
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
File: u_mPikT9YO72t0nSFOVsgRiXZgw.mft (raw, json)
Hash identifier: qv0dnF0bHszSj44aAL56HDNwrkODMhUMqcZIxDTLg1s=
Subject key identifier: E0:47:B1:B1:2C:D6:53:8E:18:DB:2E:FB:96:F2:FB:43:66:C7:BE:EA
Authority key identifier: BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
Certificate issuer: /CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Certificate serial: 019CAED9BFD07E4484F3657508B457F22735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
Manifest number: 0334
Signing time: Mon 02 Mar 2026 14:00:31 +0000
Manifest this update: Mon 02 Mar 2026 14:00:31 +0000
Manifest next update: Tue 03 Mar 2026 14:00:31 +0000
Files and hashes: 1: og-DO9CncoCadS5HOAJ0BfOSnew.roa (hash: sKXs67ay0NB66Jdkd/yiUU/rBcBdOHYEFZ52pYLtyEc=)
2: u_mPikT9YO72t0nSFOVsgRiXZgw.crl (hash: 5sd4PlsGbOyVF5lL0ft7u63lVMaLHai3gb484WmQogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:d9:bf:d0:7e:44:84:f3:65:75:08:b4:57:f2:27:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf98f8a44fd60eef6b749d214e56c811897660c
Validity
Not Before: Mar 2 14:00:31 2026 GMT
Not After : Mar 3 14:00:31 2026 GMT
Subject: CN=e047b1b12cd6538e18db2efb96f2fb4366c7beea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:8a:54:76:0f:7f:bf:43:a0:fc:44:b4:be:
96:42:d4:73:29:c4:bd:f1:2f:40:cb:af:a2:44:b0:
fd:63:35:7b:ae:de:76:c7:43:6c:85:eb:46:d7:5d:
10:a4:12:43:83:54:19:c4:86:a2:ae:6a:67:44:b4:
7d:67:dc:47:bd:d4:7c:75:7f:76:f1:90:f3:0f:e2:
9d:94:14:50:2e:ca:70:89:6f:b2:f7:38:a0:ff:5f:
e1:92:86:0e:ce:ec:85:c3:80:cb:a0:bb:53:7c:d7:
30:44:03:2c:26:16:1f:6a:82:d3:a5:78:aa:96:b6:
70:66:63:76:4d:95:88:6d:bc:e2:90:cf:eb:fd:bb:
2a:a0:3b:8d:0a:2a:a6:cf:0e:c8:7e:88:73:66:2e:
90:b7:83:e6:e2:83:7b:e0:1b:4f:ee:de:bb:2a:bd:
45:5f:a5:66:8f:7a:c2:bb:55:68:67:ae:cf:47:3b:
6f:20:01:72:54:ee:90:b3:0c:d3:e4:93:e6:e1:8b:
9b:e9:d8:21:be:f9:12:61:5c:db:11:cc:95:a5:8f:
1e:50:8e:cd:a8:8b:96:49:c8:17:11:d9:01:6a:a8:
50:e0:22:ac:e7:7c:a1:1b:8d:9a:e4:28:68:3e:5f:
e6:90:ae:f4:17:31:22:a4:bb:69:6d:45:01:a7:32:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:47:B1:B1:2C:D6:53:8E:18:DB:2E:FB:96:F2:FB:43:66:C7:BE:EA
X509v3 Authority Key Identifier:
keyid:BB:F9:8F:8A:44:FD:60:EE:F6:B7:49:D2:14:E5:6C:81:18:97:66:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_mPikT9YO72t0nSFOVsgRiXZgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0b4b70-6d61-43c6-8986-41933955b73f/1/u_mPikT9YO72t0nSFOVsgRiXZgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:08:65:ac:ea:7a:0f:d4:6d:3e:3d:97:8b:a3:bd:b7:1e:1d:
a4:78:e8:97:ec:c2:85:f6:a3:25:25:ed:57:c3:9b:84:b2:ad:
65:1e:d9:b1:f7:7c:97:ec:62:11:7c:8a:51:50:7c:bb:53:20:
42:01:ab:3d:bf:a5:09:9b:c3:aa:33:69:28:f7:3c:2d:3d:19:
47:55:9c:93:de:c2:85:93:54:de:33:40:50:2e:c4:f0:a7:5c:
87:60:d8:ea:33:bc:52:cc:d3:39:a5:a2:34:57:0f:88:35:ac:
e4:7b:93:bc:20:c9:29:aa:0c:95:94:e6:08:c4:c9:61:7a:ce:
23:bc:17:3f:91:18:0d:d6:e3:05:23:36:8e:75:99:40:48:22:
43:56:cf:7e:01:b2:f5:12:f6:c7:b4:ce:c2:6e:6e:36:76:8a:
19:10:ca:6f:62:85:f5:19:22:b0:ba:a8:83:98:28:69:36:91:
df:af:d6:7e:b1:88:1f:39:71:a9:57:0b:57:3a:2e:7f:91:bd:
6c:86:a8:79:74:52:ae:77:04:02:fa:d7:db:5c:e9:9d:50:d9:
ac:d0:d6:e3:c7:6d:93:8a:9b:07:94:59:02:ce:59:65:26:7d:
ef:0a:62:f9:c5:c5:d6:13:bc:d6:4c:c7:91:2a:97:dc:7c:9e:
fd:c8:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:02:14 2026 by rpki-client