edY1Vp/WLwCxDDhpPqLG5B68P6ySqD5eIUYKDEwN4ekhpcxaFG3OPNa
L097ZSmi8r3kw/n7yhTocFZAjtYPj1YXwDO7YXZEVMC4WTeMCwIWzQORdwefTu1n
u7lO2pifGSWcgkphTBDXOYSMvdgrY7QuLJlcz0g0Dgy0ihEVI8kZtxOSt2IP+tmZ
NVKcSz1jVeaASQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:35:43 2026 by rpki-client