Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
File: u3mEej_o5ceIRAJ8yvC9bp2kYko.mft (raw, json)
Hash identifier: /XcPrW/KNsZcg44yRhi05ftPoOGpkaWNnUsrNKhpJJY=
Subject key identifier: 76:00:D0:76:3A:F3:23:D0:8D:22:F7:4D:F8:A5:AB:3B:89:4C:7C:AA
Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Certificate serial: 019D9A74D75E741265D53F3B2AD4B345A93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
Manifest number: 0EDE
Signing time: Fri 17 Apr 2026 08:00:41 +0000
Manifest this update: Fri 17 Apr 2026 08:00:41 +0000
Manifest next update: Sat 18 Apr 2026 08:00:41 +0000
Files and hashes: 1: pcCJjdQXi7xfdCba21j2NH3xu1Y.roa (hash: NOqBLfQG0mcgz0tuCwwojXFzz2Q4UDo87fBXDInfSTU=)
2: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (hash: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU=)
3: u3mEej_o5ceIRAJ8yvC9bp2kYko.crl (hash: Au8sMM5qYJOgKMIRrZOn9MnJfst15tRkCtX+iBu3grk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d7:5e:74:12:65:d5:3f:3b:2a:d4:b3:45:a9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a
Validity
Not Before: Apr 17 08:00:41 2026 GMT
Not After : Apr 18 08:00:41 2026 GMT
Subject: CN=7600d0763af323d08d22f74df8a5ab3b894c7caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:fe:d6:8d:03:63:a6:ac:15:c6:8d:74:a2:
a9:07:7a:dc:17:09:0b:67:0b:d3:84:94:46:74:5e:
5c:5d:a2:17:af:a8:37:32:8d:f1:9f:1e:28:cd:c7:
a1:95:36:f3:94:6a:de:93:fb:4c:a0:a7:e2:61:fa:
29:33:a2:aa:2f:56:46:2d:98:30:15:90:c2:f9:cc:
ec:28:cb:05:55:80:e5:35:aa:8f:b0:bb:0c:5f:9e:
83:01:85:a5:45:9c:f3:ea:a6:37:f2:df:f7:26:39:
c7:7b:a3:a7:de:1f:3d:76:b4:2a:9e:cb:a5:e9:7c:
a7:47:ad:2f:c9:02:1e:25:24:aa:d9:33:69:6a:8f:
cf:00:44:6e:6d:59:6c:00:72:0a:71:77:16:ec:5c:
65:1d:ef:2c:e7:ac:f3:b9:6e:68:19:d3:74:f1:8f:
74:fb:46:f7:b8:3b:4f:bb:2c:1b:92:73:25:a5:45:
ab:92:2a:92:3b:78:57:55:ce:bb:06:66:e2:72:81:
0b:f5:a6:88:cd:14:d6:ff:d6:ad:73:82:8f:f7:9f:
43:77:59:88:0e:47:28:ec:63:9e:a6:f9:61:eb:b1:
c1:1c:52:e7:7c:14:c2:34:d7:38:82:53:aa:51:2a:
14:5e:69:d6:73:35:93:9d:a4:e7:2f:d0:8a:c0:bc:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:00:D0:76:3A:F3:23:D0:8D:22:F7:4D:F8:A5:AB:3B:89:4C:7C:AA
X509v3 Authority Key Identifier:
keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cf:aa:fa:9b:66:5f:3a:da:2a:18:f5:1f:9d:df:33:32:e3:
8c:f2:88:89:c3:52:43:0f:64:35:f5:5f:ed:01:ab:6b:72:97:
42:3d:d2:4a:5e:c2:5b:4e:8b:93:3e:fc:c2:96:c0:3f:7f:00:
fc:2f:ed:89:be:33:6d:60:d2:69:40:6a:6b:85:69:2c:e9:35:
d2:f7:08:0e:08:b5:96:e0:84:d2:d5:76:1a:f4:73:19:b1:40:
05:dd:2f:62:3f:5e:5e:f0:a8:63:b3:c2:80:62:a5:6e:b4:91:
b3:83:93:f1:66:ab:8b:47:f4:32:2e:4d:23:6f:cc:88:bd:33:
8c:fa:0f:45:5e:f3:13:d1:44:e4:9e:46:a2:37:0e:58:67:fe:
bf:2e:87:3c:25:2d:37:bb:c0:b8:35:91:13:54:83:92:0f:dc:
9d:84:2c:4f:72:74:d1:1d:3a:5c:ff:49:a5:44:73:a1:70:d3:
97:a2:69:9a:c2:75:74:9c:71:87:63:dd:ee:62:98:31:7e:79:
d6:ac:2b:e8:47:43:db:7b:89:83:c2:85:b5:5a:19:e6:65:1d:
a8:3f:ea:6f:6c:1d:5d:9e:07:a3:02:e0:64:00:74:f9:a2:f9:
22:72:43:93:55:a8:ac:dd:86:a7:77:54:16:92:c8:76:f4:3b:
75:43:97:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:16 2026 by rpki-client