Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: LCiBbnsJFgrrpRRlDhIsB4caH8Y6C4jMlgXHZu7cjGQ=
Subject key identifier: C0:A8:21:00:2E:93:15:0B:A9:7F:E0:6A:D6:44:E8:B2:59:F9:F4:C5
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019CA945C7C2241DA69F075F54ACCD3E3906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 0FD4
Signing time: Sun 01 Mar 2026 12:00:48 +0000
Manifest this update: Sun 01 Mar 2026 12:00:48 +0000
Manifest next update: Mon 02 Mar 2026 12:00:48 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: AVByqbzi1pbMrCFtQr7vWeTe7s2BEV2LiYe2aUKtMY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:c7:c2:24:1d:a6:9f:07:5f:54:ac:cd:3e:39:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Mar 1 12:00:48 2026 GMT
Not After : Mar 2 12:00:48 2026 GMT
Subject: CN=c0a821002e93150ba97fe06ad644e8b259f9f4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:c8:80:1c:96:1c:07:b3:21:a2:49:46:ce:
99:31:b0:22:77:dc:4a:9d:4f:97:c8:42:e9:80:71:
b0:53:87:12:55:7c:e8:da:98:13:c1:66:90:c1:95:
e5:d2:36:55:b8:4f:7b:c7:bf:16:34:00:62:cc:87:
72:89:8d:b6:b3:bd:e4:ea:1a:e7:9f:07:2e:31:92:
79:6e:5f:a6:6a:f0:f8:c1:9e:1a:af:dc:c2:0d:96:
b8:0f:1b:83:a3:ab:66:80:73:96:c1:a5:81:cc:44:
08:e2:1c:d4:e4:1a:dd:0c:d5:6f:65:c9:ef:dc:9f:
ed:49:02:44:31:2c:6c:fa:73:27:c8:1b:94:6a:a6:
94:5e:25:95:fb:91:d6:47:e7:3c:fb:63:6c:de:e2:
4c:5f:90:4a:ff:5a:d0:24:1a:9b:85:26:fe:c2:80:
30:6b:8a:c4:61:80:bb:90:04:0c:1d:3b:f1:f7:cf:
8a:f5:b9:38:24:46:63:7d:c4:68:1e:29:04:23:75:
f2:55:1c:f2:39:05:22:e2:f1:31:c5:1b:59:fc:3e:
e0:f6:df:3d:3d:52:e3:d1:10:9a:e8:bc:db:c2:2c:
93:00:3f:56:44:e2:d4:18:75:af:b0:20:42:4b:58:
e4:ba:67:9f:a8:03:41:14:6f:d4:90:43:bd:0c:65:
13:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:21:00:2E:93:15:0B:A9:7F:E0:6A:D6:44:E8:B2:59:F9:F4:C5
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:31:a9:dc:c4:de:db:fd:4d:75:cd:19:cd:e5:02:b3:2e:1f:
94:ce:16:9a:c1:d7:a7:82:b2:71:02:4e:b8:ce:6e:63:69:d0:
53:09:63:28:62:11:b2:a1:48:ea:26:2a:5e:84:28:74:78:5d:
ee:bc:44:1e:7f:27:cd:cd:78:ca:9c:e8:05:2a:a1:4e:27:06:
27:f5:9f:f2:3b:8b:60:8f:27:9c:66:f5:72:0c:18:dc:92:f7:
10:72:72:a3:64:9c:86:18:db:84:84:c6:da:e1:38:4f:35:b4:
0b:fd:21:9e:e9:11:a4:7a:cf:60:c1:af:b9:09:ed:7a:97:da:
96:23:7f:24:b5:ec:53:62:ae:eb:79:68:0f:69:ba:d0:89:da:
2a:60:8f:6a:50:2d:e7:48:a7:0a:63:1a:6f:cf:1c:61:01:bd:
00:ef:f9:13:98:21:5b:ea:1d:76:fc:f0:8b:e2:6f:74:6a:1b:
43:37:9b:ce:c7:86:06:56:43:5c:22:4b:cb:a2:dd:52:2e:bb:
9b:49:ae:81:e2:9a:4e:b1:e9:64:9d:35:d2:88:d0:4d:45:1f:
d9:0e:92:62:b1:d6:bf:58:ae:43:74:c7:85:a1:f8:cd:8b:be:
8e:df:33:56:4e:c8:94:a3:be:f9:c3:a2:02:d0:a7:c6:ab:d5:
66:8e:21:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:41 2026 by rpki-client