Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: csEfthGwJcIwD6OJmQoP+lz5iOVlpD3vlLKC6/aRnlM=
Subject key identifier: F0:0C:63:A8:59:27:51:97:26:95:50:65:7A:69:F9:97:B4:6D:22:0B
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019D98BD43C1499903B2A0239F649ECFC1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 1050
Signing time: Fri 17 Apr 2026 00:00:33 +0000
Manifest this update: Fri 17 Apr 2026 00:00:33 +0000
Manifest next update: Sat 18 Apr 2026 00:00:33 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: 32h7TmSzMGqcIQYMSr6Uxd1f0Djt07126PaEFoyAGTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:43:c1:49:99:03:b2:a0:23:9f:64:9e:cf:c1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Apr 17 00:00:33 2026 GMT
Not After : Apr 18 00:00:33 2026 GMT
Subject: CN=f00c63a859275197269550657a69f997b46d220b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:60:ac:b0:f6:98:dc:18:86:7e:5e:85:c1:
1a:8e:05:c8:46:11:ad:ac:1e:9d:b1:79:7c:14:90:
82:32:48:99:92:55:2b:9d:cd:49:3f:b3:59:3c:39:
e6:e8:ec:90:0f:b7:29:fe:5a:fa:da:0e:19:15:39:
46:ca:ae:7f:87:3f:b9:64:2f:2b:59:e7:57:7b:46:
d7:61:b3:43:2b:1d:f5:b8:9b:2f:f0:af:8d:ce:cc:
64:38:99:82:cc:31:95:d0:f3:03:fc:46:29:d1:83:
a9:99:1c:04:c7:0b:59:1e:eb:47:75:de:30:5c:08:
53:2f:16:0f:23:b5:40:b7:d9:b3:3e:55:3f:fd:89:
a3:16:5c:76:7b:63:ab:7f:53:da:be:14:f4:f1:c2:
d1:3d:a7:76:cd:4c:83:e8:53:b6:df:0c:c6:bb:90:
81:3d:ac:35:ea:0a:73:fb:b4:db:31:b1:83:a2:4f:
22:1c:4f:7b:6d:13:2d:38:23:63:c2:8b:e7:74:52:
e3:55:be:06:63:2e:cb:ff:d8:54:88:b2:c6:e2:62:
45:3f:7f:8c:31:77:90:ae:4f:29:f8:6f:ac:0f:34:
4a:9b:75:a7:ec:01:83:eb:d6:ff:15:0c:37:7c:bc:
be:95:e8:e3:98:dd:5f:c0:d7:98:7e:f7:c9:3e:c9:
f4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:63:A8:59:27:51:97:26:95:50:65:7A:69:F9:97:B4:6D:22:0B
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:56:90:4a:89:c4:4e:32:a1:54:55:98:99:bb:57:fa:6d:a2:
9f:c4:f1:fa:14:db:e2:5d:0d:35:b6:b9:db:da:ab:72:f6:2e:
1d:f8:c2:25:1c:45:7c:d1:ae:a0:0e:a3:d9:5c:11:24:80:63:
f7:74:c0:7f:c4:43:17:47:3c:95:64:d5:d8:7a:1a:52:3e:e3:
e3:f3:d2:8a:06:d1:b5:c9:7f:19:1d:b3:61:12:76:39:03:26:
87:bc:cb:20:3f:48:29:25:b8:08:03:30:1e:8e:4c:52:4a:52:
37:89:15:5d:34:08:b4:cf:0b:48:4d:da:76:c9:a5:10:4e:59:
f3:13:0c:0d:f7:cf:71:f9:58:c8:56:ca:72:4a:df:31:a8:de:
4d:29:24:f9:bb:12:9b:ab:01:d9:7a:67:73:a6:bc:c4:28:7c:
cd:42:70:d5:94:6f:bc:dd:cb:a1:50:08:68:94:48:68:e8:ca:
f8:72:d5:49:74:3c:0c:91:97:b8:34:c0:ed:76:c7:a3:b7:16:
c3:11:2f:99:da:af:11:b8:03:30:d3:e1:c3:20:d6:54:a9:ac:
2b:76:40:08:53:4c:cd:3a:16:af:4c:63:41:74:3e:09:9a:47:
e4:c8:49:68:6e:df:00:c0:c3:8f:30:29:69:d3:2e:15:cd:62:
67:f3:99:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:08 2026 by rpki-client