Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: aKxsls9JBZDCqwUDErBx2WC4BvinkHBtk+UIRMQYu1I=
Subject key identifier: FC:1D:BB:7A:9F:79:85:F4:02:AD:06:44:04:C1:11:CC:C5:11:A2:4D
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 019CA97CDA0F7E9AC13EE046D9D8C270DBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 17A3
Signing time: Sun 01 Mar 2026 13:00:57 +0000
Manifest this update: Sun 01 Mar 2026 13:00:57 +0000
Manifest next update: Mon 02 Mar 2026 13:00:57 +0000
Files and hashes: 1: 2YeI2iTdKuTlvqMe4sOgGCIyYoo.roa (hash: 02/F9yMKiIKlo7hndzCydCS9KD+xiL1gHlJPnwXYt3g=)
2: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: Er/orieIAGD2KFCvmShET7UzDZobHDZokG/7s1ia5W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:da:0f:7e:9a:c1:3e:e0:46:d9:d8:c2:70:db:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Mar 1 13:00:57 2026 GMT
Not After : Mar 2 13:00:57 2026 GMT
Subject: CN=fc1dbb7a9f7985f402ad064404c111ccc511a24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7b:0e:ad:c5:6f:5b:ec:85:19:72:8f:83:f0:
4d:65:d3:8d:c9:c7:da:88:29:73:9c:45:8b:ca:1c:
64:e2:0d:a7:fc:b2:49:8f:b1:35:52:91:0f:59:4e:
9a:92:97:48:b3:b2:17:7b:70:dd:50:76:30:52:6c:
b2:b3:59:26:3c:46:bb:95:b9:6b:57:b0:73:6c:1f:
67:90:ca:18:d2:41:51:40:05:b1:14:f6:33:ba:81:
53:3d:8d:43:a6:01:28:96:1c:95:e1:c3:5c:eb:b4:
76:f9:4c:28:9d:3b:79:4d:c9:15:8c:a7:f6:56:83:
01:a8:f5:ee:08:45:fb:f8:0f:34:b4:1f:13:57:47:
8b:a5:22:66:73:7f:56:57:09:8b:69:de:ab:23:fc:
88:d6:0d:84:6b:51:6b:e0:5c:fe:83:d4:ff:8b:6d:
a3:87:39:aa:29:b0:36:bc:0a:c5:40:35:04:f9:0c:
33:1f:c7:9c:4b:72:54:0c:66:4c:49:c1:27:66:02:
5c:2f:e1:38:f6:f1:16:b7:08:0e:78:7a:0b:29:bd:
d1:b9:06:7d:97:e7:bf:82:34:29:ce:a6:80:c6:11:
4b:72:d7:b7:c2:46:1c:0e:f8:0d:6a:1c:6e:18:fc:
d8:05:40:d5:ae:d2:55:e9:4e:c3:a5:26:41:2b:f2:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1D:BB:7A:9F:79:85:F4:02:AD:06:44:04:C1:11:CC:C5:11:A2:4D
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ed:b6:15:d6:65:d8:07:2c:7c:b6:18:57:62:c6:05:90:63:
74:7c:63:03:11:92:5d:57:94:98:d8:a1:30:66:fe:a0:08:f4:
93:ac:f9:b3:ed:98:8a:69:29:80:ef:8d:c1:44:2b:b7:87:c9:
90:da:10:35:38:7e:ec:98:9b:17:3b:96:a4:f6:2e:76:79:75:
97:aa:db:8b:6e:70:5d:ab:c7:6b:20:66:ea:14:52:e7:0e:2d:
64:1d:74:0c:a8:f6:6a:11:a4:00:05:89:22:cf:7f:c6:a5:94:
59:75:48:08:24:62:08:99:dc:c8:3f:65:6c:37:c1:f9:ad:4b:
57:c1:82:b3:6c:cf:bb:03:90:2c:23:3a:8f:59:60:01:97:7a:
16:1e:85:8e:6c:6d:dd:0d:5f:e7:a7:d7:a2:9b:ed:b3:f4:dc:
d8:85:9d:29:12:8d:6c:ea:d3:f3:43:13:be:15:80:9e:86:bc:
1e:59:8f:a1:35:0e:fb:04:d7:29:83:ad:bc:6e:ed:6a:64:d0:
aa:25:21:9f:99:bd:b2:a9:8f:ce:96:8b:fe:92:b6:eb:c1:2a:
49:7a:ca:d4:74:37:2f:a9:48:ed:d5:9a:45:44:80:5d:6c:6e:
83:3c:f8:a2:47:4b:9a:70:96:a7:31:b3:61:a2:b2:ec:8a:81:
c4:c1:ea:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:44 2026 by rpki-client